00/Privacy policy

Your people stay on your phone.

This is the plain version, and it’s also the real policy. If something here is unclear, email us and we’ll fix the wording.

Last updated [date]

Account

None. Nothing to sign up for.

Your people

Encrypted, on your phone only.

Calls and messages

Never read. Not ever.

Leaves the phone

Purchase status. AI notes if you opt in.

What stays on your phone

Everything you put into Orbital: the people you add, how often you want to talk, your notes, your moments, your windows and your history.

It’s stored in an encrypted database on your device. The key is held by your phone’s secure hardware (Android Keystore, or the iPhone Keychain), so another app can’t read it. We don’t have a copy, and we can’t see it.

The home screen widget shows first names and times. That small summary is kept in your phone’s encrypted storage too, and is only shared with your home screen so it can draw the widget.

What we never do

No account: No email, password or profile. We don't know who you are.
No contacts upload: Only the people you pick are saved, and only on your phone.
No call log or SMS: Orbital never asks to read your calls or messages. You tell it when you've talked.
No ads: There are none, and no ad networks inside the app.
No tracking: No analytics or tracking tools, and no advertising ID.
No selling: We don't sell or share data. We don't have it to sell.

Permissions, and why we ask

Every permission is optional. Say no and Orbital still works, it just does less.

Notifications: To tell you when a window opens, and to ask how a catch-up went.
Calendar: To find time you're actually free. Orbital reads start and end times, and shows event titles back to you so you know why a time was skipped. It never saves or sends them.
Contacts: To pick your people. Only the ones you choose are kept: name, number and photo. The rest of your contacts are left alone.

What leaves your phone

Only two things, and one of them is off unless you turn it on.

If you subscribe

Payments go through Google Play (or the App Store). We use RevenueCat to check whether you have Orbital Pro. They receive a random ID made on your phone, and your purchase details from the store: which plan, when, and whether it’s active. Not your name, not your people. Google or Apple handle your payment details, never us. How subscriptions work is in our terms.

If you turn on note summaries

This is off by default. If you switch it on, Orbital asks first, every time it’s about someone new.

When you ask for a summary, the notes for that one person are sent over an encrypted connection to Orbital’s server, which passes them to Anthropic (the company that makes the Claude AI model) to write the summary. The summary comes back to your phone.

Our server doesn’t store your notes. Anthropic processes them in the United States and keeps them for [retention period, to confirm against Anthropic’s current API terms]. They are not used to train AI models.

Notes can include personal things, like someone’s health. If a note holds something they wouldn’t want shared, leave summaries off for that person.

Nothing else is sent. No crash reports, no usage stats, no ads.

This website

This site sets no cookies and runs no analytics or tracking. The server that hosts it may keep standard access logs (such as IP address and browser) for security, for a short time.

Backups, export and deleting

Deleting. Remove someone and everything about them goes with them. Delete the app and all of it is gone from the phone.

Phone backups. Your phone’s own backup (Google or iCloud) may include Orbital’s encrypted data. That’s between you and Google or Apple. We can’t read it.

Your purchase record. RevenueCat keeps it so you can restore Pro on a new phone. Email us and we’ll ask them to delete it.

Seeing your data. It’s all in the app. Because we hold nothing about you, there’s nothing for us to send.

Children

Orbital is for people aged [minimum age] and over. It isn’t designed for children, and we don’t knowingly collect anything from them.

Data outside Australia

Orbital is run from Australia. RevenueCat and Anthropic are based in the United States, so the information described in section 04 is handled there. We only use providers who agree in writing to protect it and use it only to provide their service to us.

Questions and complaints

Email privacy@myorbital.app. A real person reads it, and we’ll reply within 30 days.

If you’re not happy with our answer, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

[Business name and ABN]

Changes

If this changes, we’ll update the date at the top. If anything new would leave your phone, the app will tell you and ask first.