Who this policy covers
This Privacy Policy applies to the Orbit mobile app, its supporting services, and this website. Orbit is operated by the Orbit team (“Orbit,” “we,” or “us”).
Orbit is designed for private family groups. Authorized members can see information shared within their family according to the product’s permissions and controls.
Information we collect
Account and profile information
We collect a name, email address, family role, optional age, optional profile photo, and a sign-in identifier when you use Sign in with Apple or Google. We store an encrypted session token so your device can stay signed in.
Precise location and device status
If you grant location permission, Orbit receives precise location, location accuracy, capture time, and device battery level. Background location may be collected when you allow it so the family map, place arrivals, plan confirmations, timeline, and SOS features can work while the app is not open.
Family content
We collect content you create or choose to share, such as saved places, calendar events, family messages and the voice notes recorded in family chat, check-ins, reminders, lists, chores, notifications, and SOS events. If you connect a device calendar, Orbit sends only the selected events’ title, start time, end time, and all-day status. It does not send attendees, notes, links, or the calendar event’s location.
Analytics and advertising measurement
Orbit uses Google Analytics for Firebase to understand how the app is used — which screens are opened, which controls are tapped, and which steps people finish. Events carry only our own fixed names plus a few non-identifying properties such as a family-size band and subscription tier. They never carry names, message contents, voice notes, photos, or locations.
Orbit also uses Singular to measure which advertising brought a family to the app and which campaigns lead to a subscription. Singular receives those same events, an opaque account identifier, purchase currency and amount, and — only if you allow tracking when iOS asks — your device’s advertising identifier (IDFA). Declining that prompt costs you nothing: measurement falls back to Apple’s SKAdNetwork, which does not identify your device.
Neither tool ever measures a child profile: for a child account the analytics SDK is disabled and the attribution SDK is never started. Any adult can switch both off for their own device in Orbit Settings ▸ Privacy ▸ Share usage data.
Service and security information
We process push-notification tokens, authentication and verification records, request timing, IP address, and limited server logs to deliver the service, protect accounts, prevent abuse, and diagnose failures. Apple processes App Store purchases and provides the app with subscription entitlement status; we do not receive your full payment-card details.
How we use information
We use information only as reasonably necessary to:
- create and secure accounts and private family groups;
- show the family map and status, confirm arrivals and departures, and compare plans with location;
- sync family calendar events and content across authorized devices;
- send check-ins, reminders, family messages, safety alerts, and SOS notifications;
- provide subscriptions, support, security, debugging, and service maintenance; and
- comply with law and enforce our Terms of Use.
Children and family accounts
Orbit is for families, but a child must not independently create or administer a family account. A parent or legal guardian creates and manages a child profile, invites the child’s device, and is responsible for having authority to provide the child’s information and enable location sharing.
Parents and guardians can review a child’s profile in the family, remove the profile, or delete the family. Children can see the family information made available in their version of the app. Orbit is designed around transparent family coordination, not hidden tracking.
If you believe a child’s information was provided without appropriate permission, contact us so we can investigate and delete it where required.
How long we keep information
- Location history and plan evaluations: automatically deleted after 14 days.
- Resolved SOS events: automatically deleted after 30 days.
- Expired family invitations: deleted after the expiration window, with cleanup no later than 7 days afterward.
- Email verification records: deleted after their short verification window, with cleanup within 24 hours after expiration.
- Expired sign-in sessions: deleted automatically.
- Other account and family content: kept while the account or family remains active, unless you delete the content sooner or a longer period is required for security, legal compliance, or resolving a dispute.
Retention cleanup runs regularly. Backup systems, if used, may take a limited additional period to cycle out deleted records.
Your privacy choices and rights
You can control device permissions for location, calendars, photos, microphone, and notifications in iOS Settings. Turning off a permission stops the related collection from your device, but the feature that depends on it may no longer work. You can disconnect a shared calendar to remove its imported events.
Orbit Settings ▸ Privacy ▸ Share usage data turns off analytics and advertising measurement for your device. iOS Settings ▸ Privacy & Security ▸ Tracking controls whether Orbit may ask for, or use, your advertising identifier; you can withdraw that permission at any time.
Inside Orbit, Settings provides controls to edit profiles, remove members, sign out, delete your account, and, for authorized organizers, delete the entire family. Account and family deletion remove active records and sign affected devices out. This is deletion, not account deactivation.
Depending on where you live, you may also have rights to access, correct, export, restrict, object to, or erase personal information, and to appeal or complain to a data-protection authority. To make a request, email help@orbitmyfamily.com. We may need to verify your identity and authority over a child or family before completing it.
Storage, transfers, and security
Orbit’s backend currently uses Google Cloud infrastructure in the United States, including the us-central1 region. Information may therefore be processed outside your country. Where required, we rely on appropriate legal safeguards for international transfers.
We use safeguards intended to protect information, including encryption in transit, managed storage encryption, authenticated private-family access, expiring sessions, and access controls. No internet service can guarantee absolute security, so please use a strong password and protect access to your device and email account.
Changes to this policy
We may update this policy as Orbit, our providers, or legal requirements change. We will update the effective date here and, when a change materially affects your rights or how we use personal information, provide additional notice in the app or by email when appropriate.
Contact us
For privacy questions, rights requests, or concerns about a child’s information, email help@orbitmyfamily.com.
You can also read our Terms of Use or contact us.