FastOrbit Privacy Policy

FastOrbit — Privacy Policy

Effective date: 22 September 2026

App: FastOrbit (Android, package com.krishinnovationlabs.fastorbit)

Developer: Krish Innovation Labs

FastOrbit is an intermittent-fasting habit tracker. It does not provide medical advice. This policy explains the data we collect, why, which third-party services process it, and how to delete your data.

1. Summary

• No sign-up. FastOrbit creates an anonymous account ID for you automatically. We never ask for your name, email address or phone number.

• Your answers to the safety screening questions never leave your phone. Only the result (cleared or not) is stored.

• Health Connect access is optional and off by default. If you turn it on, FastOrbit reads only steps and heart rate for the time window of a fast you have just finished, turns them into four totals on your phone, and uses those totals only to check that the fast was genuine before awarding FastCoins. Health data is never used for advertising, never sold and never shared with third parties.

• Free users see ads from Google AdMob. Pro subscribers see none.

• You can delete everything at any time in Settings → Delete my data.

2. Data we collect

• Anonymous account ID — What: A random ID from Firebase Authentication (anonymous sign-in). Why: Links your fasts, coins and streak to you without any personal details. Where: Google Firebase.

• Fasting records — What: Start and end times (set by our server's clock), chosen plan, how the fast ended ("completed", "ended early", "felt unwell"), rewards earned. Why: The fasting timer, history, streaks and FastCoins. Where: Google Firebase (Cloud Firestore).

• Coin and streak records — What: FastCoin balance and ledger, streak length, Streak Shields, unlocked cosmetics, daily totals. Why: The rewards system and its anti-abuse limits. Where: Google Firebase.

• Time zone — What: Your device's time zone name (e.g. "Europe/London"). Why: Deciding which calendar day a fast belongs to for streaks and daily limits. Where: Google Firebase.

• Safety screening result — What: Whether you passed the screening, and when. Not your answers (age, pregnancy, eating-disorder history, diabetes, height, weight) — those stay in your phone's memory and are discarded. Why: Blocking the timer for people for whom fasting may be unsafe. Where: Result: your phone and Google Firebase. Answers: nowhere.

• Health Connect totals (optional) — What: For one finished fast: total steps, number of heart-rate readings, average heart rate, and your total steps in the 7 days before the fast. Why: Anti-cheat: spotting fasts that were not real (for example a timer left running with no activity at all). Never for ads. Where: Calculated on your phone and sent to our server; the first three are stored with that fast in Google Firebase, the 7-day total is used for the check and not stored.

• Subscription — What: Whether Pro is active and until when, plus a one-way hash of the Google Play purchase token. Why: Verifying your Pro subscription with Google Play and stopping one purchase being shared across accounts. Where: Google Firebase. Payment details are handled only by Google Play.

• Rewarded-ad confirmations — What: A one-time code linking an ad you chose to watch to your anonymous ID. Why: Granting the ad reward only after Google AdMob confirms it. Where: Google Firebase.

• Advertising data (free tier) — What: Advertising ID, IP address, device and app information, ad interactions. Why: Showing and measuring ads, and fraud prevention, by Google AdMob. Where: Google AdMob.

• App integrity signals — What: Signals from Google Play Integrity / Firebase App Check about whether the app is genuine. Why: Protecting the rewards system from modified apps. Where: Google.

FastOrbit has no analytics SDK, crash-reporting SDK, social login, contacts, location, camera or microphone access.

3. Health Connect

If you connect Health Connect in Settings, FastOrbit requests permission to read steps and heart rate only. It reads them only for the time window of a fast you have just ended, plus one 7-day step total before that fast, aggregates them on your device into the four totals above, and sends only those totals to our server. Raw samples never leave your phone.

The use of information received from Health Connect adheres to the Health Connect Permissions policy, including its Limited Use requirements. Health Connect data is not used for advertising, not sold, not used to determine credit-worthiness or for lending, and not shared with anyone except as needed to provide the feature described here. You can disconnect at any time in FastOrbit's Settings or revoke access in the Health Connect app.

4. Advertising and consent

Free users see rewarded video ads (only when they choose to watch one) and banner ads from Google AdMob, limited to content rated suitable for general audiences with parental guidance (PG). Where the law requires it (for example in the EEA, the UK and Switzerland), FastOrbit asks for your consent through Google's consent form before any ad is requested, and you can change your choice later. No fasting, screening or health data is ever attached to an ad request. See how Google uses information from apps that use its services.

5. Third-party services

We use Google as our third-party processor for hosting and services: Firebase Authentication, Cloud Firestore and Cloud Functions (data stored in the United States), Firebase App Check with Google Play Integrity, Google Play Billing, and Google AdMob. We do not sell your data and do not share it with anyone else.

6. Account and data deletion

We keep your records while your anonymous account exists. You can delete your data and your account at any time:

• In the app: Settings → Delete my data. This permanently deletes your fasting records, coins, streaks, unlocks, Pro record, rewarded-ad confirmations, hashed purchase tokens and your anonymous account from our servers, and clears the app's data on your phone.

• By email (for example if you already uninstalled): uninstalling without deleting first leaves the server records behind, unreachable by anyone, because the anonymous account cannot be signed into again. Email krishinnovationlabs@gmail.com with the account ID shown in Settings (or the approximate date you last used the app) to request deletion, and we will delete them within 30 days.

Deleting your data does not cancel a Google Play subscription — cancel that in the Play Store.

7. Security

All traffic is encrypted in transit (HTTPS/TLS). Our database rules forbid the app from writing coin, streak or subscription data directly; only our server functions can, after verification.

8. Age

FastOrbit is for adults. You must confirm that you are 18 or over before using it, and the safety screening blocks anyone under 18.

9. Your rights

Depending on where you live you may have rights to access, correct, delete or export your data, or to object to processing. Because FastOrbit holds no name or contact details, the simplest route is Settings → Delete my data; for anything else, contact us with the account ID shown in Settings.

10. Changes

We will update this page and its effective date if our practices change, and tell you in the app if a change is significant.

11. Contact

Krish Innovation Labs — krishinnovationlabs@gmail.com