Privacy Policy

Account information: your name, email address, and whether you signed up with Google or with an email and password. If you are under 18, a parent or guardian's name and email address.

Profile information you provide: your grade, track, GPA, courses and their levels, test scores, activities and hours, awards, mentors and recommenders, the schools you're interested in, how much time you have, and your school year start and end dates.

Activity within the product: which roadmap tasks you complete and their outcomes, your quarterly check-in answers, your conversations with Orblite, your Positioning Score history, and the tools you use — volunteer hours, documents you upload to the vault, flashcard decks, and similar.

Technical information: your time zone, captured from your browser at signup so message allowances reset at a sensible local hour. We do not collect precise geolocation, we do not collect biometric identifiers, and we do not build advertising profiles.

We do not knowingly collect information from anyone under 13. See section 7.

To generate and update your roadmap, to personalize what Orblite says to you, to calculate your weekly Positioning Score, to run the tools you choose to use, to send the emails you have enabled, to take payment if a family upgrades, and to operate, secure and debug the Service.

That is the complete list. We do not use your information for advertising, we do not use it to train anyone's AI models, and we do not use it to build a profile of you for any purpose outside this product.

Your profile and conversation context are sent to Anthropic's Claude API to generate responses and calculate your score. Only what is needed for a given request is included: a small always-on profile on every message, and your fuller record when the question or the weekly scoring run actually calls for it.

Anthropic is our only AI provider. Nothing you write is sent to any other AI company.

We use Anthropic under paid commercial terms, which do not permit them to train their models on your content. We do not opt in to any programme that would.

Some information is asked for in the moment and never stored at all — for example, whether you prefer working alone or with others. It is used for that conversation only.

The Positioning Score is generated automatically, without a human reviewing it. It is a number from 40 to 100 describing how strong your profile looks relative to your own grade and your chosen track, along with one strength, one gap, and one thing to focus on. It is recalculated weekly from the information already in your profile.

It does not predict admissions decisions, it is not used to decide anything about your account, and no third party ever receives it. Nothing about your access to Orblite, your price, or what you are shown depends on it.

If you think your score is wrong, say so in the chat or email us — a score is a description of the information we hold, so correcting the information is usually the fix. You can also ask us to stop calculating it for your account, and we will.

Because this is automated processing about a minor, we treat it as profiling under the state privacy statutes that use that term, and we hold it to the limits described above rather than relying on it being benign.

We share information with the service providers that make the product work, and with nobody else. Each receives only what its function requires, is bound by contract to use it only to provide that service, and is not permitted to sell it or use it for its own purposes.

Supabase — database and authentication. Anthropic — AI processing. Google — sign-in only, and only if you chose to create your account with Google. Stripe — payments; Stripe receives billing details directly and we never see or store card numbers. Resend — transactional email. Vercel — hosting and request logs.

We do not sell your information, we do not share it for cross-context behavioral advertising, and we do not disclose it to data brokers. See section 10.

We may disclose information if we are required to by law, or where disclosure is genuinely necessary to protect someone's safety. If a business transfer ever happened, your information would move with it and this policy would continue to apply until you were notified of a change.

You must be at least 13 to use Orblite. Age is self-declared at signup, before any personal question is asked, and we do not require identity documents from teenagers to determine it — collecting government ID from minors would create a far larger privacy risk than it solves.

If we learn that an account belongs to someone under 13, we delete it and everything associated with it. If you believe a child under 13 has created an account, email hello@orblite.ai and we will remove it.

If you are under 18, a parent or guardian must consent before you can use Orblite at all. That consent is collected when the account is created, before we ask the student any personal questions, and it is required for free accounts exactly as it is for paid ones — it is not tied to payment in any way.

A guardian with a login can see their student's Positioning Score, quarter progress, and billing. They cannot see chat history, check-in answers, or task-level detail. That boundary is deliberate: students tell Orblite things they would not tell a portal their parent can read, and a product that repeated them verbatim would stop being told anything true.

A parent or guardian may review, correct, or request deletion of their student's information at any time, and may withdraw consent — which closes the account. Email hello@orblite.ai.

We do not serve advertising to anyone, we do not process anyone's information for targeted advertising, and we do not sell the personal data of any user, minor or otherwise. Several states now prohibit these specifically for users aged 13 to 17; we do not do them for anyone.

If a conversation contains a genuine crisis signal, Orblite is instructed to respond supportively and to share crisis resources — the 988 Suicide & Crisis Lifeline and the Crisis Text Line. The full protocol is published at orblite.ai/safety.

Orblite does not monitor conversations in real time and is not an emergency service. No person is watching. If you are in immediate danger, contact 911 or go to your nearest emergency room.

Account, profile, roadmap progress, check-in answers, score history and conversations: kept while your account is open, because the product's whole function is continuity across four years of high school. Deleted with the account.

