In Your Orbit
Legal · Privacy

The data we hold,
and the data we can't.

In plain language: your vault is end-to-end encrypted before it ever leaves your device — we can't read it. We don't sell anything. There are no analytics SDKs, no ads, no third-party trackers.

Effective August 4, 2026 (updated)

Plain-English summary

In Your Orbit is a client-relationship app built by Eric Olsen Studio in Florida. When you create an account, we store your email, your name, and a hash of your password. We also store the records you create — clients, notes, tasks, shared tasks, goals, and chat messages — so they can sync between your Mac and iPhone in realtime. Your vault is different: its contents are encrypted on your device with a key we never have, so what reaches our server is ciphertext we cannot decrypt. We don't run analytics, we don't share your data with advertisers, and we don't sell anything.

The data we store on our server

Your In Your Orbit account lives on a private server we operate. Here's everything kept there:

  • Account email and name — used to sign you in and to send account-related email such as password resets. Never used for marketing.
  • Password hash — your password is stored only as a hash. We never see it in plain text and can't recover it for you.
  • Clients, notes, tasks, shared tasks, goals, and chat messages — stored as plaintext database rows so the apps can search, sort, and sync them. Every row sits behind per-account access rules: only your account (and, for shared-space rows, the one member of that space) can read it through the API.
  • Vault entries — passwords, API keys, cards, and secure notes are encrypted end-to-end on your device (AES-256-GCM, key derived from your account password via PBKDF2 with 600,000 rounds) before they're sent. The server stores ciphertext the operator cannot decrypt. See the next section.
  • Chat photos — see the Cloudflare section below.
  • Server logs — standard HTTP access logs (IP, timestamp, path) kept for abuse prevention. They roll off after 14 days and aren't joined with your account data for any analytics purpose.

The vault — what "end-to-end encrypted" means here

The vault key is derived on your device from your account password (PBKDF2-HMAC-SHA-256, 600,000 iterations). Vault entry contents are sealed with AES-256-GCM before they leave the device; only ciphertext travels and only ciphertext is stored. This means:

  • We cannot read your vault. Not by policy — by construction.
  • If our server were breached, an attacker would get ciphertext and a slow hash.
  • If you reset your password by email, the vault stays sealed under your old password until you re-link it in the app by entering the old password once. If the old password is lost, the vault contents cannot be recovered by anyone — including us — and can only be reset (deleted).

Chat photos and Cloudflare

Photos sent in a shared-space chat are uploaded to the In Your Orbit server, then mirrored to Cloudflare Images, which acts as a processor for us: it stores the image and serves it through Cloudflare's content-delivery network. The apps load photos via CDN URLs. Cloudflare processes this data on our instructions to deliver the service; its handling is governed by Cloudflare's own data-processing terms. Chat photos are not end-to-end encrypted (unlike the vault) — treat the chat like email, not like the vault.

What an invited member can see

If you invite a client into your orbit, their account can access exactly one thing: the shared space between the two of you — its chat, shared tasks, and shared goals. Server-side access rules prevent a member's account from reading your notes, your personal tasks, your vault, or anything about your other clients. The boundary is enforced on the server for every request, not by the app on their device. If either side disconnects, the member's access ends; the owner keeps their side of the shared history.

Where the data lives

In Your Orbit's database runs on a private server we operate, hosted with Hostinger in a European data center. All traffic between the apps and the server travels over TLS.

Email we send

Transactional email — currently just password resets — is sent over SMTP from info@ericolsen.studio. We don't send marketing email.

Sharing & sale of data

We don't sell your data. We don't share it with advertisers, data brokers, or "partners." The only third parties involved are:

  • Hostinger — operates the server where In Your Orbit's database lives.
  • Cloudflare — stores and delivers chat photos, as described above.
  • Apple — distributes the apps via the App Store. Apple's privacy policy governs anything they receive from you.
  • Formsubmit.co — delivers the contact form on this website to our inbox. Only used if you submit that form.

If we're ever served with a valid legal request, we can only hand over what we have — which, for vault contents, is encrypted bytes.

Analytics & ads

The In Your Orbit apps contain no analytics SDKs, no ad networks, no fingerprinting, and no third-party trackers. This website does not use cookies, does not run analytics, and does not include external scripts beyond Google Fonts for typography.

Retention & deletion

Your data is kept for as long as your account is active. In-app account deletion isn't available yet; to delete your account, email ericolsenhospitality@gmail.com from your account address and it will be erased. Deletion removes every row tied to the account — clients, notes, tasks, memberships, shared tasks, goals, chat messages, and vault ciphertext — and we request deletion of the account's chat photos from Cloudflare. Anything lingering in routine encrypted backups is purged within 30 days. Server access logs roll off after 14 days regardless.

Your rights

Wherever you live, you can:

  • Ask for a copy of your data — email us and we'll provide it (in-app export is returning in a future update).
  • Correct or delete individual records at any time, from the app.
  • Delete your account entirely by emailing support, which deletes everything we have.
  • Email us with any privacy question or request.

Children

In Your Orbit isn't directed at anyone under 13, and we don't knowingly collect data from anyone in that age range. If you believe a child has created an account, email us and we'll delete it.

Changes to this policy

If we ever change anything material here, we'll update the effective date at the top and — for active users — surface a notice in the app before the change takes effect.

Contact

Questions, requests, or anything else: ericolsenhospitality@gmail.com. One person reads that inbox.

Last updated August 4, 2026