Legal
Privacy Policy
SharedOrbit is a private space for two people. This policy explains, in plain language, what data we collect, why, and the control you have over it.
Last updated: July 3, 2026
The short version
We collect only what the app needs to work: your account details and the content you and your partner add. We don't run ads, we don't use third-party analytics or trackers, and we never sell or share your data. Your photos and messages are visible only to you and your partner. You can delete your account — and everything in it — at any time, right from the app.
Who we are
SharedOrbit ("we", "us") provides a private web app for long-distance couples at this website. For anything in this policy, you can reach us at sharedorbitteam@gmail.com.
What we collect
- Account details. Your email address, a display name, and a password (stored only as a secure hash — we never see it). If you sign in with Google, we receive your name, email and profile picture from Google instead of a password.
- Content you and your partner add. Photos, journal entries, answers to daily questions, open-when notes, bucket-list items, playlist links, memories, and dates such as your anniversary or reunion countdown.
- Details you choose to share. An optional time zone or location label used for features like the local-time and distance displays. We never access your device's GPS or precise location.
- Notification subscription (optional). If you turn on notifications, we store the push subscription your browser issues (an endpoint URL, encryption keys and your browser type) so we can deliver them. Turning notifications off removes it.
- Essential cookies. Session cookies that keep you signed in. We set no advertising or analytics cookies.
What we deliberately don't do
- No third-party analytics or tracking scripts.
- No advertising, and no advertising identifiers.
- No selling, renting, or trading your personal data — ever.
- No public feeds: your content is never shown to other users.
- No human review of your photos or messages. Our team does not browse couples' spaces.
- No access to your device's GPS, contacts, or camera roll beyond the photos you explicitly upload.
How we use your data
Solely to provide SharedOrbit: to keep your shared space in sync between you and your partner, deliver notifications you asked for, keep your account secure, and respond when you contact us. We don't use your content for advertising or profiling, and we don't use it to train AI models.
Who can see your content
Only you and the partner you invite. Every space is isolated at the database level with row-level security, so no other account can query, browse or stumble into it. Gift pages you explicitly create are viewable by anyone who has that unique link — that's their purpose — and nothing else is.
Service providers we rely on
Like nearly every web app, we run on a small set of infrastructure providers. They process data on our behalf under their own security and privacy commitments, and only as needed to run the service:
- Supabase — database, authentication and photo storage (data encrypted in transit and at rest).
- Netlify — hosting and content delivery for the website itself.
- Google — only if you choose to sign in with Google.
- Your browser's push service (operated by Apple, Google or Mozilla) — only if you enable notifications. Notification payloads are encrypted; these services relay them without reading the content.
Beyond these, we disclose personal data only if the law genuinely requires it.
Security
All traffic is encrypted with HTTPS/TLS, data is encrypted at rest, passwords are hashed, and each couple's space is enforced as private at the database layer — not just in the interface. No system is perfectly secure, but privacy is the reason this product exists, and we build accordingly.
Retention and deletion
We keep your data only while your account exists. Deleting your account (Account → Delete account) permanently removes your profile, photos, notes and everything else you added — this is immediate and not reversible by us. You can also leave a shared space without deleting your account. Residual copies in encrypted backups expire on a short rolling schedule.
Your rights
Depending on where you live (including under the GDPR and similar laws), you have the right to access, correct, export, restrict or delete your personal data. Most of this you can do directly in the app; for anything else, email sharedorbitteam@gmail.com and we'll respond within 30 days.
Children
SharedOrbit is not intended for anyone under 13 (or the higher age your country requires for consenting to data processing, such as 16 in parts of the EU). We don't knowingly collect data from children; if you believe a child has created an account, contact us and we'll delete it.
Changes to this policy
If we make material changes, we'll update the date at the top of this page and, for significant changes, notify you in the app or by email before they take effect.
Questions
Email us at sharedorbitteam@gmail.com or see the FAQ. We read everything.