Privacy Policy

Last updated: August 9, 2026

Orbit is a group-planning app built to be private by design. This policy explains what we collect, why, how we protect it, and the control you have over it. We’ve tried to write it plainly. If anything is unclear, email us at hello@orbitplan.net.

The short version. Orbit stores your account, your Circles, and the plans, votes, expenses, and photos inside them. Your data is encrypted in transit and at rest, and scoped by row-level security so only members of your Circle can see it. Location, contacts, and photos are optional and only used for the features you ask for. You can export or delete your data at any time.

1. Who we are

Orbit (“Orbit”, “we”, “us”) provides the Orbit mobile application (Android package app.orbit.orbit) and the website at orbitplan.net. This policy covers both. It does not cover third-party services you reach through Orbit, which have their own policies.

2. Data we collect

Account and profile

When you create an account we collect the information needed to sign you in and identify you to your Circle: your name or display name, email address, and an optional profile photo. If you sign in with Google, we receive your basic Google account details (name, email, and profile image) to create and secure your account. We do not receive your Google password.

Circles, plans, and activity

Orbit stores the content you and your Circle create so the app can work: the Circles you belong to, plans and events, the options people propose, votes and RSVPs, comments, and related timing and location details you enter for a plan.

Expenses and settlement

When you use the money features, we store the expenses you record, how they are split, and the resulting balances so Orbit can total them and suggest how to settle up. Orbit does not process payments and does not collect bank, card, or other financial account numbers. Settling up happens between you and your Circle, outside the app.

Optional location

If you turn it on, Orbit uses your device location to find nearby venues and improve place suggestions for a plan. Location is optional, is only used at the moment you ask for suggestions or set a plan’s location, and can be turned off in your device settings at any time.

Optional contacts

If you choose to invite people from your contacts, Orbit accesses your contact list on your device to help you pick who to invite. This is optional. We use it only to send the invites you choose and do not upload your entire address book to build a social graph.

Optional photos (plan memories)

If you add photos to a plan, we store those images so your Circle can see them as memories. Photos are shared only within that Circle and are never made public by Orbit.

Technical and diagnostic data

To keep Orbit reliable and secure, we process limited technical information such as a device identifier for your session, app version, and error and performance logs. We use this to operate the service, fix bugs, and prevent abuse — not to build advertising profiles.

3. How we use your data

To provide the core app: Circles, plans, voting, RSVPs, expense splitting, settle-up, and memories.
To generate AI place suggestions grounded in real venues, based on the details of your plan and, if enabled, your location.
To send invites and Circle-related notifications you have asked for.
To secure your account, prevent abuse, and troubleshoot problems.
To comply with legal obligations that apply to us.

We do not sell your personal data, and we do not use your plans, expenses, or photos to serve you third-party advertising.

4. How your data is stored and protected

Orbit’s backend is hosted on Supabase, which stores your data in managed PostgreSQL databases and object storage. Your data is encrypted in transit (over HTTPS/TLS) and encrypted at rest on Supabase’s infrastructure.

Access is enforced with row-level security. In practice, this means each row of data — a plan, a vote, an expense, a photo — is tied to a Circle, and the database only returns it to members of that Circle. Other users cannot read your Circle’s data, and it is not publicly accessible.

5. Third parties we share data with

We keep the list of third parties short, and we only use them to make Orbit work:

Supabase — our hosting and database provider. It stores your account, Circles, plans, expenses, and photos on our behalf.
Google Sign-In — if you choose to sign in with Google, Google authenticates you and shares basic profile details with us. Your use of Google is subject to Google’s own privacy policy.
AI providers — to generate place suggestions, Orbit sends the relevant plan details (such as the kind of outing, group size, and, if enabled, a general location) to an AI model provider that returns suggestions. We send only what is needed to produce a useful suggestion and do not send your full account, expenses, or photos for this purpose.

We may also disclose information if required by law, or to protect the rights, safety, and security of our users and the service. If Orbit is ever involved in a merger or acquisition, we will require any successor to honor this policy.

6. Bring your own key

Some AI features can be used with your own API key from a supported provider. If you supply a key, it is used to make requests on your behalf. Treat your key like a password and remove it at any time from within the app.

7. Your rights and choices

Access and export. You can request a copy of your data in a portable format.
Deletion. You can delete your account and associated data from within the app or by contacting us. Some records may be retained briefly where required for security or legal reasons, then removed.
Permissions. Location, contacts, and photo access are optional and controlled by your device permissions. You can revoke any of them at any time.
Leaving a Circle. When you leave or delete a Circle, your access to its content ends. Content others contributed may remain visible to the remaining members.

To make any of these requests, email hello@orbitplan.net.

8. Data retention

We keep your data for as long as your account is active or as needed to provide Orbit. When you delete your account, we delete or anonymize your personal data within a reasonable period, except where we must keep limited records to meet legal or security obligations.

9. Children

Orbit is not directed to children under 13 (or the minimum age required in your country), and we do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we will remove it.

10. International users

Your data may be processed in countries other than your own, including where our providers operate. Wherever it is processed, we apply the protections described in this policy.

11. Changes to this policy

We may update this policy as Orbit evolves. When we make material changes, we will update the date above and, where appropriate, notify you in the app. Continued use of Orbit after an update means you accept the revised policy.

12. Contact us

Questions, requests, or concerns about privacy? Email hello@orbitplan.net and we will help.