Privacy Policy

Our commitment

Your entries are private by default. Only you, signed into your account, can read what you write. We do not sell your data, we do not show you ads, and we never use the contents of your entries to train shared or public AI models. We collect the minimum we need to make Orbit work and to keep it secure — nothing more.

Why we store data

Orbit's whole purpose is recall — being able to search, review, and find patterns across everything you've ever written. That only works if your entries persist and sync across your devices. So we store what you write, tied to your account, so it's there when you come back to it. Where we can keep something on your device instead of our servers, we do.

Information we collect

We keep this short on purpose. We collect:

• Your email address. Used to sign you in (we send a one-time code — Orbit has no passwords) and, if you joined the waitlist, to tell you when Orbit opens.
• Your entries. The notes, thoughts, and drafts you write, plus their timestamps and any tags or structure you add.
• Derived data we generate for you. Things like search embeddings, weekly reviews, and drafts that Orbit produces from your entries to power recall and Ask.
• Basic technical and diagnostic data. Limited information needed to operate the app reliably — such as app version and error logs. We aim to keep this free of entry content.

We do not collect biometric data. If you unlock the app with Face ID or Touch ID, that happens entirely on your device — Orbit only ever receives a success or failure, never your biometrics.

How we use your information

We use your information only to run the product:

• To save, sync, and show you your own entries.
• To power recall features — search, Ask, weekly Review, and Drafts.
• To sign you in and keep your account secure.
• To fix bugs, prevent abuse, and keep the service running.
• To email you about your account or, for waitlist members, about launch.

AI processing

Features like Ask, weekly Review, search, and Drafts are powered by AI. To provide them, the relevant parts of your entries are sent — over an encrypted connection — to our AI provider, OpenAI, which processes them and returns a result to your account. This happens only to serve your request, for your account.

We use OpenAI through its API, where, under OpenAI's policies, data sent via the API is not used to train its models. We do not use your entries to train any model — ours or anyone else's — and your thoughts are never pooled with other users' to build shared models.

Third-party services

We rely on a small set of trusted infrastructure providers to operate Orbit. Each receives only what it needs to do its job:

• Supabase — our database and backend, where your account and entries are stored.
• OpenAI — AI processing for Ask, Review, search, and Drafts (see above).
• Resend — sends transactional email such as your sign-in code. It receives your email address, never your entries.
• Vercel — hosts our website and waitlist form.
• Apple — distributes the iOS app and processes any purchases. We never see your full payment details.

We do not share your entries with advertisers or data brokers, and Orbit contains no third-party advertising trackers.

We never disclose your entries

The contents of your entries are not read by our team as a matter of course. We access entry content only in narrow, necessary cases — for example, if you explicitly ask us for support with a specific problem, or where we are legally required to. We will never sell, rent, or trade the contents of your thinking.

Security

Your data is encrypted in transit (TLS) and encrypted at rest by our infrastructure providers. Access to production systems is limited to authorized personnel and protected by authentication controls. No system is perfectly secure, but we treat the privacy of your thinking as the core promise of the product and build accordingly.

Data retention and deletion

We keep your entries for as long as your account is active, because that's what makes recall work. You can delete any individual entry at any time. When you delete your account, your entries and associated data are removed from our active systems. Residual copies may persist briefly in encrypted backups for disaster-recovery purposes before being overwritten, after which they are permanently gone.

Your rights

You are always in control of your data. From within the app you can:

• Export everything you've written, in a portable, dated file.
• Edit or delete any entry.
• Delete your account and all associated data, permanently.

Depending on where you live, you may have additional rights to access, correct, or restrict the processing of your personal data. Email us and we'll help you exercise them.

Waitlist

If you join the waitlist before you have an account, we store only your email address so we can let you know when Orbit opens. We won't share it, and you can ask us to remove it at any time.

Children's privacy

Orbit is not directed to children under 13 (or the minimum age in your country), and we do not knowingly collect their data. If you believe a child has provided us information, contact us and we'll delete it.

Changes to this policy

We may update this policy as Orbit evolves. When we make material changes, we'll update the date above and, where appropriate, notify you. Continued use of Orbit after a change means you accept the updated policy.

Contact us

Questions, requests, or concerns about your privacy? Email hello@useorbit.ink and a real person will get back to you.