Privacy & permissions

Orb is an Android preview. This page describes the current v1.0.0 source; the website demo and the installed app have different data paths.

On this website

Payment, safety and agent examples run locally. They do not connect a wallet, analyze your real messages or send transactions. Search and examples stay in this page. Installation checklist progress is stored locally in your browser. The site host receives normal requests for pages, fonts and download files.

In the Android app

Email sign-in and the embedded wallet use Privy. Keys are held by the device wallet flow. When you use online assistance, the app sends selected screen context and your request to its configured agent server, which may use Anthropic and read-only blockchain RPC services. Accessibility context is captured when you tap the orb. The native handoff expires after 120 seconds; consumed text can remain in the Ask session and included text is sent to the server on requests. You can inspect or exclude it.

Android permissions

• Display over other apps: draws the floating orb.
• Accessibility: reads visible text on demand; copied text is an alternative.
• Notifications: supports the foreground service and incoming agent requests.
• Battery optimization exemption: helps keep the service running.

Voice and approval

Android’s speech dialog handles voice input. The app does not need its own microphone permission for that dialog. Voice does not approve a payment. Device authentication is used where available; this preview otherwise offers hold-to-confirm.

Preview limitations

Scam Shield is a risk indicator, not a safety guarantee. The release is debug signed and its online features depend on the configured backend. Agent queue limits and authenticated wallet ownership binding need further hardening before production use.