Documents you upload to the vault: kept until you delete them or delete your account.

Billing records: kept for seven years after the last transaction, because tax and accounting law requires it. This is the one category that survives account deletion, and it is reduced to what those obligations need — amounts, dates, and the payment identifier — not your profile or your conversations.

Consent records for guardian consent and for subscription auto-renewal: kept for three years, or one year after the subscription ends, whichever is longer, because the statutes that require the consent also require the record.

Server and request logs: 30 days.

Cancelling Premium deletes nothing. Your account returns to the Free tier with its full history intact, and resubscribing later picks up where you left off.

Deleting your account from the Danger Zone in Settings is what erases your data. It is self-serve, immediate, and permanent, and it removes your profile, roadmap progress, chat history, check-ins, documents and score history together. Encrypted backups are overwritten on a rolling 30-day cycle, so a deleted record can persist in a backup for up to 30 days and is not restored to the live system. We do not delete accounts on our own for inactivity.

We do not sell personal information, and we have not in the preceding twelve months. We do not share personal information for cross-context behavioral advertising, and we have not in the preceding twelve months. We do not process personal information for targeted advertising.

Because none of these happen, there is nothing to opt out of. We honor Global Privacy Control signals; there is simply no processing for them to stop.

We do not use personal information for any purpose that would require an opt-out or opt-in under the state statutes listed in section 11, other than the profiling described in section 5, which you can ask us to stop.

Wherever you live, you can ask us to: confirm whether we hold information about you and give you a copy in a portable format; correct anything inaccurate; delete your account and its data; and stop the automated scoring described in section 5. Most of this is self-serve — you can edit your profile in the app, change your calendar and notification preferences in Settings, and delete your account yourself at any time.

Residents of California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, Indiana, Kentucky, Rhode Island and other states with comprehensive privacy statutes have these rights by law, along with the right not to be discriminated against for exercising them. We do not offer a different price or a worse product to anyone who does.

To make a request, email hello@orblite.ai from the address on the account, or write from a guardian address naming the student. We respond within 45 days and will tell you if we need a permitted extension. We may need to verify that the account is yours before acting on a request about it; for a deletion request we will not ask for more information than the request itself requires.

If we refuse a request, we will tell you why, and you may appeal by replying to that decision. We respond to appeals within 45 days. If an appeal is denied you may complain to your state Attorney General; California residents may also contact the California Privacy Protection Agency.

You may use an authorized agent to make a request on your behalf, with written permission we can verify.

For the disclosure some state statutes require, in their terms: we collect identifiers (name, email, account ID), customer records (guardian contact details), commercial information (subscription status and history), internet activity limited to your use of this product, inferences drawn from what you tell us (your Positioning Score and its components), and information relating to education — grades, courses, test scores, activities and awards — which you provide to us directly.

We collect all of it from you, or from a guardian on your behalf. The purposes are listed in section 3. The categories of recipients are listed in section 6. The retention periods are in section 9.

We do not collect the categories some statutes define as sensitive — precise geolocation, biometric identifiers, government ID numbers, racial or ethnic origin, religious beliefs, health or genetic data, sexual orientation, union membership, or the contents of your mail, email or messages other than what you write to Orblite here — and we do not want them. Please do not put them into the chat.

Orblite is a direct-to-family product. We are not a school, we do not contract with schools, and we do not receive records from them. FERPA governs records held by schools and by their contractors, and it does not apply to what you type into Orblite yourself.

If that ever changes — if Orblite is offered through a school — this policy will change with it, and we will say so before it takes effect.

Data is stored with row-level security, so a student's records are only ever readable by that student. Billing fields are writable by exactly one verified path and never by the browser. Documents you add to the vault are stored as text in that same database, under the same row-level security — there are no files sitting on a server that a link could reach. All traffic is encrypted in transit and data is encrypted at rest by our infrastructure providers.

Access to production data is limited to the people who need it to operate the Service, which today is one person.

If a breach affects your information, we will notify you and the relevant authorities as required by law, without undue delay.

No system is perfectly secure, and we cannot guarantee absolute security.

We use cookies only to keep you signed in and to remember your light or dark theme preference. There are no advertising cookies, no third-party tracking cookies, and no cross-site trackers. Because of that there is no consent banner — there is nothing to consent to.

Your browser's Do Not Track and Global Privacy Control signals are respected by default, in the sense that we already do not do any of the things they ask us to stop.

We may update this policy. The date at the top always reflects the current version. If a change materially affects how your information is handled, we will notify you by email before it takes effect, and where the law requires fresh consent we will ask for it rather than assume it.

Privacy questions, requests, and appeals: hello@orblite.ai.

We will add a postal address here before launch; until then email is the fastest route and is monitored.