Who we are
Orbi Service App is a staff application for hotel housekeeping. It is operated by Orbi Hotels, Khimshiashvili str 7, Batumi, Georgia. This policy covers the Android app published on Google Play under the name Orbi Service App.
Privacy contact: orbihotels@gmail.com.
The app is for hotel employees. It is not directed at children. Accounts are created by the hotel, not by self-service signup in the app. We do not knowingly collect personal data from anyone under 18.
What the app does
Housekeeping staff receive room tasks from the hotel and record their work: task status, comments, photos, and reports about room facilities and technical items. Staff can also switch the electricity in a room on or off, join hotel Wi-Fi, and receive notifications about new or changed tasks.
The sections below describe the data each of these features handles, where it goes, and how long we keep it.
Data we collect and send off the device
“Collected” means the data leaves the phone and is sent to us or to a service that works for us. The headings match the categories used in the Google Play Data safety section.
Name and user IDs
When you sign in, we receive your username and password. The hotel’s record of your employee id, name, and role is returned to the app, and a sign-in token is kept so the app can load your tasks and stay connected for live task updates. The live connection identifies you by your employee id.
Work records (other user-generated content)
Comments, facility reports, technical-item reports, and task status changes you make are sent to our servers and to the hotel management system. Each entry is stamped with your employee id, your name, and the time. These are work records of the hotel and appear to supervisors and colleagues who work on the same task.
Photos
If you attach a picture to a task, the app reads it from the camera or the photo library and uploads it to our servers. Photos are optional. We use them only as work records for that task.
Room power actions
When you turn a room’s electricity on or off in the app, we record your name, the room and its meter, the reason you selected, the new state, and the time. The app also reads the current meter state. This record is sent to our servers and to the hotel management system and is kept as the hotel’s audit trail of who changed a room’s power and why.
Device or other IDs
The app and the libraries inside it collect identifiers that relate to the device or to this installation. We collect them. You cannot switch this collection off while you use the app. We do not use them to show ads.
- A Firebase Cloud Messaging registration token, sent to Google Firebase and to our servers, and stored with your employee id, so we can deliver work notifications.
- A Firebase installation identifier, used by Firebase to address this installation.
- The Android advertising ID. The app includes the Android advertising-ID permission. Google Play services and Firebase may read that ID. The app does not show advertisements and does not use this ID for advertising or marketing.
- Device and installation context (device model, operating system version, app version, a per-installation identifier) sent to Sentry with crash and performance reports.
We do not collect IMEI, IMSI, or SIM serial numbers, and we do not link those persistent hardware identifiers to your account.
App info and performance, crash logs, diagnostics
The app sends its version number to our servers so we can tell you when an update is required. Sentry receives crash reports, performance traces, and your IP address. Performance traces include which screens you open, the addresses and timing of requests the app makes to our servers, and how long they take. We use this to find and fix faults. We do not use it for advertising.
Messages (notifications)
Notifications about tasks (for example, a task was created, changed, or assigned to you) are generated by the hotel system and delivered through Google Firebase. The notification text, which may include the room and task name, passes through Firebase to reach your phone. Firebase does not use it for its own purposes.
Data kept on the device
The following stays on the phone and is not sent to us unless stated.
- Remember me. If you turn it on, the app stores your username and password in its app storage so you can sign in again. Turning it off removes them.
- Language you selected for the app.
- Cached tasks and an offline queue. The app keeps your task list on the phone so you can work without a connection. Changes made offline (status, comments, facility reports, power actions, and photos) are stored in a local database together with your sign-in token and are sent to our servers when the phone is back online. The queue is cleared when it has been sent or when you sign out.
- Hotel Wi-Fi. The app downloads the names and passwords of the hotel’s staff Wi-Fi networks from our servers and stores them on the phone so it can connect you. This is hotel data, not data about you.
- Location permission and Wi-Fi scanning. Android requires the precise-location permission before an app can scan for Wi-Fi networks. We use that permission, together with nearby network names (SSID) and hardware addresses (BSSID), only to find and connect to hotel Wi-Fi. We do not upload your GPS coordinates, SSID, or BSSID, and we do not use them for advertising.
