In Your Orbit is a private tool for keeping track of the people who matter to you. It is built on a simple premise: your relationships are nobody else's business. This policy explains exactly what the app stores, where it lives, and how to erase it.
Only what you type or upload. There is no hidden collection.
Some settings, such as your chosen theme, are stored only on the device you set them on and never leave it.
If you are not signed in, everything stays in your browser's local storage on that one device. Nothing is sent anywhere. Signing out erases it from the device entirely.
The information you enter about friends is personal information about them, not just about you. Treat it accordingly: add only what you would be comfortable with them seeing, and remove them if they ask. Your board is visible only to you. If a networked version later lets friends connect their own accounts, that will be opt in on both sides and this policy will be updated before it ships.
Account data and board contents are stored with Supabase (Postgres hosted in the United States), which provides authentication and the database. Every row is protected by row level security, meaning the database itself enforces that only your signed-in account can read or write your data. The site is hosted by Netlify. Both act as processors on our behalf and do not use your data for their own purposes.
These are only reached when a feature needs them, and none of them receive your board:
You are in control of this and you do not need to ask anyone.
We keep your data for exactly as long as your account exists. There are no backups retained after deletion beyond short-lived infrastructure snapshots held by our hosting providers, which roll off on their own schedule.
Traffic is encrypted in transit with HTTPS. Data is encrypted at rest by our database provider. Sign-in uses either a one-time emailed link or a password you choose, and passwords are salted and hashed, never stored in readable form. No system is perfect, and we will tell affected users promptly if we ever learn of a breach.
In Your Orbit is not directed at children under 13 and we do not knowingly collect their information. If you believe a child has created an account, contact us and we will delete it.
Depending on where you live, you may have rights to access, correct, export or delete your personal information, and to object to certain processing. The app gives you direct access to all of these: everything we hold is visible in the app itself, editable by you, and deletable by you. For anything else, contact us.
If this policy changes materially, the date at the top will change and we will surface a notice in the app before the change takes effect.
Questions, requests or concerns: brysondmalcolm@gmail.com