Orbit — Privacy Policy

Orbit (formerly Connections) is a personal relationship manager by SummitLabs. Your data belongs to you. This page explains, plainly, what the app stores, where it lives, and who processes it.

What we store

People you add — names, companies, notes, reminders, photos, and anything else you write down. If you import from your iPhone Contacts, the contacts you choose are stored the same way. Everything syncs to a private database row that only your signed-in account can read; access is enforced by the database itself (row-level security), not just by the app.

Your account — your email address (or your Apple ID sign-in, which can hide your email) and a display name.

Your Ask conversations and Orbit memory — your chats with the assistant are saved in your account so they appear on your other devices. Orbit memory keeps a few short facts about you learned from those chats; you can see and delete each one in You → Orbit memory.

Where it lives

Your data is stored with Supabase (our database host, servers in the United States), encrypted in transit and at rest. Supabase processes it only to run our service — nothing else.

What stays on your phone

Voice capture is transcribed on your iPhone where it supports your language; otherwise Apple’s speech recognition service transcribes it. The audio never reaches our servers. Business-card and screenshot scanning read the image on your iPhone; the image never leaves your phone unless you choose to save it, though the words read from it are sent to the assistant to fill in the card (see AI). Face ID unlocking is handled by iOS; we never see biometric data. Reminders are scheduled on your phone; our server only sends silent signals, through Apple’s push service, so your other devices stay in step. A small offline copy of your people lives on the device, protected by iOS file encryption, so the app works without a connection; deleting the app removes it.

AI

Two kinds of intelligence power the assistant, and they are not the same. Instant answers — browsing, searching, filtering (“who do I know at…”), and relationship scores — are computed with plain logic. They never use AI.

The assistant — Ask Orbit, drafts, Speak, and filling in a card from a scan or a shared profile — runs on Google’s Gemini API, through our server. When you ask a question or ask for a draft, it receives your question, your Orbit memory (for a draft, only your writing preferences in it) and the cards it needs about the people it concerns: name, role, company, industry, city, relationship label, how you met, what they can help with, their preferences, and — from Orbit 1.0.3 — your notes about them, their birthday and your logs of past conversations. From your saved cards it never receives phone numbers, email addresses, social handles or home addresses. One question needs a list: asked who you know (“who works in fintech?”), the assistant gets the names, roles, companies, industries, schools and relationship labels of up to 400 of your people — for most books, all of them — never their numbers, emails, addresses or notes. When you scan a card, share a profile into Orbit or speak someone in, the words you scanned, shared or said go to Gemini as they are, so whatever they contain — a phone number or an email on a business card — is read to fill in the new card. With your calendar connected (Premium), each question also carries your next seven days of meetings — titles, times and who is in them — so the assistant can prepare you for them; Orbit does not store them, though the answer stays in your chat history until you clear it.

From Orbit 1.0.8, the app asks for your permission before anything is sent to Gemini, and nothing is sent while the assistant is off. You can give or withdraw it at any time in Settings → Privacy and data → Orbit’s assistant; instant answers keep working either way.

We use Google’s paid API, which does not train on your data; Google keeps requests for a limited time only to detect abuse. We do not train models on your data either. So that a question asked twice is answered once, our server keeps each answer for 24 hours, then deletes it.

Other services

Crash reports go to Sentry (Functional Software, Inc., United States): what the app was doing when it failed, the device model, iOS and app version, an identifier for the installation, and an approximate location derived from your connection — never your people, notes or messages. Company logos come from Logo.dev: a company name is looked up (never who it belongs to) and logo images load from their servers. Apple handles Sign in with Apple, purchases and push delivery.

How long we keep it

• Your people, notes, reminders, history and chats: as long as you keep your account. Deleting your account removes them from live systems at once.
• A person you delete: removed at once, with their photo, their links and what Orbit remembered about them. Conversations that mention them stay until you delete those conversations.
• An answer from the assistant: kept 24 hours, so a question asked twice is answered once.
• A record that the assistant refused a request (see below): 90 days.
• A report or message you send us: until you delete your account.
• Backup copies of the database, taken before a change to it: kept on the developer’s encrypted computer for 30 days, and the two most recent until newer ones replace them.

What the app records about itself

A few small things, all kept with your own account and never sold, shared, or joined with anything outside Orbit. When Orbit suggests something — a person to add, a reminder, a note — we record which kind of suggestion it was and what became of it: shown, kept, kept after you edited it, dismissed, or it failed. Counts only: never the words of the suggestion, never who it was about. It is how we tell whether the assistant is getting things right. And if you came to Orbit from an advert on the App Store, Apple tells us which campaign it was, so we know which adverts are worth running. If you flag a conversation or write to us, we keep it so we can read it; a reported draft is kept only as a fingerprint, never its words. We are alerted when a report arrives (only that it arrived and its kind) and read each within two working days. And when the assistant refuses a request that breaks its rules — a message asking a child to keep a secret, a threat, pretending to be someone else — we record that it happened and which kind, never the words, for 90 days, so repeated abuse can be stopped. Something said in distress is never recorded. All of it is deleted with your account.

What we never do

No ads, no trackers, no analytics SDKs, no data brokers. We never sell your data or share it beyond the services named on this page. We never message your contacts.

Your controls

Export your people, their details, notes, reminders and history as a JSON file at any time (You → Settings → Privacy and data → Export my data). Delete your account in the app (You → Settings) — this permanently erases your account and all data from our servers immediately.

Contact

Questions: hello@smmtlabs.com — or see support.

← Back home