Privacy Policy
This policy explains what Orbky collects, why, how long we keep it and what you can do about it.
Orbky (the iPhone app, the Mac app, Orbky Cloud and orbky.com) is run by [Legal name], [Address], [Country] (“we”, “us”). We are responsible, as the controller, for the personal data described here. Questions go to [email protected].
The short version
- No ads, no tracking, no selling your data, no third-party analytics cookies.
- Your AI keys, calendar, reminders and the text of your bank messages stay on your iPhone.
- Your messages go from your iPhone straight to the AI provider you choose, with your key.
- Use Orbky as a guest and nothing is sent to our servers.
- Delete your account in the app at any time. Everything goes with it.
What we collect
Without an account (guest mode) Orbky keeps everything on your iPhone and sends nothing to Orbky Cloud. With an account:
| Where it goes | What |
|---|---|
| Kept by Orbky |
|
| Stays on your iPhone |
|
| Goes to AI providers | When you chat, your messages and attachments go straight from your iPhone to the provider you chose, with your key. See AI providers and your Mac. |
| Not collected | No ads, no tracking across apps or websites, no selling or sharing for advertising, no third-party analytics cookies. This website counts visits with Cloudflare Web Analytics, which is cookieless and only shows us totals. |
What Orbky keeps, and why
| Data | Why | Kept until |
|---|---|---|
| Account: email, name, language, about you, photo | To sign you in and run your account | You delete your account |
| Synced data: chats, agents, memories, settings, notes, ideas, goals, loops, Today briefs | To keep your devices in sync and let you sign in on a new one | You delete it (purged 30 days later), or your account |
| Money: bank accounts (name, bank, currency, balance, last 4 digits) and transactions (amount, merchant, category, note) | To show your spending on every device | You delete it (purged 30 days later), or your account |
| Files and Mac screenshots | To show them in your chats on every device | You delete them (purged 30 days later), or your account |
| Devices and linked Mac | To keep sync working and send agent requests to your Mac | You unlink the device or Mac, or delete your account |
| Request logs: IP address, time, the address requested, the result | To keep the service secure, stop abuse and fix problems | 5 days |
| Emails you send us | To answer you | As long as needed to help you |
We use this data to provide the service you signed up for, to keep it secure, and to meet legal obligations. Where the law asks for a legal basis, that is our contract with you, our legitimate interest in a secure, working service, or your consent, which you can withdraw at any time. We don’t read your chats or notes. Our staff dashboard shows account details and counts, not your content, and every action in it is logged. We look at your content only if you ask us to while helping you, or if the law requires it.
When Pro is on sale, Apple handles the payment. We never see your card details; Apple tells us only whether your subscription is active.
AI providers and your Mac
With your own key
When you send a message, your iPhone sends what the agent needs to answer (your message, the conversation so far, the agent’s instructions, memories you’ve saved and any attachments) straight to the provider you chose, with your key. It doesn’t pass through Orbky. When an agent uses a tool, such as reading your calendar or notes, the result goes to the provider too. The app asks before the first message goes to each provider.
The Today brief and, when the phone can’t read a bank message on its own, the message itself go to your default provider in the same way. Apple’s on-device model keeps everything on your iPhone.
Each provider handles your data under its own privacy policy and terms, and may be in another country: Anthropic, OpenAI, Google and OpenRouter in the United States; DeepSeek and Moonshot in China.
With Pro’s included AI
When included AI is available with Pro, your messages and attachments pass through Orbky’s servers to the provider. We keep them only as long as it takes to answer, and we count usage so the fair-use allowance works. We don’t store the content.
With your Mac
When an agent runs on your Mac, its messages go through Orbky Cloud to your Mac, and the Mac’s answers and screenshots come back the same way. Orbky Cloud relays them and doesn’t keep them; the reply is then saved in your chat like any other. Claude Code and Codex on your Mac send your requests to Anthropic or OpenAI under your own subscription with them. The Orbky app on your Mac keeps its own data in a database on that Mac.
How long we keep it
- Things you delete are marked deleted right away and purged within 30 days.
- Backups of the database are kept for 7 days, then replaced.
- What Orbky Cloud relays between your iPhone and your Mac isn’t stored.
- Request logs are kept for 5 days.
Deleting your account
In the app, open Settings › Account › Delete account. This removes your account, everything you synced and your files from Orbky Cloud right away, unlinks your Mac, and deletes your sign-in record at WorkOS. Copies in backups roll off within 7 days. Data in guest mode lives only on your iPhone: deleting the app removes it.
Your rights
You can ask us for a copy of your data, to correct it, to delete it, or to export it in a machine-readable format. You can also object to or ask us to restrict how we use it. Email [email protected] from the address on your account. We answer within 30 days. You can also complain to your local data protection authority.
Children
Orbky isn’t meant for children under 13, or under 16 in the European Union. We don’t knowingly collect their data. If you think a child has an account, email [email protected] and we’ll delete it.
Security
- Every connection uses TLS, between your devices and Cloudflare and between Cloudflare and our servers.
- Our hosting and storage providers encrypt data at rest.
- Access rules on every record let only its owner read or change it.
- There are no passwords to leak: you sign in with an email code, Google or Apple through WorkOS.
- Staff access to the admin dashboard needs a verified sign-in, and every action there is logged.
No system is perfectly secure. If we learn of a breach that affects your data, we’ll tell you and the authorities as the law requires.
Who processes data for us
| Company | What they do | Where |
|---|---|---|
| Fly.io | Hosts Orbky Cloud: the database and the API | Frankfurt, Germany |
| Cloudflare | DNS, content delivery, DDoS protection, file and backup storage (R2), email routing for @orbky.com, cookieless website analytics | Global network |
| WorkOS | Sign-in: email codes, Google and Apple | United States |
| The AI provider you choose | Answers your messages | Depends on the provider |
| [Email provider] | Receives the email you send to our @orbky.com addresses | [Country] |
When data leaves the European Economic Area, we rely on the safeguards the law provides, such as the European Commission’s standard contractual clauses.
Changes
If we change this policy in a way that matters, we’ll tell you in the app before the change takes effect. The date at the top shows the current version.
Contact
[Legal name]
[Address]
[Country]
[email protected]