Your information, explained.

1. Who we are

RHY Solutions LLC, operating as RHY Labs in New Jersey, United States, provides Nexus Orbis and our websites, rhylabs.app and rhysolutions.com. Contact support@rhylabs.app for privacy questions or rights requests. This policy covers the app and our website, including people whose details a user stores.

2. Account and contact information

We process your sign-in email, account identifier, authentication events and session information to operate and protect your account. Email codes are the normal sign-in method. Separately provisioned review accounts may use passwords, which our authentication provider stores as hashes.

We store the profile details, people, companies, contact details, addresses, relationships, notes, categories, interactions and reminder settings you choose to save. Changes sync through our servers to your private workspaces. Mobile devices keep a local copy for offline use. The web app requires an internet connection and does not persist contact records in browser storage.

You decide what information to add about other people and must have a lawful basis to keep it. Adding someone does not invite or contact them. Other users cannot browse your private records. We do not sell or rent contacts, use them for advertising, or combine different users' private contact lists.

3. Imports, camera and sharing

Phone-contact access happens only when you choose to import and grant permission. The selection list is read on the device; only contacts you choose to save are synced. Contact files are processed on the device rather than uploaded as files. The current release offers phone and file import; direct Google/Microsoft account connectors are not enabled.

Camera access is used when you open card scanning. QR cards and business-card text are read on the device. An image selected with the system photo picker gives the app access to that selected image, not your whole library. Card images and recognized text are not sent to our servers or an AI service for recognition. Temporary captured/imported image copies are removed after processing; details you choose to save become synced contact records.

You control which details appear on your own QR card and where exported files are shared. A recipient can retain those copies. Opening an address or external link passes it to the maps app or website you choose, under that provider's policy. We do not collect your device location or read your calendar.

4. Purchases and technical information

Google Play processes Android subscription payments. We do not receive your full payment-card or bank details. RevenueCat receives an app account identifier, purchase tokens, purchase/renewal/cancellation records and related app/device information to validate purchases, restore access and analyze subscription activity. Subscription status is also sent to our backend so Plus works across your signed-in devices. These essential billing records are separate from the app's optional analytics setting.

On Android, Google's ML Kit processes card recognition on the device and collects SDK diagnostics, performance/usage events and an installation identifier. This SDK collection is also separate from optional app analytics; the images and recognized text are not sent for recognition. See Google's ML Kit disclosure and RevenueCat's privacy policy.

Our hosting and authentication providers process network information such as IP addresses, request times and error/security logs to deliver and protect the service. App analytics are off by default. No optional app analytics or crash-reporting destination is configured in this release. The marketing website has no advertising or analytics script; its hosting provider still processes requests needed to serve and secure it. We do not use advertising identifiers or track you across unrelated apps or websites.

5. Support and service providers

If you send feedback or email support, we process your message and contact information to respond. Optional in-app diagnostics include technical state, app/OS version, error codes and rounded record counts, not contact contents. The current production feedback service uses rule-based replies; no external AI feedback provider is configured. Do not send passwords, sign-in codes, payment-card details or private contact lists to support.

Supabase hosts our database, authentication and server functions; our production project is in US East. Resend delivers sign-in emails and processes recipients' email addresses and message contents. Google Play and RevenueCat handle Android purchases and subscription records. Google supplies Android ML Kit. Expo provides app build/update delivery. Our website is hosted through Sites and Cloudflare; support email is forwarded to our business inbox. Service providers process relevant data to perform these functions. App stores, maps services and external websites also apply their own policies.

Records may be processed in the United States and other countries where these providers operate. Contact us for information about the safeguards applicable to your information and the providers involved. We may disclose information when necessary to comply with law, protect people or the service, resolve disputes, or carry out a business transfer subject to applicable protections. Service operators may access data for these limited operational purposes; private workspaces are not a claim of end-to-end encryption.

6. Retention and deletion

We keep account and synced records while needed to provide your account, until you delete individual records, a space or your account. Successful in-app account deletion removes the authentication account and its associated workspaces and records from the active application database. Uninstalling the app alone does not delete the synced account.

Support correspondence, security logs and purchase records may be retained where needed to resolve requests, prevent fraud, meet legal/accounting duties or establish legal claims. The relevant purpose and legal requirement determine that retention; we do not retain contact records for advertising. Provider logs and backup copies may remain until their normal expiration. App stores and billing providers may retain their own transaction records under their policies. Exported or shared copies held by you or recipients are outside our control.

Use Me → Account → Delete account, or follow our account deletion instructions. You can request deletion without reinstalling the app by emailing support from the account email. We verify ownership before acting. Deleting an app account does not cancel a store subscription: cancel it separately in Google Play to stop renewals.

7. Choices and rights

You can edit records, export a space's data, delete records or your account, decline optional imports, and revoke camera/contact permissions in your device settings. Depending on where you live, you may also have rights to access, correct, erase or receive a copy of personal information; restrict or object to processing; withdraw consent; appeal a decision; or complain to a privacy regulator. Email support with your request. We may need proportionate information to verify identity, but never your password or sign-in code.

Where applicable, our legal bases are providing the service you request, legitimate interests in security and support, complying with law, and consent for optional access or uses that require it. Withdrawing consent does not affect processing already lawfully performed. We do not sell personal information or share it for cross-context behavioral advertising. We do not discriminate against people for exercising applicable privacy rights.

8. Age, unavailable features and changes

Nexus Orbis is intended for adults aged 18 or older, not children. Contact support if you believe a child has provided information. Public member profiles, Enrich and Pro are not enabled in this launch. We will update disclosures and obtain any necessary consent before enabling materially different data uses.

We update this policy when the service or its practices change and show the new effective date. We provide additional notice or seek consent where required. For help, email support@rhylabs.app.