Privacy Policy
Last updated: May 29, 2026
Orbit is built around the idea that your data is yours. This policy explains what we collect, why, and what your rights are. Plain language, no legal traps.
What we collect
When you create an Orbit account, we collect:
- Email address — for sign-in, password reset, and account recovery
- Username — your public identifier in your orbits
- Profile data you provide — avatar, display name
- Content you create — moments, thoughts, pulses, comments, likes, memories
- Membership data — which orbits you belong to
- Device push token — only if you allow notifications, used solely to deliver them
We do not collect:
- Your contacts list
- Your location
- Your browsing history outside Orbit
- Advertising IDs
How we use it
Your data is used exclusively to operate the app:
- Display your content to the people in your orbits
- Send notifications you opt into
- Process subscription purchases (handled by Apple — we never see your payment details)
We do not sell, share, or monetize your data. There is no advertising business inside Orbit.
Where it's stored
Your data lives in Supabase-managed Postgres databases and object storage in US data centers. Access to your content is gated by Row Level Security at the database level — meaning even our infrastructure cannot read another user's private orbit data without their authentication.
Third-party services
We use a small number of services strictly necessary for the product:
- Apple — for sign in with Apple, push notifications, and in-app purchases
- Supabase — for database, auth, and storage
- Resend — for transactional emails (sign-up confirmation, password reset)
We do not use:
- Analytics SDKs (Google Analytics, Mixpanel, Amplitude, etc.)
- Advertising SDKs
- Cross-app tracking
- Crash reporting tools that share data with third parties
Your rights
You can:
- See your data — everything you've posted is visible to you in the app
- Delete your content — every post can be deleted, and memories can be removed any time
- Export your moments — when leaving an orbit, you can save your photos and videos to your device
- Delete your account — fully wipes your data from our systems. Settings → Delete account.
Requests for data access or deletion can also be sent to hello@social-orbit.app — we respond within 30 days.
Children's privacy
Orbit is not directed to children under 13. We do not knowingly collect data from anyone under 13. If you believe a child has signed up, contact us and we'll remove the account.
Changes
If we materially change this policy, we'll update the "Last updated" date and notify active users via in-app announcement.
Contact
Questions, requests, or privacy concerns: hello@social-orbit.app