Privacy Policy

1. Who we are

HomeOrbit is operated by AppForge Digital, an Australian sole-trader business operated by Treyn Fox. In this policy, “HomeOrbit”, “AppForge Digital”, “we”, “us” and “our” refer to that business.

2. Information HomeOrbit handles

Account information

When you create a HomeOrbit account, we handle your email address, an internal account identifier, authentication session information and account timestamps. Password authentication is provided by Supabase Auth. AppForge Digital does not receive your plaintext password.

Household information

HomeOrbit stores information that users choose to add, which may include:

• household names, invite codes, member display names and membership roles;
• family profile names or nicknames and profile colours;
• calendar event titles, dates, times and assigned family members;
• chores, assignments, completion status and points;
• meal plans, grocery items and family notes; and
• synchronisation versions and update timestamps.

Microsoft and Outlook information

If you choose to connect Outlook, Microsoft asks you to sign in and approve delegated User.Read and Calendars.Read access. HomeOrbit then handles:

• your Microsoft account identifier, display name and account email;
• an encrypted Microsoft refresh token, the granted permission scope, connection timestamp and last-import timestamp; and
• for imports, the event identifier, subject, start and end time, and whether the event is an all-day event from your primary Outlook calendar.

HomeOrbit currently imports only event names and timing information needed for the HomeOrbit calendar. It does not retrieve event bodies, attachments, emails, contacts or Microsoft files. HomeOrbit does not request calendar write permission and cannot create, modify or delete Outlook events.

Device and operational information

HomeOrbit keeps a local copy of household data in your browser or app storage so it can load quickly and continue working temporarily when offline. Our hosting and database providers may also process basic technical information, such as IP addresses, request timestamps and error or security logs, to deliver and protect their services.

Subscription information

If you start a trial, subscribe or restore a purchase in the app, Google Play (Android) or Apple’s App Store (iPhone and iPad) and RevenueCat handle the transaction. On iPhone and iPad, payment is charged to your Apple ID and you manage or cancel the subscription in your App Store account settings. HomeOrbit receives and stores an internal account identifier, product and plan identifier, trial or subscription status, store environment, entitlement status and expiry time so paid access can be provided and restored. AppForge Digital does not receive or store your full payment-card number.

3. How we use information

We use information only as reasonably necessary to:

• create and authenticate accounts;
• create, join and switch between households;
• synchronise household information across authorised devices;
• display shared calendars, chores, meal plans, shopping lists and notes;
• connect an optional Microsoft account and import Outlook events;
• start, verify, restore and manage a HomeOrbit subscription;
• maintain security, prevent misuse, diagnose errors and provide support; and
• meet applicable legal obligations.

HomeOrbit does not use personal information for advertising, behavioural profiling or automated decisions that significantly affect a person. We do not sell or rent personal information.

4. Information shared within a household

HomeOrbit is a collaborative family service. Anyone who joins a household using its invite code can view and update that household’s shared information. Imported Outlook event names, dates and times become part of the active household calendar and are visible to household members.

Only invite people you trust. Keep invite codes private and avoid entering information that is not appropriate for every member of the household to see.

5. Service providers and disclosure

We use service providers to operate HomeOrbit:

We may also disclose information where required by law, to protect users or the service, or as part of a business transfer where appropriate privacy safeguards apply.

6. Overseas processing

Netlify, Supabase, Microsoft, Google and RevenueCat operate internationally. As a result, personal information may be processed or stored outside Australia in countries where those providers or their infrastructure operate. Their handling of information is also governed by their own privacy and data-protection terms.

7. Storage and security

We use measures designed to protect HomeOrbit information, including encrypted HTTPS connections, Supabase access controls and Row Level Security, single-use OAuth state, PKCE for Microsoft sign-in and AES-256-GCM encryption for stored Microsoft refresh tokens. Microsoft credentials and refresh tokens are handled by server functions and are not placed in HomeOrbit’s public HTML.

No online service can guarantee absolute security. Users should use a unique password, secure their devices and share household invite codes only with trusted people.

8. Retention, disconnection and deletion

• Household data: retained while needed to provide the household service or until it is deleted or a valid deletion request is completed, subject to legal and security requirements.
• Local copies: may remain on a device until the user clears site/app data or uninstalls the app.
• Outlook connection: disconnecting Outlook deletes HomeOrbit’s stored Microsoft connection record and encrypted refresh token.
• Imported events: copies already imported into a household remain in HomeOrbit after Outlook is disconnected until they are removed or replaced in HomeOrbit.
• OAuth state: the temporary Microsoft sign-in state is single-use and expires after approximately ten minutes.
• Operational records: limited logs or backups may remain for a reasonable period for security, continuity and legal purposes.
• Subscription records: entitlement and transaction-status records may be retained while needed to provide, restore and account for the subscription and to meet legal, tax, fraud-prevention and platform obligations. Cancelling a subscription stops future renewal but does not itself delete the HomeOrbit account.

You can permanently delete your account from Family account → Delete account. Shared households with another member are transferred to another household administrator; a household with no remaining member is deleted. Account deletion also removes your memberships, stored Outlook connection and authentication account. Local copies on other devices may remain until those devices synchronise, sign out, clear app data or uninstall HomeOrbit.

If you cannot access the app, use the public HomeOrbit account-deletion request page or contact us using the details below. We may need to verify your identity and household authority before acting.

9. Children and family information

HomeOrbit is a family coordination service intended to be set up and supervised by a parent, guardian or other responsible adult. Children and young people should not create an account, connect a Microsoft account or share personal information through HomeOrbit without permission and supervision from a parent or guardian.

Adults adding family profiles should use the minimum information needed—such as a first name or nickname—and should avoid adding sensitive information about children to event titles, chores or family notes. We do not use children’s information for advertising or profiling.

Australia’s Children’s Online Privacy Code is expected to take effect from 10 December 2026. AppForge Digital will review HomeOrbit against the final Code before that date and update its practices and this policy where required.

10. Your choices and rights

You can choose not to connect Outlook, disconnect it at any time, remove imported events, update household content and clear local device data. You may contact us to ask what personal information we hold about you, request a correction, raise a concern or request deletion.

11. Contact and complaints

If you make a privacy complaint, please describe the issue and the outcome you are seeking. We will review it and respond within a reasonable period. If you are not satisfied, you may be able to contact the Office of the Australian Information Commissioner.

12. Changes to this policy

We may update this policy when HomeOrbit’s features, providers or legal obligations change. The current version will remain available at this URL and will show its last-updated date.

This policy is written specifically for HomeOrbit and its current account, household-sync and optional Outlook-import features.