Privacy Notice

Orbitry (the "Service") is operated by Next Nutrition LLC ("we", "us", "our"). Next Nutrition LLC is the data controller for personal data processed through the Service. This notice explains what we collect, why we collect it, and with whom we share it.

Section 1 — Service Region

The Service is offered exclusively to residents of the United States and is designed to comply with applicable United States federal and state privacy laws. At sign-up we record the country associated with your IP address and ask you to attest to United States residency. We may refuse or terminate accounts that we determine are outside the United States.

Section 2 — Data We Collect

This section identifies the categories of information we collect from you ("Service Data"). Detailed explanations of how each category is used appear in the next section, "Why We Process Your Data."

1. Account Data. Your email address and password used to create and authenticate your account. Your phone number (if you sign in by phone) — stored only for authentication via one-time codes.
2. Birth Data. Your birth date, birth time, and birth location, used to compute your full natal chart.
3. Profile and Reflective Data. Your selected mirror paths and tiers, questionnaire answers and scores, display name, Galaxy customization (planet names, colors, nebula palette, center-star effects), journal entries, Life Events, and seasonal check-ins.
4. Pulse Check-Ins. Daily state recorded on the Pulse card (mental energy, clarity positions, and mood chips). Used to show seven-day continuity and to inform Compass reports and reflections.
5. Compass. A synthesis view that reads across your existing content (reports, journal entries, Pulse check-ins, music activity) and returns a three-point orientation drawn as a card deck. Stored so you can revisit it.
6. Journal Entries and Attachments. Text reflections, voice memos, and image attachments that you save through the Journal. Stored privately; only you can access them. Journal entries are never used to train AI models and are not shared with third parties.
7. Life Events. Dates you add to your timeline (for example, a move, a loss, a milestone) with title, note, and category. Stored privately, shown on your Calendar, and used to enrich Compass reports and Astreus reflections.
8. History Records. Journal History, Ask Astreus History, and My Saved Documents records exist so you can revisit what you have written, asked, and uploaded.
9. Chat Archive. Your prior text and spoken Astreus conversations are retrievable from Chat History so you can revisit them.
10. My Saved Documents Files. Files you upload (birth charts, PDFs, images, text) are stored for later reference. You can delete individual documents at any time; all My Saved Documents contents are deleted when you delete your account.
11. AI Inputs and Outputs. When you use AI-powered reflections, we send our AI provider a context bundle that may include your Sun, Moon, and Rising signs, selected paths, alignment scores, journal excerpts (up to the first 400 characters of up to five entries), Pulse check-ins, Life Events, recent music activity, and any My Saved Documents files you attach. Astreus never receives direct message content. AI responses are used to generate your reflection inside the app.
12. Voice Features.
    • Read Aloud: generates neural narration of a card or report you choose; audio is cached in a private storage bucket tied to your account.
    • Live Chat: real-time spoken conversation; microphone audio is streamed to our voice provider and AI provider to generate a spoken reply. Transcripts are stored so you can revisit them. Voice audio is not retained by us (except cached narration audio).
13. Live Chat Minutes (Metering). We keep a ledger of seconds granted and consumed (free lifetime session, monthly Premium minutes, and any minute packs purchased) so we can bill accurately and show your remaining balance.
14. Community Content. Posts, replies, direct messages, your display name, and any attached files are stored and shown to other signed-in users in real time. Reports, edit timestamps, and custom tags are stored to enable moderation and filtering. Community search covers this content.
