Privacy, data and your rights
What we collect, where it lives, and how to export or delete it.
This article covers the key privacy and data practices for Orbrey. For the full legal detail, see the privacy policy.
What data Orbrey collects
Orbrey collects the data you enter: your name and email address (for your account), and whatever your household adds to the app — calendar events, recipes, grocery items, tasks, pantry entries, and rewards. We also collect standard usage logs (which pages and features you use) to understand how the product is working.
We do not collect payment card details — payments are handled by Stripe, who store card data on our behalf under their own PCI-DSS compliance.
Where your data lives
All household data is stored in our Supabase project, hosted in Australia (ap-southeast-2). Your data does not leave Australia except where you connect a third-party integration (for example, Google Calendar sync sends event data to Google's servers under Google's privacy policy).
Household isolation
Household data is isolated at the database level using Supabase Row Level Security (RLS). Every query is filtered to the authenticated user's household memberships — the server cannot return another household's data even if there were a bug in the application layer. This is the same model used by enterprise SaaS products.
Third-party integrations
When you connect Google, Apple, or Outlook calendar, Orbrey requests the minimum necessary OAuth scopes to read your existing events and write new Orbrey-created events back. We do not read the contents of your emails, contacts, or any data outside the calendar scope you grant.
MCP and AI tools
When you use Orbrey via an AI assistant (Claude, ChatGPT), the AI client sends structured tool arguments to the Orbrey MCP server — for example, “list recipes for household X.” The server never receives your conversation history. Orbrey logs every MCP tool call (household id, tool name, outcome, latency) for security and debugging purposes.
Exporting your data
Go to Settings → Data → Export household data to download a JSON export of all your household data, including recipes, calendar events, tasks, grocery history, and pantry entries. Exports are generated on demand and emailed to the household owner's address.
Deleting your data
To delete your account and all associated data, go to Settings → Account → Delete account. For household deletion (which removes all shared data), go to Settings → Household → Danger zone → Delete household. Both deletions are permanent. If you would like assistance or have a data erasure request under the Privacy Act, contact privacy@orbrey.com.
Didn't answer your question?