Privacy and plans

End-to-end encryption

Every conversation on Orbit is end-to-end encrypted. The sender's phone locks the message once for every phone in the family circle: the other child(ren) in the chat and every parent on both sides. Our server passes the locked message along and never sees the words inside.

That means parents read their child's messages in their own Orbit app: the phone unlocks them locally, not the server. How much of a child's chat a parent sees is set by the supervision level you choose for that child: from everything (Guarded), to flagged messages and the contact list (Standard), to nothing at all (Open). When a parent adds a new phone, their other phones quietly catch the new one up on the history, with no re-signing-in from scratch and no lost conversations.

For the technical detail (which encryption protocol we use, how the keys work, etc.), see the Security page.

A plan for every family

Families come in every shape. A single parent with one child. Two parents and three children. A blended household with adults across two homes. A grandparent helping out. None of those families should have to pay for the others' shape, so Orbit offers four plans, and you pick the one that fits where your family is today.

The plans differ in capacity: how many people fit inside your Orbit, and how many other families you can connect to. Every safety feature is on every plan. You can move up or down whenever life changes.

Media storage is the shared space for the photos, files, and videos sent across your whole Orbit. Text messages don't count towards it, and everyone in the Orbit shares the same allowance.

One subscription covers everyone in the Orbit. Any parent can buy or restore it, and every member of the Orbit benefits. You can pay monthly or yearly (yearly saves up to 17%), and you can change plan up or down whenever you like. The price shown in the app at the point of purchase is always the current one.