15. Sky Photos and Sightings. Photos with captions posted to Sightings threads (Moon, Sun, Sun Rise/Set, Sky, Eclipse, Meteor Shower, Aurora, Planets). Photos are stored and visible to other signed-in users through the thread. You can delete your own sightings at any time; when you do, the photo and its caption are removed from the thread for everyone and the underlying file is deleted from storage, so it no longer appears anywhere in Community. Replies other users wrote to your sighting may remain in the thread without your photo.
16. Profile Photo Gallery. Up to five photos with captions. Visibility to other signed-in users is controlled by a setting you can change at any time.
17. Companions. Name or nickname, connection type and length, notes, photo, files, and birth details of a Companion. Companion records, reports (Synastry, houses, Slow Clock, composite views), and downloaded PDFs are private to you.
18. Community Actions. Bookmarks, hidden posts, thread votes, and saved items are stored on your account. Bookmarks and hidden posts are private; votes are private (other users cannot see how you voted).
19. Direct Messages. Messages you send other users, including attached files, are stored and visible to message participants and to moderators when a message is reported. Not shown publicly.
20. Mentions, Reactions, Follows, and Bookmarks. Actions are stored so affected users can be notified (mentions and follows) and counts can be displayed (reactions). Follows are public; unfollows, mutes, hides, and bookmarks are private.
21. Presence and Last-Seen. While Orbitry is open, a lightweight "online now" indicator is shown to other users. Online/offline status can be adjusted by clicking the red/green dot on the online/offline buttons throughout the app (left menu, community, profile). Your presence signal is discarded within a few minutes after you close the app.
22. Blocks, Mutes, and Hides. Lists of users you have muted or blocked, and individual posts you have hidden, are stored. When you block another user, their content and messages are not delivered to you. Mutes and hides simply remove content from your feed.
23. Resonance Signal. A chart-similarity signal computed from placements you and other users have entered. You can turn Resonance off; doing so hides the signal from you and removes you from being surfaced to others. Only a qualitative tier (for example, "Strong" or "Exceptional") is shown; numeric compatibility scores are never shared.
24. Famous-Figure Resonance. Sign echoes between your chart and well-known public figures, using only publicly known birth dates and signs. No birth times, houses, or private data are used.
25. Song of the Day and Music Taste. Song of the Day history, taste preferences, On Repeat pins, manual listening data, excluded artists/keywords, and Premium narrowing controls are stored. The "Listening to" field is shown on your profile. Sign Room playlists are curated centrally and do not collect personal data; we do not receive your listening history from streaming services.
26. Reach Out. Private links you send to someone you choose. Responses and follow-ups are stored and used to generate a comparison between your reflections and their answers. Not published to the community and not used to train AI models.
27. Share Cards. When you share a card, a share link with its own address is created that renders a preview image. Anyone with the link can view it. Nothing is shared until you tap share.
28. Report Downloads and Copy Attribution. Reports and Companion reports can be downloaded as PDFs on request. When you copy longer passages, the app appends a short Orbitry attribution line; you can turn attribution off in Privacy Settings.
29. Notifications. In-app feed of mentions, replies, direct messages, event nudges, and community pings, stored on your account.
30. Event Nudges. The app computes upcoming transits and aspects and may show in-app banners for the same. Nudge history is stored so the same nudge is not shown repeatedly.
31. Public Reviews. Star ratings and review text are shown publicly inside the app alongside your display name. Do not include personal information in reviews.
32. Subscription and Billing Data. Your subscription status, plan, current period end, and Stripe customer and subscription identifier. Full payment details (card numbers, billing address) are collected and stored by Stripe; Orbitry does not see or store this information.
33. Support Communications. Messages you send us. Used to respond to you and to improve the Service.

