Privacy Policy

Fox Orbit is a personal productivity app that unifies your calendars, tasks, screenshots, budget and cycle in one place. The data controller is the Fox Orbit team, contactable at foxorbit@foxcal.app.

• Account data — email, and (optionally) name, gender, date of birth, base postcode and cycle preference you provide during onboarding.
• Calendar data — events synced from Google, Outlook or Apple calendars you explicitly connect, including titles, times, locations, descriptions and attendees.
• Content you create — tasks, layers, routines, budget entries, cycle logs, screenshots you upload, and text you forward by email.
• Product usage — pages viewed, features used and time spent, to help us improve the product.
• Technical data — IP address, browser, device and basic diagnostic logs.

• To run the core features you asked for (calendar sync, tasks, screenshots, budget, cycle, insights).
• To generate AI suggestions, coaching and insights on your own data.
• To keep the service secure and prevent abuse.
• To send you essential product emails (welcome, password reset, service notices).
• To improve the product using aggregated, non-identifying usage data.

Some features are AI-powered. They only run when you choose to use them, and each sends the AI provider just the content that feature needs — nothing more, and never for advertising. AI is delivered via the Lovable AI Gateway to a third-party model provider (currently Google Gemini).

• Blueprint (routine builder) — the goal you type and the answers you give (e.g. time of day, equipment, any injuries you choose to mention) are sent so the AI can draft a routine.
• Screenshot import & screenshot-to-calendar — when you upload an image (a poster, invite, booking, or an existing plan such as a gym or cleaning routine), that image is sent to the AI to read out the details. Uploaded screenshots are also saved to your own screenshot library until you delete them.
• Email-to-task / event — the content of an email you forward to your private Fox Orbit address is sent so the AI can turn it into a task or event.
• Insights & coaching — the tasks, calendar entries and logs the feature is analysing are sent to generate suggestions on your own data.

Cycle-aware routines are handled specially. If you turn on “adapt intensity to my cycle”, your period logs are not sent to the AI. Instead, our server derives a single, general wellbeing hint from them (for example, “currently a lower-energy phase — favour gentler movement”) and only that short hint is sent. If you leave the option off, nothing cycle-related is sent at all.

We instruct our AI providers to process your inputs only to return your result, and not to use them to train their models. Even so, please don’t enter anything into an AI-powered feature that you would not want processed by a third-party AI provider. AI outputs are general organisation and wellbeing suggestions — they are not medical, diagnostic, clinical, dietary or fitness advice, and should not be relied on as such.

• Contract — to provide the service you signed up for.
• Consent — for connecting third-party calendars and optional profile fields; you can withdraw at any time.
• Legitimate interests — security, fraud prevention, and improving the product.
• Legal obligation — where we must retain data by law.

We do not sell your data. We share only with processors needed to run the service:

• Supabase — database, authentication and file storage.
• Cloudflare / Lovable — hosting and edge delivery.
• Google, Microsoft, Apple — only when you connect those calendars, and only to read the events you authorised.
• AI providers via the Lovable AI Gateway — to power the AI features you choose to use (see “How we use AI” above for exactly what each one sends).
• Zoho Mail — outbound and inbound email for the foxcal.app domain.

Data is stored on servers in the EU/UK region operated by our hosting providers. Some processors (e.g. AI providers) may process data in other jurisdictions under standard contractual clauses.

We keep your data for as long as your account is active. If you delete your account, we remove your personal data within 30 days, except where we must retain it to comply with a legal obligation or resolve disputes. You can request deletion any time by emailing foxorbit@foxcal.app.

Under UK/EU GDPR you have the right to:

• Access a copy of your data.
• Correct inaccurate data.
• Delete your data ("right to be forgotten").
• Restrict or object to certain processing.
• Port your data to another service.
• Withdraw consent at any time.
• Lodge a complaint with a supervisory authority (in the UK, the ICO).

We use encryption in transit (HTTPS), encryption at rest for our database and storage, row-level security so users can only access their own rows, and OAuth (not passwords) for third-party calendar access. No system is 100% secure — please use a strong, unique password and enable your device's screen lock.

We use only strictly necessary cookies to keep you signed in and remember your preferences. We do not use advertising cookies or third-party trackers.

Fox Orbit is not intended for children under 16.

We may update this policy. Material changes will be notified by email or in-app before they take effect.

Questions or requests: foxorbit@foxcal.app.