Privacy Policy

Last updated 16 October 2026

The short version

Your chats and files stay on your computer. We never receive them.
Your messages go from your computer straight to Anthropic or xAI, on your own account with them.
Our account server keeps your email, your subscription status and your signed-in devices. That's it.
Stripe takes your payment. We never see your card.
If you link a phone, messages between it and your computer are encrypted end to end. Our relay can't read them.

Who we are

SUPERORBIT LTD makes Orbit and is responsible for the personal data described here. We're registered in Scotland (company number SC906206), at 2 South Harbour Street, Ayr KA7 1HZ. Contact us at declan@superorbit.app.

What stays on your computer

Orbit is a desktop app. Your chats, files, projects, the Moon's memory, your settings and your sign-ins to Claude and Grok are stored on your own computer. We don't receive, store or read them.

What goes to the AI companies

When you send a message, Orbit passes it from your computer to the company whose model you picked: Anthropic for Claude, xAI for Grok, and OpenAI for Codex once it's available. It goes on your own account with them, not through us. Their privacy policies cover what they do with it.

What our account server keeps

To run your subscription, our account server keeps:

Your account: your email address, when you signed up, and the ID Stripe gives you as a customer.
Sign-in codes: each six-digit code we email you, stored only as a secure hash. A code works for 10 minutes and allows 5 tries.
Signed-in devices: your computer's name and type (for example “Alexs-MacBook-Pro (Mac)”), when it signed in and was last seen, and a secure hash of its sign-in key, so you can sign it out.
Your subscription: its status, price, currency, renewal date and whether it's set to cancel, copied from Stripe.

From these, the server signs a licence for the app that carries your account ID, email and subscription status. It doesn't keep anything about what you do in Orbit.

Payments

Stripe handles payments. You give your card and billing details to Stripe, not to us, and we never see or store your card. If you tell us why you're cancelling, that reason is saved with your subscription in Stripe. Stripe's privacy policy covers the information you give them.

Emails

We email you sign-in codes and essential messages about your account and subscription. They're sent through Resend. We don't send marketing emails.

Linking your phone

Linking a phone is optional. When you're away from your computer, your phone reaches it through Orbit's relay. Everything your phone and computer say to each other is encrypted end to end, so the relay only passes on scrambled data it can't read. For each linked computer, the relay keeps:

The ID of the Orbit account it belongs to.
The linked phones' IDs, each with a hash of its relay pass (the pass itself stays on the phone).
A hash of the pairing code while one is on your screen (a code lasts at most 15 minutes).
When your computer was last online.
Each phone's push token, if you turn on notifications.

Notifications travel through Google's Firebase Cloud Messaging. Your computer encrypts each one for your phone first, so Google only carries scrambled data. Removing a phone in Orbit removes it from the relay and deletes its push token.

Other services Orbit uses

Updates: Orbit checks for and downloads updates from GitHub, where we publish them.
Block Store: it runs on GitHub using your own GitHub sign-in. If you publish a block, it becomes a public repository under your GitHub account.

This website

superorbit.app doesn't use analytics, advertising or tracking cookies. If you buy from the website, your browser keeps your sign-in for checkout only until you close the tab. Fonts load from Google Fonts, so Google sees your IP address when the page loads. Checkout pages are run by Stripe.

Who handles data for us

Vercel hosts this website, and runs the account server in London.
Neon hosts the account database (in London).
Stripe takes payments.
Resend sends our emails (from Ireland).
Cloudflare runs the phone relay.
Google delivers phone notifications (Firebase Cloud Messaging) and serves the website's fonts.
GitHub hosts Orbit's downloads and updates.

Like any online service, these providers see your IP address when you connect. Some of them are based in the US. When data leaves the UK, we rely on the safeguards UK law requires, such as the UK–US data bridge or approved contract terms.

Why we use your data

To provide Orbit and your subscription, which is our contract with you.
To keep accounts secure and stop misuse, which is in our legitimate interests and yours.
To keep payment records, which the law requires.

How long we keep it

We keep your account while you have one. If you ask us to delete it, we'll delete your account, devices and sign-in records. Removing your phones in Orbit clears them from the relay. We keep records of payments for as long as UK tax law requires, usually six years.

Your rights

You can ask for a copy of the personal data we hold about you, ask us to correct it, or ask us to delete it. You can also object to how we use it or ask us to limit it. Email declan@superorbit.app and we'll reply within a month.

If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk. We'd like the chance to put it right first.

Changes

If we change how we handle your data, we'll update this page. If a change matters, we'll email you first.

Back to Orbit