Section 3 — Where Your Data Comes From

Almost everything we hold comes directly from you: what you enter during onboarding, what you write in your journals and Life Events, what you post in Community, what you record with your voice, what you upload to My Saved Documents or profile gallery, and the choices you make in settings.

Three other sources exist:

1. Your device and connection. Your IP address (used to record the country at sign-up and to protect against abuse), browser or app version, and time zone.
2. Files you choose to import. If you attach a music data export in Astreus x Music, we parse your listening history from that file.
3. Other people, in three narrow places. Another user's Reach Out responses about you (which you requested); a Companion record that you create about someone else; and content other users post that mentions or replies to you. If you enter information about another person — a Companion's birth data, a note about a partner — you are responsible for having their permission, and that person may ask us to access or delete what is held about them by writing to our contact form.

Section 4 — Why We Process Your Data

Section 5 — Profile Record

Orbitry keeps a record of your input (chart, mirror paths, resonance, listening, compass) in order to provide your reflections through Astreus.

Your profile content may be used to inform safety measures — rate limits, spam controls, and the safety-flag and minor-account signals described elsewhere. Actions taken as a result of safety investigations are made in compliance with Orbitry policies and our Community Guidelines.

You may adjust your privacy settings under the "Data & privacy requests" panel under "Account and Privacy" > "Privacy Settings". Personalized reflections are the core of the Service, so an objection to that processing cannot be honored while your account remains open: if you ask us to stop using your content to generate reflections, we will tell you that the request results in closure of your account, and you can download or delete your data at any time before or after that.

Section 6 — Sensitive Data

Some of what Orbitry holds is treated as sensitive personal information under U.S. state law. We treat the following as sensitive:

• Your birth date, birth time, and birth place.
• Journal entries, Pulse check-ins, mood and energy ratings, and Heart Mirror content, which can reveal health, mental-health, sex-life, or relationship information.
• Voice recordings and photographs that you record or upload.
• Anything you volunteer about religion, spirituality, philosophical belief, health, sexual material, or ethnicity, in a journal, a post, or a conversation with Astreus.

We use sensitive data only to provide the feature you asked for and to keep the Service safe. We do not sell it, we do not share it for advertising, we do not use it to infer protected characteristics for targeting, and we do not use it to make decisions about your account, your price, or your access. Voice audio is not retained (see Voice Input). You may ask us to limit our use of sensitive personal information at any time from the "Data & privacy requests" panel in Privacy Settings (under "Account and Privacy" in the left menu), and you can delete individual journals, check-ins, photos, and Companions yourself without filing anything.

Orbitry is not a data broker. We do not buy personal data about you, we do not sell personal data about you, and we are not registered as a data broker in any state because we do not engage in data broker related business.

Section 7 — What We Do Not Collect

• Your real name, unless you choose to enter it in a journal, display name, or community post.
• Advertising identifiers, and data collected to target advertising to you.

We do not sell your personal data, and we do not share it for cross-context behavioral advertising. We do not use your community content, your direct messages, your journals, or your AI conversations to train AI models.

Section 8 — Honest Design

Orbitry complies with relevant regulations and laws concerning treatment of your data:

• No advertising, no advertising identifiers, and no sale or sharing of your data.
• No hidden scoring of you. Reflections are written for you to read, and we do not use AI output to make automated decisions about your account, billing, or access.
• Defaults that favor privacy: your journals, Companions, reports, and My Saved Documents are private unless you choose to publish something, and profile and gallery visibility is yours to set.

Please report any issues or concerns concerning this section or any section of the privacy policy to our contact form.

Section 9 — AI Features

The AI reflections in Orbitry are powered by third-party large-language-model providers accessed through a paid API gateway. When you use an AI feature, the Service Data inputs described above are sent to the provider so that the model can generate a response. Under our paid-API agreement, the provider does not retain your inputs or outputs to train its models; the provider may retain inputs for a short window (typically up to 30 days) solely for abuse monitoring and service reliability, after which they are deleted.

Astreus and any other AI feature never receives the content of your direct messages with other users. We also do not send your account email address, your password, your phone number, or your payment information to the AI provider. My Saved Documents files are sent to the AI provider only when a feature explicitly reads them for a request. Files you keep in My Saved Documents without being used in an AI request are stored on your account but not sent.

AI reflections are provided for personal reflection and entertainment purposes only. They are not medical, mental-health, financial, legal, or psychological advice, and we do not use AI output to make automated decisions about you, such as decisions about your account, billing, or access.

We also maintain an internal research layer that studies aggregate patterns in how the Service is used so that we can improve reflections over time. These research signals shape reflections privately and are never surfaced to you, attributed to you individually, or shown to you as a score.

Section 10 — Cross-Device Sync

When you are signed in, the private items above that live "on your account" — your customized Galaxies, your journals, your Life Events, your Pulse check-ins, your Compasses and reports, your Ask Astreus history, your Song of the Day history and music taste, your Companions and their reports, your sightings, your profile gallery, your My Saved Documents files, your onboarding answers, your blocks/mutes/hides/Community Bookmarks, and your in-app notifications — follow you to any device that you sign in on. If you would rather keep this content on a single device, you can turn cross-device sync off from your Security settings.

