InOrbit — Last updated: March 16, 2026
Micah Giszack ("we," "us," or "our"), based in the United States, built InOrbit as a commercial application. This Privacy Policy explains how we collect, use, and protect your information when you use InOrbit ("the App").
By using the App, you agree to the practices described in this policy. If you do not agree, please do not use the App.
InOrbit is designed to minimize data exposure. Your device sends messages directly to AI models via OpenRouter — they do not pass through our server. Our server handles account authentication and API key provisioning only. It never receives your messages, conversations, or AI responses. We do not read, review, or moderate your content. There is no admin dashboard or content moderation tooling built into InOrbit.
Your conversations and settings are stored on your device. Message content is sent directly to OpenRouter for AI responses and is never sent to our server.
| Data Type | Details | Stored Where |
|---|---|---|
| Messages | Text you send in conversations ("Worlds") and AI-generated replies | On your device (sent directly to OpenRouter for AI responses) |
| Conversation Settings | World names, participant configurations, AI Contacts, and preferences | On your device |
| Profile (My Card) | Display name, personal context ("About You"), and response preferences you optionally provide. When enabled, this information is included in system prompts sent to OpenRouter to personalize AI responses. | On your device |
| Participant Photos | Avatar images you select for AI participants from your photo library | On your device only — never uploaded to our servers |
| Credit Balance | Cached balance data from OpenRouter (usage amount, spending limit, account tier), refreshed periodically | On your device |
| API Logs | Request and response data from AI model calls (opt-in, off by default) | On your device; synced to iCloud if sync is enabled |
| On-Device AI | Some features (world naming, story generation) can use Apple Intelligence on your device. No data is sent externally for on-device processing. Story mode also supports optional online generation via OpenRouter. | Processed on your device when using on-device mode |
System Voice text-to-speech uses your device's built-in speech engine. If you enable optional Cloud Voice, the selected message text is sent directly from your device to OpenRouter/model providers to generate AI speech, may use OpenRouter credits, and does not pass through our server.
Our backend, hosted on Railway, stores a minimal set of data to support account authentication:
| Data Type | Details | Purpose |
|---|---|---|
| Anonymous Identifier | An opaque, anonymous token generated by Sign in with Apple — not your Apple ID, name, or email | Account authentication |
| Apple Refresh Token | An encrypted token issued by Apple during sign-in, used to revoke your Apple credential if you delete your account (required by Apple Technical Note TN3194) | Account deletion compliance |
| API Key | If you use the API key provisioned at sign-up: the key itself (encrypted at rest, stored for re-delivery if you reinstall the app) and usage metadata (spend amount, model usage) visible to us via OpenRouter | Key provisioning and recovery |
We do not collect or store:
InOrbit supports iCloud sync via Apple's CloudKit private database. iCloud sync is off by default. You must explicitly enable it in the App's Settings (and restart the app) for sync to activate.
When enabled, your Worlds, messages, participants, contacts, settings, and API logs (if logging is enabled) are synced across your devices. This data is encrypted by Apple and accessible only with your Apple ID. We have no access to your iCloud data.
We do not use your data for advertising, profiling, or selling to third parties. We do not review, moderate, or monitor your content.
InOrbit relies on the following third-party services to function. We require that each third-party service provider handling user data provides the same or equal protection of that data as described in this Privacy Policy.
Server-side data is stored on infrastructure provided by Railway and processed by automated systems. On-device data is stored locally using Apple's SwiftData framework. We implement the following safeguards:
InOrbit's server is hosted in the United States. If you are located outside the United States, your authentication data is transferred to and processed in the United States.
No method of electronic transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
We retain server-side data for as long as your account is active. On-device data (messages, Worlds, settings, photos) can be deleted at any time using the "Delete All Worlds" option in the App's settings.
You can delete your account and all server-side data directly in the App under Settings > Account Deletion > Delete Account, or via the web at micah.chat/inorbit/delete-account. You will be asked to verify your identity with Apple before deletion proceeds. Upon deletion:
You may also contact us at [email protected] to request account deletion.
InOrbit is not intended for children under the age of 13. InOrbit requires Sign in with Apple, which includes Apple's own age verification. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal data, please contact us at [email protected] and we will promptly delete it.
Depending on your jurisdiction, you may have the right to:
To exercise any of these rights, contact us at [email protected].
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of the App after changes constitutes acceptance of the revised policy.
If you have questions or concerns about this Privacy Policy, please contact:
Micah Giszack
[email protected]