Legal and privacy

Consumer Health Data Privacy Policy

Version 2026-11-01

For people in Washington, Nevada and anywhere a similar law applies. It adds to our Privacy Policy.

The only health-related data Orby handles is the measurement of your face during the ID and selfie check. Laws in Washington and Nevada count this biometric data as consumer health data. Orby doesn’t ask for, collect or infer anything about your physical or mental health, health care, or sexual or reproductive health.

What, and why. Veriff, our verification provider, measures your face to match your selfie with the photo on your ID, only to confirm you’re the person on the ID and an adult. Nothing else.

Where it comes from. From you: the selfie and ID photo you take in the app.

Your consent first. Right before the check, we ask for a separate yes: “I agree that Veriff measures my face to match my selfie with my ID photo, only for this check, and deletes the measurements after 3 months.” Without it, the check doesn’t start. You can withdraw it by writing to privacy@joinorby.com; you then can’t complete verification.

Who it’s shared with. Only Veriff, which does the check for us as our processor, stores it in the European Union (Ireland), and may process it with its partners in the UK, the US, Brazil and India. Orby itself never receives the measurements, the selfie or the ID images. We never sell it, and never share it for advertising.

How long. Veriff deletes it after 3 months, or sooner where the law requires.

Your rights. You can ask whether we or Veriff hold your consumer health data, get a copy, have it deleted, and see who it was shared with. Write to privacy@joinorby.com; we confirm it’s you and answer within 10 working days. If we say no, you can appeal by replying to our answer; if you’re still not satisfied, you can contact your state’s Attorney General.

Recyco Tech LLC, 1401 21st St, Sacramento, CA 95811, United States · privacy@joinorby.com