Last updated: November 2026
Jacob's Orbit ("Orbit", "we", "us") is an independent planner, journal and check-in application developed in Canada. This policy describes the personal information the application processes, the purposes of processing, the service providers involved, retention periods, and the rights available to users.
1. Overview
Orbit is designed to minimise the personal information it stores. Most user content is stored locally on the device. Information stored on our servers is used only to provide the service and is disclosed only to accounts the user links with or chooses to share with. Orbit does not display advertising, does not sell or rent personal information, does not use analytics or cross-app tracking, and does not enable AI features without the user's consent.
2. Local storage
The application can be used without an account, in which case all data is stored locally on the device and is not accessible to us. Journal entries, to-dos, goals, photos, videos and Room data are stored locally whether or not the user has an account.
3. Information we process
Information provided by the user. When an account is created, we store:
- Account information: name, email address and date of birth.
- Check-in data: daily check-in responses, medication records and reminder settings, and mood tags from Journal entries. Journal text is not stored.
- Connection data: linked family and friend accounts, and messages and media exchanged between them.
- Shared content: items the user elects to share, such as to-dos, goals, calendar events or Thinking tools entries.
Information collected automatically. A push notification token, if notifications are enabled. Service providers also receive standard technical data, such as IP address, when the application connects to them. No analytics or advertising identifiers are collected.
Information from device integrations, with permission. Device calendars and music services, as described in section 6.
4. Purpose of processing
Personal information is processed solely to provide the service: storing user records, making shared data available to linked accounts, and delivering reminders and notifications.
5. Disclosure to linked accounts
Caregivers. A linked caregiver account can view check-in data, medication records, and any items not marked private. Journal text and private items are not disclosed. For users under 13, Thinking tools entries are also visible to the caregiver, and the user is informed of this. A caregiver can configure medication reminders and enable or disable AI features. The application displays to the user what their caregiver can view.
Friends. Friends can access only content the user shares: the user's Room during a visit, and messages, notes and media sent to them. Media sent in friend chats is deleted after 90 days. Messages are retained until account deletion.
Memory Wall media. Memory Wall photos are stored locally unless shared with friends (via the Friends can see setting) or with a linked caregiver. Users aged 13 and over can disable caregiver access. Users under 13 require parental consent to share photos with friends. Shared photos are stored server-side as reduced-resolution copies and deleted when no authorised viewer remains, when the photo is removed from the wall, or on account deletion.
6. Device permissions
Location, camera, microphone, calendar, Apple Music and Spotify access are requested at the point of use and remain disabled until granted.
- Location: used only when the user selects Find the location, to resolve a place name for a Journal photo via Photon (komoot). Room weather is derived from the device time zone, not location.
- Camera and microphone: used only to capture photos or video, or for voice entry in the Journal. Speech is transcribed on the device; audio is not transmitted.
- Calendars: read locally to display events in My schedule. If the user enables sharing, events from selected calendars are sent to linked family accounts, either in full or as busy time. Event locations and notes are not transmitted.
- Music services: used only to add tracks the user selects.
7. AI features
Tidy, Dear self follow-up questions (users 16 and over) and Break it down are powered by Claude, a model provided by Anthropic. Each feature is disabled by default and requires user consent (parental consent for users under 14). Caregivers can disable these features. Only the input required for the selected feature is transmitted: text submitted to Tidy, the Dear self prompt and response, or a task title for Break it down. Anthropic does not use this data for model training. Outputs are suggestions only; no automated decisions are made about users.
8. Service providers
| Provider | Purpose | Data | Location | Retention |
|---|---|---|---|---|
| Supabase | Database and authentication | Account, check-in, connection and shared data | Montréal, Canada | Duration of the account |
| Anthropic | AI features | Feature input only | United States | Up to 30 days; up to 2 years if flagged in a safety review |
| Resend | Transactional email (link invitations, parental consent, reports) | Email address and message | United States | 30 days |
| Expo, Apple, Google | Push notification delivery | Notification token and message | United States | Expo: until delivered |
| Photon (komoot) | Place-name lookup | Photo location, on request | komoot servers | Per komoot's privacy policy |
9. Cross-border transfers
Our database is hosted in Canada. Information processed by providers located in the United States is subject to the laws of that jurisdiction and may be accessible to its courts, law enforcement or national security authorities. We select providers that offer a comparable level of protection and remain accountable for information transferred to them.
10. Retention and deletion
Information is retained for the duration of the account. On account deletion, initiated in Settings, all server-side data is deleted, including shared media. No backup copies are retained. Service provider records are deleted according to the schedules in section 8.
11. User rights
Users can export their data, manage sharing, disable AI features and delete their account in Settings. Users may also request access to, correction or deletion of their personal information, withdraw consent, or request information about our practices by contacting us. We respond within 30 days. Users may file a complaint with the Office of the Privacy Commissioner of Canada or, in Quebec, the Commission d'accès à l'information.
12. Minors and parental consent
Users under 14 require parental consent to link accounts and enable AI features. Users under 13 also require parental consent to add friends or share photos with them. Parents may request access to, correction or deletion of their child's information, or the cessation of its collection. Users who reach 18 may request deletion of information collected while they were minors. If you believe a child is using Orbit without parental consent, please contact us.
13. Changes to this policy
We will update the date above and notify users in the application before changes take effect.
14. Contact
Privacy Officer, Jacob’s Orbit support@jacobsorbit.com