Privacy Policy

Last updated: November 1, 2026

This policy explains what the UpOrbit website (uporbit.app), web app (uporbit.app/app) and Chrome extension ("UpOrbit", "we", "us") collect, why, who we share it with, and the choices you have. Health-related data from the app is also covered by our Consumer Health Data Privacy Policy.

1. Using the web app without an account

By default, everything you enter in the web app — tasks, the daily Must-Do, routines, brain dump notes, wellness check-ins, progress and settings — is saved in your browser's local storage on your device. Without an account, none of it is sent to us.

• Voice input: the microphone is used only when you tap the microphone button to dictate a task. Speech-to-text is performed by your browser's built-in speech recognition, which may send the audio to the browser maker (for example, Google in Chrome) under their privacy terms. UpOrbit does not receive or store audio.
• Notifications: reminders and nudges are scheduled and shown by your browser on your device.

2. Optional accounts and cloud sync

Accounts. If you create an account, it is managed by Netlify Identity, a service of our hosting provider Netlify, Inc. We receive your email address, an account ID, and sign-up and sign-in times. Your password is handled by Netlify Identity and is never visible to us. If the sign-in window offers signing in with another provider and you use it, that provider shares your email address with us.

Cloud sync requires your consent. Before anything is uploaded, the app asks you to confirm that you are 18 or older and that you agree to store your data in the cloud. If you don't agree, nothing is synced.

What is synced. A copy of your full app data: tasks and their dates, times, reminders and notes; your Must-Do and its "why"; routines; brain dump notes; wellness check-ins (such as water, movement, eating, breathing and the daily "Meds — have you taken it today?" check-in); XP, streaks and progress; and app settings. Anything you type into a task or note — which may include health information — is included.

Where it's stored. In Netlify Blobs storage, linked to your account ID, and sent over encrypted (HTTPS) connections. Only you (when signed in) and the people who operate UpOrbit can access it, and we access it only to provide the service, to fix problems you report, or when required by law.

How long we keep it. Until you delete it or delete your account. Deleted data is removed from active storage right away; copies may remain in our providers' backups or logs for a limited period before they are overwritten.

How to delete it. In the app, go to Settings → Delete my cloud data. This permanently deletes your synced data and your account login. You can also ask us to do it using the contact form (choose "Delete my data"). "Reset this browser" in Settings clears only the data in that browser.

3. Google sign-in and "Save to Google Docs"

The app, the diagnosis guide and many articles offer a "Save to Google Docs" button. If you use it, Google asks your permission and gives your browser a temporary access token. We request only the access needed to create the document: the https://www.googleapis.com/auth/drive.file scope, which lets UpOrbit create and edit only the files it creates for you and not see your other files. Some article pages may also request the Google Docs scope (https://www.googleapis.com/auth/documents) to create the document.

The token stays in your browser's memory, expires within an hour, and is used only to create a document containing the text you chose to save. It is never sent to UpOrbit's servers, and we don't store your Google account information or the documents' contents. You can remove UpOrbit's access at any time in your Google Account permissions.

UpOrbit's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, do not sell it, and do not allow humans to read it except with your permission, for security purposes, or to comply with law.

4. Website analytics: Google Analytics and Microsoft Clarity

We use Google Analytics 4 and Microsoft Clarity on uporbit.app to understand which pages and features are useful so we can improve them. They may set cookies or similar identifiers and collect information such as pages viewed, referring site, approximate location (derived from IP address), device and browser type, and how you scroll and click. Clarity can also create session replays, which are reconstructions of how a page was used.

• Analytics only, not advertising. We have turned off advertising storage and ad personalization signals for both tools, and we don't use them for ads or remarketing.
• App content is excluded. The web app page is masked from Clarity session replays, and we never send your tasks, notes or wellness and medication check-ins to Google Analytics or Clarity.
• Consent in Europe. For visitors in the EEA, UK and Switzerland, analytics stay off unless you choose "Allow analytics".
• Opting out. Anyone can turn analytics on or off at any time using the Privacy choices link in the footer of our pages, or in the web app under Settings → Privacy. Your choice is saved in your browser. If your browser sends a Global Privacy Control signal, we treat it as an opt-out and keep analytics off. You can also use browser controls or Google's opt-out add-on.

