Privacy Policy

Effective Date: 15 September 2026

Last Updated: 27 September 2026

Orbit (“Orbit,” “we,” “us,” or “our”) is a personal organization and productivity application developed and operated by Paras Akbari, an individual developer based in Gujarat, India.

This Privacy Policy explains what information Orbit collects, how it is collected, why it is used, where it may be stored or processed, when it may be shared with service providers, how long it may be retained, and the choices available to you.

By using Orbit, you acknowledge the practices described in this Privacy Policy.

1. Who Operates Orbit

Orbit is operated by:

Developer: Paras Akbari

Location: Gujarat, India

Privacy Contact: parasakbari777@gmail.com

Website: https://orbit-five-swart.vercel.app

2. Information We Collect

Orbit collects or processes information that is reasonably necessary to create and secure your account, synchronize your content, provide requested features, process subscriptions, deliver reminders, and support you.

Account Information

When you create or maintain an Orbit account, we may collect:

- Your name

- Email address

- Selected illustrated avatar

- Age range

- Region

- Onboarding preferences

- The purposes for which you indicate that you intend to use Orbit

Authentication is provided through Supabase. Orbit does not intentionally store your password in readable form.

Content You Create

Orbit stores information that you choose to create, save, or upload, including:

- Notes

- Tasks and to-do items

- Habits and habit completion history

- Pages and page blocks

- Checklists

- Tables

- Charts

- Tags and categories

- Saved links and URLs

- Reminder information and reminder times

- Images and files

- Recently deleted content

- Calendar-related preferences

- Page and content creation or modification timestamps

This information is associated with your Orbit account so that it can be synchronized between supported devices and restored when appropriate.

Orbit content is designed to be private to your account. Orbit does not currently provide a public content feed or collaborative workspace in which other Orbit users can browse your private account content.

Share to Orbit and Shared Links

Orbit may provide an iOS Share Extension or similar feature that lets you intentionally send content from another app into Orbit (“Share to Orbit”).

When you choose Orbit from the iOS share sheet, Orbit may receive the information that you selected and that iOS or the source app makes available to the Share Extension, such as:

- A webpage or other URL

- Selected text

- A title

- Link-preview information or metadata

- A source-app-provided representation of the shared item

- An image or file, if that content type is supported

Orbit does not use the Share Extension to read your general browsing history, unrelated browser tabs, or content that you did not choose to share.

Shared content may be held temporarily in Orbit's shared App Group storage so that the main Orbit application can safely import it. Once imported, saved links, text, previews, files, or related information may become part of your Orbit content and may be synchronized to your account through the same systems used for other Orbit content.

Where Orbit requests a rich preview for a URL, iOS system frameworks or the website hosting that URL may be contacted to obtain metadata such as a page title, icon, or preview image. The linked website or its infrastructure may receive ordinary network information, such as an IP address, as part of serving that request. Orbit does not control the privacy practices of third-party websites.

Using Share to Orbit does not make the saved content public to other Orbit users.

Functional Activity and Synchronization Information

Orbit may store limited activity or state information that is required to operate the Service, including:

- Page visit timestamps

- Creation and modification timestamps

- Habit and task completion history

- Recently deleted status

- Synchronization state and revision information

- Notification and reminder preferences

- Calendar visibility preferences

- Calendar colour preferences

- Local state needed to support widgets, Siri/App Intents, offline use, or account restoration

- Subscription-entitlement state needed to display or enforce available features

Orbit does not currently use third-party behavioral advertising or advertising-profile analytics services.

On-Device Storage and Offline Data

To support offline use, fast loading, widgets, account continuity, and synchronization, Orbit may store account-related information locally on your device. Depending on the feature, this may include:

- A local account snapshot or synchronized database

- Pending synchronization state

- Widget-related task or habit state

- Cached subscription-entitlement information

- Shared App Group data used by Orbit and its extensions

- Authentication credentials or tokens stored using iOS security mechanisms such as Keychain

- Local notification identifiers and reminder state

Local cached entitlement information is used to support Orbit's local experience. Server-side subscription and account controls may use separate authoritative validation.

After a successful sign-out, Orbit is designed to remove account-scoped local content, synchronization data, widget state, entitlement caches, and Orbit reminders associated with the signed-out account. Where Orbit detects unsynchronized changes that cannot be safely uploaded, it may prevent sign-out rather than discard those changes.

Deleting the Orbit app from your device does not by itself delete your Orbit account or cloud-stored content.

Images and Files

When you choose to add an image or supported file to an Orbit page or other supported area, that media may be uploaded to private storage associated with your account.

Uploaded files are primarily stored in the private `orbit-media` storage system operated through Supabase. Information needed to represent or synchronize attachments may also form part of Orbit database records.

Images or files may also be submitted when you voluntarily send feedback or a support request.

Apple Calendar

Orbit may request permission to access Apple Calendar so that it can display calendar information and provide calendar-related functionality.

Calendar access is optional. You may deny or later revoke calendar permission through iOS Settings.

Orbit accesses calendar information made available through Apple's calendar frameworks. This may include calendars from other accounts, such as Google accounts, if you have independently added those calendars to Apple Calendar on your device.

