# Privacy Policy — Orbital Mind

**Last updated: July 2026**

## Overview

Orbital Mind is a 100% offline mind mapping application. We are committed to protecting your privacy and ensuring your data remains secure and under your control.

## Data Collection

**We do not collect any personal data.** Orbital Mind operates entirely offline. No data is transmitted from your device to any server.

### What stays on your device:
- Mind maps, nodes, and connections
- Work plans and task groups
- Secret notes (encrypted with AES-256-CBC)
- App preferences and theme settings
- Backup files (encrypted locally)

### What we never collect:
- Personal information (name, email, phone)
- Usage analytics or behavioral data
- Location data
- Contact information
- Device identifiers (except for optional license activation)

## Optional Features That Use Network

The following features require an internet connection and are entirely optional:

### Premium License Activation
- When you purchase premium and activate your license key, a one-time request is sent to our server to verify the key.
- We store: a hashed version of your license key, device name, and activation timestamp.
- We do NOT store: your personal data, app content, or usage patterns.

### Premium Purchase (Google Play)
- If you purchase premium through Google Play, the transaction is handled by Google.
- We verify the purchase token with Google's servers.
- We do not access your payment details.

## Encryption & Security

- All secret notes are encrypted at rest using AES-256-CBC
- Encryption keys are stored in Android Keystore (hardware-backed)
- HMAC-SHA256 integrity verification prevents data tampering
- Backup files use PBKDF2 key derivation (100,000 iterations)
- Passwords are hashed with salted SHA-256 (never stored in plaintext)

## Data Storage

All data is stored locally on your Android device using:
- Isar database (embedded, no network access)
- SharedPreferences (encrypted via Android Keystore)

No cloud database, no server sync, no remote storage.

## Third-Party Services

- **Google Play Billing**: For premium purchases via Play Store (Google's privacy policy applies)
- **Razorpay**: For web-based premium purchases only (Razorpay's privacy policy applies)

We do not use any analytics SDKs, crash reporting services, or advertising networks.

## Children's Privacy

Orbital Mind does not knowingly collect information from children under 13. The app contains no social features, no user-generated content sharing, and no advertising.

## Data Deletion

Since all data is stored locally on your device:
- Uninstalling the app permanently deletes all data
- You can clear app data from Android Settings at any time
- No server-side data to delete (we don't have any)

## Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on our website and noted in app update release notes.

## Contact

If you have questions about this privacy policy:
- Email: creativeaipeople@gmail.com
- Website: https://creative-ai.biz

---

*This privacy policy is effective as of July 2026.*