Google and Microsoft process this data under their own terms: see the Google Privacy Policy and the Microsoft Privacy Statement.

5. Hosting, fonts and contact form

• Hosting logs. Our host, Netlify, processes technical information such as IP address, browser user agent, requested URL and time for every request, to deliver the site, keep it secure and troubleshoot problems.
• Fonts. Pages load fonts from Google Fonts, so your browser connects to Google's servers, which receive your IP address.
• Contact form. If you use the contact form, we receive your email address, the request type and your message through Netlify Forms. We use them only to respond. We keep messages only as long as needed to respond, and we keep records of privacy requests for up to 24 months where the law requires it.

6. Affiliate links (Amazon Associates)

Some articles and the products page contain Amazon affiliate links. As an Amazon Associate I earn from qualifying purchases. UpOrbit doesn't set Amazon cookies on our site. When you click an affiliate link and go to Amazon, Amazon may set cookies to credit the referral, under Amazon's privacy notice. We see only aggregated reports of referred purchases, never who bought what.

7. UpOrbit Chrome extension

The extension stores your Must-Do and history, brain dump notes, timer state and settings on your device using chrome.storage.local. It has no accounts, no cloud sync, no analytics and no third-party services, and it does not transmit your data anywhere. Uninstalling it, or using "Clear all data" in its settings, deletes this data. It requests these permissions:

• storage — to save your tasks, notes and settings on your device.
• alarms — to end focus timers and schedule wellness nudges on time, even when no tab is open.
• notifications — to show timer-complete and wellness-nudge notifications.
• offscreen — to play timer and nudge sounds from a hidden page, because Chrome extensions' background workers can't play audio directly.

8. How we use and share information

We use the information above to provide and secure UpOrbit, sync your data when you ask us to, respond to you, understand and improve the site, and comply with law. We share it only with service providers that process it for us — Netlify (hosting, accounts, cloud storage, forms), Google (analytics, fonts, optional Docs export) and Microsoft (Clarity analytics) — and when required by law or to protect rights and safety. If UpOrbit is ever sold or merged, information may transfer to the new owner under this policy's protections.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising or targeted advertising.

9. Your US state privacy rights

Depending on where you live (for example California, Colorado, Connecticut, Oregon, Texas, Virginia, Washington and other states with consumer privacy laws), you may have the right to:

• know about and access the personal information we hold about you, and get a portable copy;
• correct inaccurate information;
• delete your information;
• opt out of the sale of personal information, targeted advertising and profiling (we don't do these);
• withdraw consent you have given, including consent to process health data;
• appeal our decision on your request; and
• not be discriminated against for exercising these rights.

We offer these rights to all users regardless of where they live. To make a request, use the contact form and choose the request type. Signed-in users can also export their data (Settings → Export) and delete their cloud data in the app. We'll verify your request by confirming it with the email on your account, and respond within 45 days. You may use an authorized agent; we may ask for proof of their authority. To appeal a decision, use the contact form, choose "Privacy request" and start your message with "Appeal". If you're unhappy with the result of an appeal, you can contact your state attorney general.

Wellness and medication check-ins are "consumer health data" or "sensitive data" under some state laws. Our Consumer Health Data Privacy Policy explains how we handle them.

10. Children and teens

UpOrbit is a general-audience service and is not directed to children under 13. Accounts and cloud sync are only for people 18 and older, because synced data can include health information. We don't knowingly collect personal information from children under 13; if you believe a child has given us personal information, please tell us through the contact form and we will delete it. Without an account, the app keeps data only in the browser.

11. Security

We use HTTPS for all connections, store synced data separately for each account, limit access to the people who run UpOrbit, and keep the cloud data we hold to what you choose to sync. No system is perfectly secure. If a breach affecting your information occurs, we will notify you and the authorities as the law requires.

12. Changes to this policy

We'll update the date at the top when this policy changes. If we make a material change to how we handle synced data or health data, we'll show a notice on this site and in the app before the change takes effect, and we'll ask for your consent again where the law requires it.

13. Contact

Questions or requests about privacy? Use our contact form. UpOrbit is operated from the United States.