Orbit Staff
Privacy policy
Orbit Staff is a free phone app for employees of companies that use Orbit HR. Your requests go straight to your employer's office computer over the office Wi-Fi, encrypted end to end. Orbit never receives your HR records. Written to meet Malaysia's PDPA 2010. Last updated 4 November 2026.
Who holds your data?
Your employer. They are the data user under the PDPA. For access, correction or deletion of your records, contact your employer's HR. Orbit Staff is made by Mushnor Heritage Resources (SSM 201803323851), Pulau Pinang, Malaysia, which runs no server for the app.
What does the app send to your employer?
- Leave, overtime, claim, outing and work report requests you make
- Your clock in and clock out times and timesheet corrections
- Profile details you choose to update: phone, email, address, emergency contacts
- A photo at clock in, and your location once at clock in or out, only when your employer turns this on
- Receipt photos you attach to claims
- On iPhone, a notification token so the office can tell you about decisions. Notifications carry only a type and a reference, never content.
What stays on your phone?
Copies of your records, payslips and documents your employer has sent you. Unlinking the phone ("Unlink this phone") deletes them.
What does the app never do?
- No advertising, analytics or tracking
- No sale of data, and no sharing of HR records with anyone other than your employer
- No access to your contacts, messages or other apps
How is your data protected?
Every request and reply is end-to-end encrypted between your phone and your employer's office. Payslips can require Face ID or your fingerprint before opening.
Is it for children?
No. Orbit Staff is a workplace app for adults aged 18 and over.
What about the demo workspace?
"Try a demo workspace" uses sample data on your phone only. Nothing you enter in the demo leaves the phone.
Who do you contact?
Questions about this policy: support@orbitsuite.io. Questions about your records: your employer's HR.