Orbit does not directly connect to your Google Calendar account.

Calendar visibility and colour preferences selected within Orbit may be stored with your Orbit account.

Orbit does not use Apple Calendar information for advertising.

Siri, App Intents, Widgets, and Apple System Features

Orbit may integrate with Apple features such as Siri, App Intents, widgets, notifications, and other iOS system services.

If you choose to invoke Orbit through Siri or another Apple system feature, Apple may process your request according to Apple's own privacy practices. Orbit receives only the information made available to it that is reasonably necessary to perform the requested Orbit action.

Widgets may read limited Orbit information stored in the shared App Group on your device so that they can display information you have chosen to make available through the widget experience.

Feedback and Support

If you submit feedback, report an issue, or contact support, we may receive:

- The information you provide in your message

- Your email address if supplied or associated with the request

- Images or attachments you voluntarily include

- Technical information reasonably necessary to process the request

Orbit uses Vercel to operate certain backend and support endpoints and Resend to deliver feedback or support emails.

An IP address may be processed temporarily for limited security purposes such as rate limiting, spam prevention, abuse prevention, or protecting Orbit's backend services.

Orbit does not use IP addresses for targeted advertising or advertising profiles.

Subscription Information

Orbit may offer free features together with optional paid subscription features.

Purchases and subscriptions are processed through Apple's In-App Purchase system.

Orbit does not receive or store your complete payment-card or banking information.

Orbit may receive or process information from Apple that is necessary to determine subscription status, entitlement, transaction status, expiration, renewal, billing-state changes, or eligibility for an introductory or promotional offer.

Orbit may associate an App Store subscription entitlement with your Orbit account so that subscription access can be provided to the correct account.

Apple processes payment information according to Apple's own privacy practices.

3. How We Use Information

We use information processed through Orbit to:

- Create, authenticate, secure, and maintain your account

- Provide notes, tasks, habits, pages, calendars, reminders, widgets, Siri/App Intent features, and other Orbit functionality

- Import content that you intentionally send to Orbit through Share to Orbit

- Generate or display link previews when requested

- Synchronize your content and support offline use

- Store files and images that you choose to upload

- Preserve your preferences

- Display your personalized greeting and avatar

- Maintain completion histories and timestamps

- Provide and validate subscription features

- Restore recently deleted content when requested

- Schedule notifications and reminders that you configure

- Provide support and respond to feedback

- Detect, prevent, and limit spam, abuse, fraud, and unauthorized use

- Maintain the security, integrity, and reliability of Orbit

- Diagnose technical failures where reasonably necessary

- Comply with applicable legal obligations

We do not sell your personal information.

We do not use your personal information for targeted advertising.

Orbit does not currently contain third-party advertising.

Orbit does not currently use AI to process your private notes, tasks, habits, pages, images, saved links, or other private Orbit content.

4. Service Providers and Processing Partners

Orbit relies on a limited number of service providers to operate the Service.

Supabase

Supabase is used for services including:

- User authentication

- Database hosting

- Cloud synchronization

- Private file and image storage

- Server-side account and entitlement data

Information stored in your Orbit account may therefore be processed through Supabase infrastructure.

PowerSync

Orbit may use PowerSync to support local/offline database synchronization and replication between the application and Orbit's backend.

Depending on the deployed configuration, PowerSync infrastructure may process authenticated account identifiers and synchronized records that are necessary to provide synchronization.

Vercel

Vercel is used to host Orbit's website and certain backend functionality, which may include support or feedback endpoints, subscription-related server endpoints, and other limited application services.

Resend

Resend is used to deliver feedback and support-related email messages.

Apple

Apple provides services and system functionality including:

- App Store distribution

- In-App Purchases and subscriptions

- App Store Server Notifications and related subscription services

- Apple Calendar system permissions and frameworks

- Siri and App Intents

- Notifications and widgets

- Share extensions and other iOS system services

Apple may process information according to Apple's own privacy terms and policies.

We seek to provide service providers only the access reasonably necessary to perform the services used by Orbit. Third-party providers are responsible for handling information according to their own legal obligations and applicable agreements.

5. Third-Party Websites and Saved Links

Orbit may let you save, display, or open links to third-party websites or services.

Those websites and services are not operated by Orbit. When you open a link, request content from a linked website, or cause a preview to be loaded, the third party may collect information according to its own privacy practices.

A link or preview appearing in Orbit does not mean that Orbit endorses, controls, or is responsible for the linked website.

6. No Advertising or Sale of Personal Data

Orbit does not currently:

- Sell personal information

- Rent personal information

- Use personal information for behavioral advertising

- Use third-party advertising networks

- Use private Orbit content to create advertising profiles

If these practices change in the future, this Privacy Policy and applicable App Store privacy disclosures will be updated before or as required by applicable law.

7. Data Storage and International Processing

Orbit uses third-party cloud infrastructure. Depending on the provider and its infrastructure, information may be processed or stored on systems located outside your state, country, or region.

Orbit also stores some information locally on your device as described above.

