Orbit is a calendar, diary and people helper, made with neurodivergent people in mind. What you tell Orbit is personal, so this page explains plainly what happens to it.
Everything you add to Orbit is stored on your phone: plans and reminders, sticky notes and lists, goals and their steps, diary entries and their highlights, weekly summaries, mood and energy check-ins, people and your notes about them, gift plans, your favourite places, "what helps you", your answers to "About you", and what Orbit has learned about you. You can see and delete all of it in the app (Settings → Privacy & data, and Settings → You → What Orbit knows about you).
When you tap the mic, your speech is turned into text by your phone itself (Apple's on-device speech recognition). The recording is never sent anywhere, including to Orbit.
When you add plans from a screenshot, your phone reads the words in it itself (Apple's on-device text recognition). The picture is only sent anywhere if you tap "Let Claude look at it" (see below).
Orbit speaks in its own natural voice, made by Google (see "Orbit's voice" below). If you choose "This iPhone's voice", speech is made on your phone and nothing is sent.
Reminders are scheduled on your phone and never pass through a server. Orbit's server sends only short announcements, like “A new Orbit is ready”, through Expo's push service; for these it keeps your phone's push address, the app's build number and language, linked to your install's anonymous ID, never what your reminders say. You can choose "Private notifications" so the lock screen doesn't show what a reminder is about, and lock Orbit with Face ID.
Simple sentences ("Lunch with Emre at 1") are understood on your phone. For everything else, Orbit sends a request to its own server (hosted by Supabase, in the United States), which passes it to Claude, an AI made by Anthropic. A request contains only what's needed to answer it:
A screenshot itself is sent only when you tap "Let Claude look at it" or "Let Claude look at the picture". It is used once to understand it and is not stored by Orbit.
Film ideas send only the feeling you mentioned and the films or shows you told Orbit you like, plus a web search for what's new. Ideas for a person and gift ideas send only what you wrote about that person (for example what they enjoy, what to avoid, a gift budget, and gift ideas you saved), never your diary.
Get it done. To ask you questions about a big goal, explain a path to it and make small steps, Orbit sends the goal, why it matters, your answers to its questions, its short summary of them, the path and the steps (done and open), and, if you filled them in under What Orbit knows about you, what you find hard and what helps when you're stuck (so the plan fits you). When you talk a goal through with Orbit, it also sends that conversation. Never your diary. The conversations are kept on your phone with the goal (and in your locked backup, if it's on).
Diary highlights. When a diary entry you said or typed is long, its text is sent once more to make a short highlight (one line and a few points). The highlight is kept on your phone next to the entry; you can edit or hide it. Entries written with "Answer a few questions" get their highlight made on the phone.
The weekly summary sends only those short highlights (or a short line for short entries), the day of the week and the mood, never full entries; a hidden highlight sends only the mood. The summary is kept on your phone.
Orbit's server does not keep the content of these requests. For each install it keeps a daily count of requests, how much AI processing they used and what that cost, so costs stay under control. Anthropic processes requests under its commercial terms: it does not use them to train its models, and keeps them only for a limited time for safety reasons, as described in Anthropic's privacy policy.
To make these requests, Orbit creates an anonymous ID for your install. It isn't linked to your name or email.
When Orbit talks back in its own voice (the default), the words it is about to say (for example "Dentist, Friday at 2 PM. Shall I add it?", or an answer to your question) go through Orbit's server to Google Cloud Text-to-Speech, which turns them into sound. Google sees only those words, not who you are, your phone or your location. Google says it doesn't log this text or sound and doesn't use it to train its AI.
Orbit's server keeps only a daily count of characters. The sound is saved on your phone so a line heard before doesn't need to be made again; "Delete everything" removes it. To keep everything on the phone, choose Settings → You → Language & voice → This iPhone's voice.
If you link Orbit with your partner, the things you choose to share are locked (encrypted) on your phone with a key that exists only in your two invites, then passed through Orbit's server (Supabase, United States). Orbit can't read them. Shared things are:
Your diary, notes and everything else are never shared. Either of you can unlink at any time; that deletes everything shared from Orbit's server. Plans already in your calendars stay there.
If you turn on “Calendars on this phone”, Orbit reads the calendars your phone already has (for example a work calendar you added to the phone) right on the phone. It never changes them, never stores them on Orbit's server and never puts them in your backup; they are read again each time. For each calendar you choose: show it, show it as “Busy only”, or hide it. With “Busy only” (how work calendars start), what a meeting is about never leaves your phone: Orbit only knows the time is taken. For calendars you show with details, the title, time and place of a relevant event may be sent to Claude with a request, like your other plans. You can turn this off at any time (Settings → Connections), or remove calendar access in your phone's Settings.
If you connect Google Calendar, your phone talks to Google directly, signed in with your own Google account. Orbit's server never sees your calendar. Plans you add in Orbit are added to your Google Calendar, and rest time shows as busy there. You can disconnect at any time (Settings → Connections).
If you turn on backup, your phone locks each part of your data with your backup password before it's sent (AES-256-GCM encryption, with a key made from your password using scrypt). The locked copy is stored in Orbit's database (Supabase, United States), linked to your Google account ID so it can follow you to a new phone.
Orbit can't open your backup. It can see only the Google account ID it belongs to, when it was saved, and how many items each part holds. Your password is never sent or stored; your phone keeps the key in its Keychain. If you forget the password, the backup can't be opened by anyone, including Orbit. You can delete the backup at any time (Settings → Connections → Backup).
To find a place, suggest somewhere nearby or tell you when to leave, Orbit sends what you searched for, and your current location when it's needed, to Google Maps through Orbit's server. Orbit uses your location only while the app is open, only after you allow it, and doesn't store it. Each search is counted, but not what you searched for.
If you send feedback from Settings, Orbit's server stores what you typed, how Orbit feels to you (Hard to use / Okay / Helpful), the app version, your language and phone type, linked to your install's anonymous ID. Nothing else is attached.
Payments are handled by Apple. To know whether you have Premium, Orbit uses RevenueCat, which receives your install's anonymous ID and your purchase status from Apple. Orbit never sees your payment details.
To ask about your data or have anything on Orbit's server removed, write to koterintunca@gmail.com.
Orbit helps you plan and reflect. It is not a medical device and doesn't diagnose or treat any condition. If you're struggling, please talk to someone you trust or a health professional.
Orbit is not meant for children under 13.