Privacy, data and your rights

This article covers the key privacy and data practices for Orbrey. For the full legal detail, see the privacy policy.

What data Orbrey collects

Orbrey collects the data you enter: your name and email address (for your account), and whatever your household adds to the app: calendar events, recipes, grocery items, tasks, pantry entries, and rewards. If you accept analytics, we also collect which pages and features you use, and error reports help us find faults; the privacy policy says exactly what each tool sends and when it waits for your consent.

We do not collect payment card details. Payments are handled by Stripe, who store card data on our behalf under their own PCI-DSS compliance.

Where your data lives

Your account and household data are stored in our Supabase project in Singapore (ap-southeast-1). Some providers we use work in the United States and other countries, and some features send them data: Orbrey AI features run on models hosted by Cloudflare, error reports and analytics go to Sentry and PostHog in the United States, and email goes through Resend. The privacy policy lists each provider and what it receives.

Household isolation

Database rules (Supabase Row Level Security) limit each signed-in person to the households they belong to. The one exception is an invitation: if you have been invited to a household, you can read the name of the household that invited you. The privacy policy describes this in its security section.

Third-party integrations

Orbrey connects to Google Calendar and to CalDAV calendars such as iCloud, and does not connect to Outlook. Connections are being rolled out and may not be available to you yet. Orbrey imports your events (title, start and end, all-day flag, location and description) and does not read your emails, contacts, or anything outside the calendar you connect. The Family Inbox is separate: it reads the notices, files and forwarded emails that you or your household paste, upload, share or forward to it. Google's consent screen says Orbrey asks to view and edit your calendars, but today Orbrey only reads: it does not create, change or delete events in your calendar.

MCP and AI tools

When you use Orbrey via an AI assistant (Claude, ChatGPT), the AI client sends structured tool arguments to the Orbrey MCP server (for example, “list recipes for household X”). The server never receives your conversation history. The assistant's provider keeps its own copies under its own terms. You choose which household and areas an assistant can use, and you can revoke it in the web app under Settings, then Connected apps.

Sending feedback and bug reports

The web app, the mobile app and orbrey.com each have a form for sending us a bug report, an idea, a question or some praise. No message is sent until you press Send. A message goes to PostHog, the tool we use to read feedback, even if you have turned analytics off. It carries your text, the kind of feedback, an optional rating in the apps and your app version, device and screen. It carries your account and household IDs only if you turn on Include my account details, and your email address only if you type one for a reply. Children cannot send feedback from the app, except through the report form on an error screen, which cannot tell whose sign-in it is and sends no account details. Please do not include passwords, or financial or health details. To have a message deleted, email privacy@orbrey.com with the reply address you typed or the account you sent it with. A message with no reply email and no account cannot be traced to a person, so we cannot find it to delete it. The privacy policy has the full list and says what we have not yet confirmed.

Exporting your data

In the web app, go to Settings, then Account, then Export data to download your household's content as a JSON file, or as CSV files in a zip, including recipes, calendar events, tasks, groceries and pantry entries. The export covers content tables only. It leaves out files and photos, task completion records, recipe ratings and cook history, the reward and gem activity log, your profile, consent records, Family Inbox, AI conversations and billing, so email privacy@orbrey.com if you need those. The mobile app has no household export, but you can download your Orbrey AI data under Settings, then Orbrey.

Deleting your data

To delete your account, go to Settings, then Account, then Danger zone in the web app, or Profile, then Settings, then Account, then Delete my account in the mobile app. To erase a household's content while keeping the household, or to ask to delete the household, use the same place in the web app. Deleting a household on its own may currently fail; if it does, email privacy@orbrey.com and we will delete it for you. Deleting your account is immediate and permanent. Some records are kept or need an email to us, and the privacy policy lists them. If you would like assistance or have a data erasure request under the Privacy Act, contact privacy@orbrey.com.