Where required by applicable law, we will take reasonable steps intended to ensure that appropriate safeguards apply to the processing of personal information.

8. Data Retention

We retain account information and Orbit content while your account remains active or for as long as reasonably necessary to provide the Service, maintain security, resolve disputes, or comply with applicable legal obligations.

Recently deleted content may remain available temporarily within Orbit so that you can restore it before permanent deletion.

Temporary data created by Share to Orbit may remain in shared local storage only for as long as reasonably necessary to import, recover, or safely process the selected item. After import, any saved copy becomes part of your ordinary Orbit content and follows the same retention rules as comparable content.

After a successful sign-out, Orbit is designed to remove account-scoped local Orbit data and reminders from that device while leaving your cloud account and cloud-stored content intact.

When an authenticated account-deletion request successfully completes, Orbit is designed to delete:

- Your Supabase authentication account

- Orbit database records associated with your account through applicable deletion and cascade rules

- Your private media stored in the `orbit-media` storage system

- Account-scoped local Orbit data remaining on the device where deletion was completed

Orbit does not currently provide a user data-export feature.

Feedback or support messages that have already been delivered through email may exist separately from your Orbit database account and may be retained for the time reasonably necessary to respond to the request, maintain support records, prevent abuse, or comply with applicable obligations.

Orbit does not intentionally maintain a separate long-term backup archive of deleted user accounts. Infrastructure providers may nevertheless maintain temporary operational, security, disaster-recovery, or system records according to their own retention practices and legal obligations.

9. Account Deletion and Sign-Out

You can request deletion of your Orbit account from within Orbit.

Once an authenticated deletion request successfully completes, your account and associated Orbit content are deleted as described above.

Account deletion is permanent. Deleted information may not be recoverable.

Signing out is different from deleting your account. Signing out removes or disconnects account-scoped local Orbit information on that device but is not intended to delete the account or its cloud-stored content.

Deleting Orbit from your iPhone does not by itself delete your Orbit account or cloud-stored data. Use the account-deletion feature within Orbit if you wish to delete your account.

10. Children and Younger Users

Orbit may only process a child's personal information where doing so is permitted by applicable law and where any required parent or legal-guardian authorization has been obtained.

Different jurisdictions use different age thresholds and requirements.

In India, the Digital Personal Data Protection Act, 2023 and related rules provide special requirements for processing children's personal data, including requirements concerning verifiable parental consent when the relevant provisions apply.

A child or other person who cannot legally provide the required consent must not independently create or use an Orbit account where parental or guardian authorization is legally required.

Where Orbit permits access to younger users, the parent or legal guardian is responsible for providing any consent or authorization required by applicable law.

Parents or guardians who believe a child has provided personal information to Orbit without appropriate authorization may contact [parasakbari777@gmail.com](mailto:parasakbari777@gmail.com) to request review or deletion.

A privacy policy by itself does not replace any age-verification or verifiable-parental-consent process required by applicable law.

11. Your Privacy Rights and Choices

Depending on where you live and applicable law, you may have rights regarding your personal information, including the ability to:

- Request information about personal data processed about you

- Request correction of inaccurate information

- Request deletion or erasure of eligible personal information

- Withdraw consent where processing is based on consent

- Raise a privacy complaint or grievance

- Exercise other rights provided by applicable data-protection law

You can also control certain device permissions, such as Calendar and notifications, through iOS Settings.

Certain requests may require us to verify that you are the account holder, parent or guardian, or are otherwise legally authorized to make the request.

To make a privacy request, contact:

[parasakbari777@gmail.com](mailto:parasakbari777@gmail.com)

12. Security

We use reasonable technical and organizational measures intended to protect Orbit information against unauthorized access, alteration, disclosure, misuse, or destruction.

These measures may include authenticated accounts, account-scoped access controls, private storage, encrypted network transport, iOS Keychain storage for authentication credentials, account-scoped local storage, server-side authorization, and security controls intended to separate one user's data from another user's data.

Orbit also uses plan and storage controls intended to reduce unauthorized or abusive use of backend resources.

However, no electronic transmission, application, database, device, or cloud-storage system can be guaranteed to be completely secure. You are responsible for keeping your account credentials confidential and for using an appropriately secured device.

13. Permissions and Device Controls

Certain Orbit functionality depends on permissions or system capabilities provided by iOS, such as Calendar access, notifications, Siri, widgets, and the share sheet.

You can control applicable permissions through iOS Settings and other Apple-provided controls.

Disabling a permission may prevent the associated Orbit functionality from working, but unrelated features may continue to be available.

14. Changes to This Privacy Policy

We may update this Privacy Policy when Orbit's functionality, data practices, service providers, security architecture, or legal requirements change.

When we make material changes, we may notify users through the app, website, App Store listing, email where appropriate, or another reasonable method.

The “Last Updated” date at the top of this Privacy Policy identifies the latest revision.

15. Contact Us

For questions, concerns, account-deletion issues, support, or privacy requests, contact:

Paras Akbari

Gujarat, India

Email: parasakbari777@gmail.com

Website: https://orbit-five-swart.vercel.app