Privacy policy

Last updated 26 August 2026.

Who is responsible

Retrosoft, a company registered in Iceland, is the data controller for OrbitMemo. Write to hello@orbitmemo.com about anything on this page, including a request to see or delete your data.

What we hold

• Your email address, and a password you never send us in a readable form. This is how you sign in and how we can reach you about the account.
• What your household enters: calendar entries, lists, notes, contacts, projects, events, belongings, guides, budgets, and the names and colours members choose for themselves.
• Photos and PDFs you upload, and thumbnails made from them in your browser.
• Vault notes, which we hold only as ciphertext. They are encrypted on your device with a passphrase that never reaches us, so we cannot read them and cannot help you recover them.
• A push subscription per device, if you turn on reminders. It lets us send a notification to that browser and nothing else.
• Technical logs: which requests were made, when, and whether they succeeded. These keep the service working and let us investigate a problem. They do not contain the contents of your notes or files.

We do not ask for your phone number, your address, your date of birth or anything about your finances. There is no bank connection in this product and there never will be.

What we do with it

We use it to run the service you are paying for: showing your household its own data, sending the reminders you asked for, and letting you sign in. The legal basis is the contract between us. For keeping the service secure and investigating abuse, the basis is our legitimate interest in it working and not being attacked.

We do not use your data to train anything, to build a profile of you, or to sell to anybody.

What we do not do

• We do not scan your content. There is no automated system reading your photos, notes or files, for any purpose. If we are told about illegal material we act on it, and the terms say how.
• No advertising, ever. Nobody buys space in front of your family.
• No sharing between households. There is no public content and no discovery. Nobody outside your household can see any of it.

Where it lives

In the European Union, in Amazon Web Services' Stockholm region. It is encrypted at rest and in transit. We chose an EU region before writing any code, and the infrastructure refuses to be deployed anywhere else.

Who else touches it

These are the only companies involved, and each does one job:

• Amazon Web Services hosts everything: the database, the files, the servers and the sign-in system. In the EU.
• Paddle.com Market Limited handles payments as the seller of record. They receive your email address and billing details. We never see your card. Paddle has its own privacy policy covering what they hold.
• Google Workspace hosts the mailbox that receives your email when you write to us.

Nobody else. No analytics company, no advertising network, no customer-tracking tool.

Cookies and tracking

This website sets no cookies and runs no scripts at all. The app stores your sign-in session in your own browser so you do not have to sign in on every visit, which is a technical necessity rather than tracking. There is no analytics anywhere in OrbitMemo, so we cannot tell you which screens are popular and we are content with that.

How long we keep it

Your household's data stays for as long as the household exists, because that is the product: a record that is still there in five years. Technical logs are kept for 90 days. Ask us to delete your account and we delete it, including the files.

A household that stops paying keeps its data. Nothing is deleted for non-payment; the account becomes read-only until it is either renewed or deleted at your request.

Your rights

Under the GDPR you can ask us to:

• Show you what we hold about you.
• Correct anything wrong.
• Delete your account and its data.
• Give you a copy to take elsewhere. The app does this itself: one button downloads everything as spreadsheets, and it works whether you are subscribed or not.
• Object to a use you disagree with, or ask us to restrict it.

Write to hello@orbitmemo.com. If you are unhappy with how we answer, you can complain to the Icelandic Data Protection Authority, Persónuvernd, or to the authority where you live.

Children

OrbitMemo is meant for a household, and a household includes children. An adult in the household creates and controls any account for a child, and a child's account can reach nothing outside its own household. We do not knowingly hold data about a child except what their own family has entered about them.

If something goes wrong

If your data is exposed in a way that puts you at risk, we will tell you and the supervisory authority within the time the law requires, and we will tell you what actually happened rather than the least we can get away with.

Changes

If this policy changes in a way that matters, we will say so in the app before it takes effect. The date at the top is when it last changed.