Privacy Policy

When you use Orbit (including the iOS app and web app), we may collect the following types of information:

• Contact info — your email address and, if you create a username, that username.
• Identifiers — your Orbit account ID and, on iOS, an Apple-assigned transaction or subscription identifier used to validate purchases.
• User content — tasks, projects, milestones, habits, and other productivity content you create inside the app. This content is stored in your account and is not shared with third parties except as described below.
• Purchases — subscription and in-app purchase records (plan type, billing period, purchase date, renewal status). On the web, payments are processed by Stripe. On iOS, in-app purchases are processed by Apple. Orbit does not receive or store your full payment card details.
• App usage data — XP, level, inventory, rewards, and feature interactions used to operate the gamification experience.
• Product analytics — usage events tied to your Orbit account ID (for example: app opened, a screen was viewed, a mission/project/habit was completed, the Voyager paywall was viewed, a purchase was verified). See Analytics below for exactly what is, and is not, included in these events.
• Technical data — device type, OS version, logs, and approximate region, as may be collected by hosting or analytics providers.

We use the information we collect to:

• Provide and operate the Orbit app experience across web and iOS
• Save your progress, XP, rewards, and preferences
• Manage your account and authentication
• Validate and fulfill in-app purchases and subscriptions
• Improve the product and fix issues
• Prevent abuse or fraud
• Respond to support requests

The Orbit iOS app is available on the Apple App Store. When you make a purchase or subscribe through the iOS app, the transaction is processed by Apple via In-App Purchase (IAP). Apple's privacy practices govern how payment data is handled on their end; we receive only the information Apple provides to verify your purchase (such as a transaction ID and product ID). We do not receive your payment card details.

Purchase records linked to your Orbit account (plan type, renewal status, original purchase date) are stored in our database to unlock features you are entitled to.

Orbit uses trusted third-party service providers to operate the platform. These may include:

• Apple — iOS in-app purchases and App Store distribution
• Stripe — web payment processing
• Vercel — hosting and deployment
• Neon — database storage
• Resend — transactional emails
• OpenAI — AI-powered project and task suggestions (available on eligible plans)
• PostHog — product usage analytics; see Analytics above for what is and is not collected

These providers have their own privacy practices. We use reasonable measures to select reputable providers and limit data sharing to what is necessary.

When you use AI-powered features in Orbit, the content you submit — such as task or project prompts — may be sent to an AI provider to generate suggestions. Do not enter sensitive personal information into AI prompts. AI suggestions are for convenience only and may be incomplete or inaccurate.

Orbit uses PostHog, a product analytics service, to understand how the app is used so we can improve it. This is product analytics, not advertising — we do not use it for ad targeting, and we do not sell or share it with data brokers.

Analytics events are tied to your opaque Orbit account ID (never your name, email, or payment details) and record things like:

• That you signed up, opened the app, or viewed a primary screen
• That a mission, project, or habit was completed, or an AI project was generated
• That the Voyager paywall was shown, a purchase was started, or a purchase/restore was verified by our backend
• That you became eligible for, or were shown, the App Store review prompt

We do not send PostHog:

• The text of your missions, projects, milestones, habits, or notes
• Content you submit to AI features, or AI-generated results
• Payment card numbers, full purchase/transaction identifiers, or webhook/receipt payloads
• Auth tokens, request/response bodies, or raw error messages or stack traces
• Advertising identifiers or cross-app/cross-site tracking data

We do not use session replay, screen recording, or automatic capture of every tap, click, or page view — only the specific events listed above. Analytics is best-effort and never affects whether an action in Orbit succeeds: the app behaves identically whether or not an analytics event is delivered. Logging out resets your local analytics identity so later activity on that device is not linked back to your prior session.

The Orbit web app may use cookies or similar technologies for:

• Authentication and session management
• Core app functionality
• Product analytics (PostHog) — see Analytics above

The iOS app does not use browser cookies. It may use local device storage for caching session tokens and app preferences.

We keep your account data for as long as your account is active or as needed to provide the service, comply with legal obligations, resolve disputes, and enforce our agreements. You may request deletion of your account at any time from the app settings or by contacting support.

We use reasonable technical and organizational measures to protect your information. No system is perfectly secure, but we work to keep your data safe using industry-standard practices.

Orbit is not directed at children under 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

Questions about this policy? Reach mission control at support@keeporbit.app.