Community content, including posts, replies, direct messages, reactions, follows, reports, and public reviews, is always stored on our servers because those features inherently involve other users.

We also mirror certain local app state to your account so that it follows you across devices, including your chat sessions, Astreus "memory," and your chosen voice or reading mode. This mirrored state is stored under your account and treated the same as the other synced items above.

Section 11 — How We Share Your Data

We do not sell your personal data. We share data only with the following categories of recipients:

Service Provider Details

ElevenLabs. Acts as our processor under written terms that limit processing to our documented instructions; their consumer privacy policy, which permits use of voice data for model improvement, does not govern this API relationship. Under those terms their trust and safety team may access content for policy enforcement. Data may be processed in the United States, the Netherlands, and Singapore.

Section 12 — Data Retention

We retain your account and reflective data for as long as your account is active. If you delete your account (Account and Privacy > Delete Account), we permanently delete your personal data within 30 days, except where we are required to retain records (for example, billing records held by Stripe for tax compliance).

What "within 30 days" actually means. When you confirm deletion, your account is closed and signed out immediately, your content stops being reachable by you or anyone else at once, and any community posts you left behind are anonymized in the same step. Your records are erased from our live database and file storage, and the erasure propagates through encrypted backups on their own rotation, which may take up to 30 days. There is no reactivation window and no grace period: once you confirm, we cannot restore the account or recover its content for you. If you delete a single item — a journal entry, a document, a sighting photo — it is removed from the live Service immediately and clears backups on the same rotation.

Deletion covers: birth data, journals (text, voice memos, photo attachments), Life Events, Pulse check-ins, Compasses and reports, Ask Astreus history, Song of the Day history and music taste, Companions and Companion reports, sightings and profile-gallery photos, My Saved Documents files, direct messages you have sent, Reach Out responses and links, share cards and their links, and Resonance data.

Community posts, replies, chat messages, and reviews that you have published may remain visible after deletion of your account in an anonymized form to preserve conversation context. You can delete your own posts and your side of any direct-message thread before closing your account.

Specific retention periods:

Section 13 — Children

Orbitry is offered for adults only. You must be at least 18 years of age to create an account or use the Service. We do not knowingly collect personal data from anyone under 18.

How we identify accounts that may be under 18. At sign-up we require you to affirmatively attest that you are 18 or older, and the Terms of Service require the same. We treat any of the following as a signal that an account may belong to a minor and will trigger review by a human moderator:

• Self-disclosure that the user is under 18.
• A good-faith report from another user, a parent or guardian, or a moderator.
• Profile or community content that, taken together, would lead a reasonable moderator to conclude the user is under 18.

When we confirm the user is under 18 we terminate the account and permanently delete the associated personal data within 30 days, except records we must retain for legal or billing compliance. If we conclude the signal was wrong, features are restored and the review record is closed. Review records are kept up to two years after resolution.

If you believe an account belongs to someone under 18, please contact us within the Orbitry app or at our contact form.

Section 14 — Your Rights

Every Orbitry user has the following:

• The right to know what we hold and why
• The right to get a copy
• The right to correct what is wrong
• The right to delete account material
• The right to take your data elsewhere in a portable file
• The right to opt out of any sale or sharing (we do neither)
• The right to limit our use of sensitive personal information
• The right to object to or restrict a particular kind of processing
• The right to withdraw consent to use user data
• The right to be free of retaliation for exercising any of these rights
• The right to appeal if we say no

How to file

Open Privacy Settings in the app and use the "Data & privacy requests" panel, or write to our contact form. You can also export your own content at any time from settings; the export contains the user related content you have provided (journals, Life Events, reports, Compasses, and Pulse check-ins) in a portable format.

What filing looks like. You choose the right you are exercising (know, copy, correct, delete, portability, limit sensitive data, object, withdraw consent, or appeal), add anything you want us to know, and submit. The panel then shows that request in a list with its type, the date you filed, its due date, its current status (received, in progress, completed, declined, or withdrawn), and our written response when we answer. A copy of the confirmation is emailed to the address on your account.