- Biometrics. If you use fingerprint or face unlock to fill in your saved sign-in, the check stays inside the operating system. We do not receive or store biometric templates.
- Microphone. The app package includes a microphone permission. The app does not record audio and does not upload recordings.
What we do not collect
We do not collect your email address, contacts, payment or financial data, health data, SMS, call logs, or a list of other apps on your phone. We do not sell personal data. We do not share it with advertisers or data brokers.
Who receives the data
- Our servers (housekeeping-api.everridge.cloud) — your account, tasks, comments, reports, photos, power actions, push token, and app version. This service runs for Orbi Hotels.
- The hotel management system — task records, work records, and power actions, so the hotel can run housekeeping and keep its audit trail. Supervisors and colleagues see the records for the tasks they work on.
- Google Firebase — the push token, the Firebase installation identifier, and notification content, so notifications can be delivered. Firebase processes this for us. We do not use Firebase for ads.
- Sentry (Functional Software, Inc., United States) — crash logs, diagnostics, performance traces, device context, and IP address, so we can fix the app. Sentry processes this for us.
- Google Play — only if you tap Feedback in the app menu, which opens the app’s page on Google Play. Anything you do there is covered by Google’s privacy policy, not this one.
We may also disclose data if the law requires it, or if the hotel operation that uses the app is transferred, in which case staff data needed to run the service may transfer with it. We will not sell it.
Why we use it and on what basis
- App functionality and account management — sign-in, tasks, work records, photos, room power, Wi-Fi, and notifications.
- Analytics — crash logs, diagnostics, and performance traces, so we can see what failed. This is not advertising analytics.
We process this data because it is needed to organise and record the housekeeping work you do for the hotel that employs or contracts you, and because we have a legitimate interest in keeping the app working and in keeping an accurate record of who changed a room’s power and when. We do not use your data for advertising, profiling, or marketing.
Where it is processed
Our servers and the hotel management system process data for Orbi Hotels in Georgia and in the data centres of our hosting provider. Google Firebase and Sentry process data on their own servers, which may be outside Georgia, including in the United States. We use these providers under their standard terms, which require them to protect the data and to use it only to provide their service to us.
Security
Traffic between the app and our servers is sent over HTTPS. Access to your tasks requires the sign-in token issued when you log in. If you turn on Remember me, your username and password are stored in the app’s storage on the phone; protect the phone with a screen lock and turn Remember me off on any phone you do not control. No method of storage or transmission is perfectly secure.
How long we keep it
Account data, tasks, comments, reports, and photos stay while your staff account is active and for as long as the hotel needs them for operations. After the hotel closes the account, we delete or anonymise that data when it is no longer needed for those operations or for a legal duty.
Room power action records are kept for as long as the hotel keeps its operational audit trail. After your account is closed, your name can be removed from those records on request while the record of the action itself remains.
Push tokens are replaced when the app refreshes them and are dropped when the account is closed. Crash and diagnostic data is kept only as long as needed to investigate faults. Sentry applies its own shorter retention to events we send there.
On the phone, the offline queue is cleared once it has been sent or when you sign out. If you turn Remember me off, or sign out without it, the app removes the username and password it stored on the device.
Your rights
You can ask us what personal data we hold about you, ask us to correct it, ask us to delete it, or object to how we use it. Email orbihotels@gmail.com. We answer within one month. You can also raise a complaint with the Personal Data Protection Service of Georgia.
Delete your data
Email orbihotels@gmail.com and ask us to delete your Orbi Service App account and the personal data tied to it. Include your name and the username you use in the app.
The hotel creates staff accounts. There is no signup inside the app. A deletion request closes the account and removes the associated personal data we hold, including the push token linked to that employee id. We may keep a limited record where the law requires it, or where a work photo, comment, or power action must stay as part of the hotel’s operational record after your name is removed. Freezing the account is not a substitute for deletion.
You can also ask the hotel that issued your account to make the same request.
Changes
We will post any change on this page and update the date at the top. The current policy is always this page: https://docs.orbigroup.cloud/policies/orbi-housekeeping/policy.html.