Summary
Orion works by watching which app is in the foreground on your device and showing a full-screen "block" overlay over apps you've chosen to lock. Doing this requires broad-sounding Android permissions, but Orion does not collect browsing history, message content, or any data from inside the apps it blocks.
Information we collect
Account information
When you sign in with Google, we receive and store:
- Your name, email address, and profile picture (from your Google account)
- A unique user ID used to associate your data across devices
This is handled by our backend provider, Supabase, and Google Sign-In. We do not receive or store your Google password.
Onboarding responses
During setup, we ask why you're using Orion, your age range, and your occupation. These answers are:
- Stored against your account in our Supabase database
- Cached locally on your device (via Android SharedPreferences) so the app's "roast" messages can be personalized even when you're offline
App usage data
To block apps, Orion needs to know which apps are installed and which one is currently in the foreground. Specifically, we process:
- The list of apps installed on your device (app names, package names, and icons)
- Which apps you choose to lock
- Foreground/usage timestamps for locked apps, via Android's Usage Access API, used only to detect when a locked app is opened and to compute on-device statistics (e.g. minutes spent in an app today, average session length)
- Counts of how many times a locked app was blocked ("blocked opens") and how many times you chose "Open Anyway" ("allowed opens")
- Your current lock streak (days since you started locking apps)
We do not collect the content you view or type inside other apps, browsing history, messages, or any data from within the apps you lock — only the fact that the app was opened and for how long it was in the foreground.
Diagnostic and technical data
We do not currently use any analytics or crash-reporting SDKs. Supabase, our backend provider, may log standard request metadata (e.g. IP address, timestamps) as part of operating its infrastructure; we do not use this for tracking or profiling.
Android permissions we request
PACKAGE_USAGE_STATSTo detect which app is currently in the foreground, so we can show the block screen over locked apps and calculate usage statistics.
SYSTEM_ALERT_WINDOWTo show the full-screen block overlay on top of a locked app, including while Orion itself is backgrounded or has been killed by the system.
QUERY_ALL_PACKAGESTo show you the complete list of apps installed on your device so you can choose which ones to lock.
POST_NOTIFICATIONSTo show the persistent notification required while the blocking service runs in the foreground.
To prevent Android from killing the background blocking service, which would let locked apps go unblocked.
Required by Android to run the always-on monitor that watches for locked-app launches.
You can review or revoke any of these permissions at any time in your device's Settings. Revoking Usage Access or Display Over Other Apps will prevent Orion from being able to block apps.
How we use your information
We use the information described above to:
- Operate the core app-locking and block-screen features
- Personalize the "roast" messages shown on the block screen
- Show you your stats (streak, time saved, blocked opens) on the home and profile screens
- Maintain your account and sync your onboarding answers across devices
- Sign you in via Google
We do not sell your data, and we do not use it for advertising or share it with data brokers.
Data storage and retention
- On-device data (locked app list, blocked/allowed open counts, streak start date, cached onboarding answers) is stored in your device's local app storage and is deleted when you uninstall Orion.
- Account and onboarding data is stored in our Supabase database, tied to your account, until you delete your account or request deletion.
Third-party services
Orion uses the following third-party services to operate:
- Supabase — backend database and authentication. See Supabase's privacy policy.
- Google Sign-In — authentication. See Google's privacy policy.
These providers may process data on our behalf under their own privacy and security terms; we do not permit them to use your data for their own purposes.
Your choices and rights
- Access/Deletion: You can request access to or deletion of your account data by contacting us (see below). Deleting your account removes your onboarding responses from our database.
- Permissions: All Android permissions listed above can be revoked at any time via system Settings.
- Sign out: Signing out ends your Supabase session and Google session on this device; locally cached blocking data remains until you uninstall the app or clear app storage.
- Uninstall: Uninstalling Orion removes all on-device data, including your locked app list and usage statistics.
Children's privacy
Orion is not directed at children under 13, and we do not knowingly collect personal information from children under 13.
Changes to this policy
We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above.
Contact
Questions about this policy or your data can be sent to:
1.suyashk@gmail.com