Timing

We acknowledge in-app requests immediately and respond within 45 days. We may extend once by another 45 days where the law permits, and we will tell you why before the first period ends.

Logging and withdrawal. Every request — filed in the app or by email — is written to a request record with its type, submission date, due date, status, and outcome, so nothing depends on an inbox being read. You can see that history in the same panel, and you can withdraw any request still marked received or in progress by choosing "Withdraw" on it; withdrawal stops the work and is recorded with its own timestamp. A completed deletion cannot be withdrawn, because the data is already gone. Request records are kept for two years from resolution.

Verification

We verify you through your signed-in account. If you write by email, we may ask you to confirm from the address on the account or to sign in and re-file so that we do not share your data to someone else.

Authorized agents

Someone may file a privacy request on your behalf. Name them in the "Authorized agent" field when you file, or have them write to us with your written permission; we may still ask you to confirm directly that you authorized the request.

Appeals

If we decline a request, our response tells you why and how to appeal. File an appeal from the same panel by choosing "Appeal a decision," or write to our contact form with "Appeal" in the subject line.

Who decides an appeal. Appeals are decided by Next Nutrition LLC's privacy lead, who is the member of management responsible for privacy at Orbitry and did not make the original decision where that is possible. We respond in writing within 45 days with our conclusion and our reasoning. If we deny the appeal, that response also gives you a way to contact your state attorney general.

No retaliation

Exercising a right never changes your price, your access, or your standing. If a request necessarily removes a feature — deleting your birth data removes your chart — we tell you that consequence before we act, and it is not a penalty.

California residents

In the twelve months preceding the date of this notice we collected the categories of personal information listed under "Data We Collect," for the purposes listed under "Why We Process Your Data," from the sources listed under "Where Your Data Comes From," and disclosed them for a business purpose only to the service providers listed under "How We Share Your Data." We disclosed no personal information for money or for cross-context behavioral advertising.

Do Not Sell or Share My Personal Information: We do not sell your personal information and we do not share it for cross-context behavioral advertising, so there is no opt-out to perform. This statement is provided to satisfy the disclosure obligations of the California Consumer Privacy Act.

Do Not Track and Global Privacy Control: Orbitry does not track you across other websites or apps, and there is no advertising tracking to disable.

Section 15 — Security

We use industry-standard technical and organizational measures to protect your data. Passwords are stored only as salted hashes — we never see or store your plaintext password — and a new password is checked against known-breach databases and rejected if it appears in one. Email confirmation is required before an account is fully activated, and password reset uses a time-limited link sent to your verified email address.

Your content is separated by account at the database layer, so your journal entries, direct messages, birth data, and private reflections are readable only by you. Data is encrypted in transit using HTTPS/TLS and encrypted at rest at the disk layer by our infrastructure provider. Account data that is stored locally on your device is encrypted client-side before it is written. The Service also enforces a session timeout: you are warned after 28 minutes without activity and signed out automatically at 30 minutes, and every session ends after 7 days regardless of activity, so that an unattended or shared device does not stay signed in.

If security is breached. If a breach affects your personal data, we will notify you and the applicable regulators without unreasonable delay and no later than 30 days after we confirm it, unless a shorter legal deadline applies. The notice will describe what happened, when we discovered it, which categories of your data were involved, what we have done, and what you can do. You can request a copy of our written incident-response plan at our contact form.

Section 16 — Cookies and Local Storage

Orbitry uses only essential storage (browser local storage) that is needed for the Service to function. Examples include keeping you signed in, remembering your last-used account on this device, and caching your star map locally so that the app loads quickly.

We do not use advertising cookies or third-party tracking cookies. Because none of this storage is used for advertising, or for building a profile of you across other sites, no cookie banner or consent prompt is required.

Section 17 — Crisis-Support Safety Flags

If something you write to Astreus reads as a possible risk of harm to yourself or someone else, the Service shows you crisis resources. For users in the United States that is: "If you or someone you know is experiencing a crisis, free and confidential support is available 24/7. Call or text 988, or chat at 988lifeline.org. If you're in immediate danger, call 911." Where your device indicates another country, we show that country's line where we have one, and findahelpline.com where we can't tell. The same resources are available at any time from the menu and in the Guidebook, without anything being detected.

