1. There is no Orbit server
Orbit does not run a server, does not operate a database and does not hold an account on our side containing your tasks. There is no back end for your task data to be sent to. Nothing you type into Orbit is transmitted to us, because there is nowhere for it to go.
2. Where your data lives
Your tasks, drawers, notes, tags, deadlines, priorities, repeat settings and completion history are stored in Orbit’s local storage on your device.
If you enable backup, a copy of that data is written to your own Google Drive, inside a private application-data folder. That folder:
- does not appear when you browse Drive normally;
- counts against your own Google storage quota;
- is readable only by Orbit running on your devices, signed in as you — it is not readable by us.
3. What Orbit accesses, and why
Google Sign-In
If you choose to sign in, Orbit receives your name, email address and profile photo from your Google account. This is used to identify which account the backup belongs to, and to show you which account you are signed in as inside the app. It is stored on your device.
Google Drive — the drive.appdata scope only
Orbit requests one Drive scope: https://www.googleapis.com/auth/drive.appdata. It is used to create and read Orbit’s own backup file in the application-data folder described above.
This scope cannot access any other file in your Drive. It does not grant Orbit the ability to see, list, open, modify or delete your documents, photos or any other content in your Drive. It reaches Orbit’s own backup file and nothing else.
Notifications and exact alarms
Orbit asks for permission to post notifications and to schedule exact alarms so that reminders and the daily tip arrive at the right moment. Reminders are scheduled entirely on your device by Android. Their contents are never transmitted anywhere.
Network access
Orbit uses the network for two things only: signing in with Google and reading or writing your Drive backup. It contacts no other service. With backup switched off and no sign-in, Orbit works fully without a connection.
4. What Orbit does not do
- We do not sell your data.
- We do not share your data with third parties.
- Orbit contains no analytics.
- Orbit contains no advertising.
- Orbit does no tracking and builds no profile of you.
- We do not read the contents of your tasks, notes or tags.
5. Authentication
Sign-in uses Google Sign-In together with Firebase Authentication. Their role is to verify that you are who you say you are and to issue a session token for the app. This process handles your Google account identifier only. Firebase Authentication receives no task data — no titles, notes, tags, deadlines or completion history — because Orbit never sends task data to it.
6. Your control over your data
- Sign out. Signing out performs a final backup and then clears Orbit’s data from the device.
- Clear All Data. This option in the app erases Orbit’s local storage on the device.
- Delete the backup. You can delete the Drive backup from inside Orbit, or from Drive yourself via Settings → Manage apps, where hidden application data can be removed.
- Revoke access. You can withdraw Orbit’s access to your Google account at any time at myaccount.google.com/permissions.
7. Retention
We retain nothing, because we hold nothing. The local copy on your device lasts until you delete it or uninstall the app. The backup in your Google Drive lasts until you delete it.
8. Children
Orbit is not directed at children under 13 and we do not knowingly collect information from them.
9. Changes to this policy
If this policy changes, the date at the top of this page is updated. Material changes are also surfaced inside the app, so you do not have to come back here to find out.
10. Contact
Questions about this policy, or about your data in Orbit: info@skordlabs.com.
This page is the permanent home of the Orbit privacy policy at https://orbit.skordlabs.com/privacy/. Also see the Terms of Service.