InOrbit — Last updated: February 6, 2026
Micah Giszack ("we," "us," or "our"), based in the United States, built InOrbit as a commercial application. This Privacy Policy explains how we collect, use, and protect your information when you use InOrbit ("the App").
By using the App, you agree to the practices described in this policy. If you do not agree, please do not use the App.
InOrbit is designed to minimize data exposure. Your conversations and content are processed automatically by our infrastructure provider (Railway) to enable the AI chat experience. We do not read, review, or moderate your messages. There is no admin dashboard or content moderation tooling built into InOrbit. We may access message metadata (such as timestamps and message counts) for debugging or abuse prevention, but we do not access message content.
Most of your data stays on your device and is never sent to our servers. Your message content is never viewed or accessed by any person. We may access limited server-side metadata (such as timestamps and message counts) for debugging or abuse prevention.
| Data Type | Details | Stored Where |
|---|---|---|
| Messages | Text you send in conversations ("Worlds") and AI-generated replies | On your device (sent directly to OpenRouter for AI responses) |
| Conversation Settings | World names, participant configurations, and preferences | On your device |
| Participant Photos | Avatar images you select for AI participants from your photo library | On your device only — never uploaded to our servers |
Our backend, hosted on Railway, stores a minimal set of data to support account authentication and optional background features:
| Data Type | Details | Purpose |
|---|---|---|
| Anonymous Identifier | An opaque, anonymous token generated by Sign in with Apple — not your Apple ID, name, or email | Account authentication |
| Device Token | Apple Push Notification service (APNs) token | Delivering push notifications |
| API Key Metadata | If you use the API key provisioned at sign-up: a hash of the key and usage metadata (spend amount, model usage) visible to us via OpenRouter | Key provisioning and abuse prevention |
We do not collect or store:
We do not use your data for advertising, profiling, or selling to third parties. We do not review, moderate, or monitor your content.
InOrbit relies on the following third-party services to function:
Server-side data is stored on infrastructure provided by Railway and processed by automated systems. On-device data is stored locally using Apple's SwiftData framework. We implement the following safeguards:
No method of electronic transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
We retain server-side data for as long as your account is active. On-device data (messages, Worlds, settings, photos) can be deleted at any time using the "Delete All Worlds" option in the App's settings.
To request deletion of your server-side data (anonymous profile, device tokens, and API key metadata), contact us at micah@micah.chat. Upon deletion:
InOrbit is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal data, please contact us at micah@micah.chat and we will promptly delete it.
Depending on your jurisdiction, you may have the right to:
To exercise any of these rights, contact us at micah@micah.chat.
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of the App after changes constitutes acceptance of the revised policy.
If you have questions or concerns about this Privacy Policy, please contact:
Micah Giszack
micah@micah.chat