The check runs on your device. The words you wrote are not sent to us as part of it. When resources are shown, the Service creates a safety-flag record containing only your account, where it happened (for example, the Astreus chat), the detected category (risk to self or to another), and a timestamp.

What happens next. Flagging is automated; no one at Orbitry monitors conversations in real time, and Orbitry is not a crisis service or a monitored hotline. A human reviewer at Orbitry reviews self-harm flags by the next business day and reviews a flag of risk to another person within 24 hours, in which case community and direct-message features may be restricted pending review. The reviewer sees only the safety-flag record described above — not the words that triggered it, not your journals, and not your direct messages unless a message was separately reported. We do not contact emergency services on the basis of an automated flag alone, we do not notify family or other users, and safety flags are never used for advertising, profiling, pricing, or eligibility. Safety-flag records are kept up to two years after resolution.

We maintain a written crisis-support response plan describing this workflow in full. Ask for a copy at our contact form.

Section 18 — Community Moderation

When you report a post, reply, or direct message, we store the report (including the reported content, the reporter's account, the reason, and a timestamp) so that human moderators can review it. Reports and moderator actions may be retained for as long as necessary to enforce our Community Guidelines. When you block another user, we prevent that user's content and messages from being delivered to you. Mutes and hides simply remove content from your own feed. The affected user is not notified in any of these cases.

Intimate images and impersonation. Publishing an intimate image of an identifiable person without that person's consent, or a digital forgery of one, is prohibited anywhere in Orbitry — posts, sightings, profile galleries, and direct messages alike. If you are the person depicted, or their authorized representative, write to our contact form with the location of the content and a good-faith statement that it was published without your consent. We will remove the content and any copies we can identify within 48 hours of a valid notice.

Section 19 — Notifications and Communications

In-app notifications (mentions, replies, direct messages, event nudges, and community pings) follow the Cross-Device Sync section above, and you can mute categories from your notification settings, reached from the left menu under "Account and Privacy" > "Notifications."

We may send transactional emails and, if you have chosen phone sign-in, transactional SMS related to your account. These include one-time sign-in codes, password resets, security-critical account changes, and billing receipts sent through Stripe. We may also send emails about the Service itself, such as new features and product updates; every such email includes an unsubscribe link, and unsubscribing does not stop the transactional messages above.

Section 20 — Voice Input

The journal voice-to-text feature requests microphone access from your browser when you tap the microphone button. Recording starts only after you grant permission and tap to start, and it stops when you tap to stop. Audio is captured only while you are actively recording, is sent to our AI provider for transcription, and is not retained by us or by the provider after the transcription is returned — only the resulting text is stored in your journal entry. You can decline or revoke microphone access at any time from your browser's site settings.

Section 21 — International Transfers

Our service providers, including Stripe, Supabase, Cloudflare, ElevenLabs, and the AI provider accessed through the Lovable AI Gateway, may process and store your data in the United States and in other countries where they operate.

Every provider named in this notice acts as our processor, under written terms that limit them to our instructions, forbid using your data for their own purposes or to train their own models, require equivalent security, and require them to delete or return your data at the end of the engagement. We do not add a new processor with access to your personal data without updating this notice.

Section 22 — Changes

We may update this notice from time to time. The "Last updated" date above will reflect the most recent change. When we make material changes, we will notify you before they take effect and keep the prior version available on request.

What the notice looks like. For a material change we email the address on your account, naming what changed in plain language, when it takes effect, and a link to read the full notice. The same notice also appears on the sign-in screen, where it states that continued use of the Service after the effective date constitutes your agreement to the updated notice. Minor edits — typo fixes, clearer wording, a renamed feature — update the "Last updated" date without a separate notice.

For any changes, your continued use of the Service after they take effect constitutes your agreement to them.

Section 23 — Contact

Next Nutrition LLC is the controller of your personal data. For any privacy or billing-related question, to exercise a right, to appeal a decision, or to reach the person responsible for privacy at Orbitry, contact us at our contact form.