Privacy First

Orbit captures the following on your device:

• Active application name and window title (every 30 seconds)
• Browser URLs and page titles (via the Chrome extension)
• Clipboard text (passwords and API keys are automatically detected and replaced with [REDACTED] before storage)

Orbit does NOT capture:

• Clipboard content from password managers (1Password, Bitwarden, etc.)
• Your actual passwords, API keys, or credit card numbers
• Screenshots (not yet implemented)
• Audio or video

For absolute clarity, Orbit cannot:

• Read the contents of arbitrary files on your disk
• Access your email accounts
• Access browser passwords
• Read messages from end-to-end encrypted services unless they appear in captured window titles or clipboard content
• Turn on your microphone or camera

All captured activity, clipboard items, and window histories are stored locally on your Mac at ~/.orbit/ in an SQLite database and local vector store. This data never leaves your device unless you explicitly opt in to cloud sync (which is disabled by default).

For operational logs, crash reports (Sentry), and privacy-safe usage analytics (PostHog), we transmit only non-personal telemetry which is used to diagnose issues and improve performance. You can disable analytics at any time in the app's settings.

To generate session summaries and answer your recall questions, Orbit sends the following to cloud AI services via an encrypted proxy:

• Session summaries (AI-generated descriptions of your recent activity, for example: "Worked on a Next.js project and reviewed GitHub pull requests")
• Your recall queries (the questions you ask Orbit)

Orbit never sends:

• Raw clipboard content
• Exact file contents
• Your actual passwords or API keys

Orbit currently uses Claude, Gemini Flash, and Voyage AI to power AI features. These providers process only the information necessary to fulfill your request, and all communication is encrypted in transit.

Orbit collects anonymous, non-personal usage analytics to understand how the app is being used. This includes:

• Whether the app was opened
• We record that a recall query occurred, but never store or transmit the contents of the query for analytics purposes
• Whether a session was generated

We never collect query content, clipboard content, or anything you've typed. Analytics can be disabled at any time in the app's settings.

You have complete control:

• Pause capture at any time from the menu bar
• Exclude specific apps from being tracked
• View everything Orbit has stored in the Memory Viewer
• Delete individual events, sessions, or everything at once
• One-click memory wipe with no recovery