Privacy notice

Who we are

My Orbit (myorbit.ae) is run by Mena Automation, United Arab Emirates. We decide how your personal data is used (we are the controller).

• Legal entity: Mena Automation (company registration in progress)
• Trade licence: not issued yet; company licence application in progress (Abu Dhabi)
• Address: Khalifa City, Abu Dhabi, United Arab Emirates
• Privacy contact: privacy@myorbit.ae. We reply within 30 days, free of charge.

What we collect

• Account: your email address, your name and profile picture if Google provides them, and your time zone.
• Your agent: its name, job, language and look.
• What you give your agent: chats, the facts it remembers, to-dos, day plans and the drafts it writes for you (emails, messages, replies, posts). Drafts are never sent from My Orbit; you approve them and send them yourself. Drafts may contain information about the people you write to: only enter what you have a right to share.
• Usage: how many AI tokens you used each day.
• Your settings: the interface language you choose (English or Arabic).
• Your consents: that you accepted this notice and the terms, agreed to processing in the United States, and confirmed you are 18 or older, each with the version and time.
• Security records in our database: sign-ins, sign-outs, exports, deletions, when you approve, edit or discard a draft (ids only, never the text), when the AI declines a request (the kind of request only, never the text), when you report a reply (which reply and why, never its text), and when you keep or undo a memory your agent saved, so we can act on misuse. In these records your IP address is stored only as a keyed hash.
• Your sign-ins: for each sign-in, the kind of browser and device (for example "Chrome on Windows", from what your browser tells us), when it started and when it was last used, and a keyed hash of a random device cookie. You see them under "Where you're signed in" and can sign any of them out. We use them to email you when a new device signs in to your account, and we email you whenever your data is downloaded.
• Passkeys, if you add any (optional): for each passkey, its public key and identifier, a counter your device increases with each use, whether it is synced by your device's account, the name you give it (encrypted) and when it was added and last used. Your fingerprint, face or PIN never leaves your device; we receive only a signature. If you tell us you lost your passkeys, we keep the request, when you confirmed it from your email, and when the passkeys will be removed. When you add your first passkey we make 10 recovery codes and show them to you once; we keep only a scrambled form of each (a slow one-way hash, scrypt) that cannot be turned back into the code, and when each was made and used. Your export says how many are left, never the codes.
• Security notices in the app: when a new device signs in, your data is downloaded, a passkey is added or removed, or a recovery code is used or new codes are made, we show it on your other signed-in devices with "This was me" and "This wasn't me". We keep the kind of event, the kind of device and the time, and your answer.
• Security logs of our hosting provider: your IP address and the pages you request (see "Security logs" below).
• Waitlist: your email, your name if you give it, and whether My Orbit is for you or your company.
• Reports you send us with "Report a problem": what you write, the kind of report you choose and the time, linked to your account so we can answer you at its email address. Nothing else is collected with a report (no IP address, no device details). The text is encrypted in our database, and it is emailed to our support mailbox (security@myorbit.ae) so that we can read and answer it.

Why we use it

• To run your agent: store what you tell it and answer you.
• To generate replies, drafts and day plans with Anthropic's AI, with your explicit consent.
• To keep My Orbit secure and prevent abuse (sign-in limits, daily usage limits, security logs).
• For the waitlist: to tell you when My Orbit is ready and invite you to the pilot.

Who receives it

• Anthropic, PBC (United States) runs the AI. For each message it receives your message, the recent part of the chat, the facts you chose to keep (a fact your agent saves is not sent until you tap Keep), your open to-dos (a to-do your agent adds is not sent until you tap Keep), the content of any draft it writes, your agent's settings, today's date, your time zone (for example Asia/Dubai) and your first name. It does not receive your email address or account id. Each request carries a code made from your account id with a secret key that only we hold: it lets Anthropic's abuse detection tell one user from another, but cannot be turned back into your id, email or name. Requests are sent with inference set to run only in the United States. Anthropic processes this data for us as our processor, under its Data Processing Addendum. Under Anthropic's Commercial Terms, Anthropic may not train its models on this data, and we do not use it to train any model. Anthropic deletes these inputs and outputs within 30 days of receiving or generating them. If its automated trust and safety systems flag a conversation under its Usage Policy, Anthropic may keep the inputs and outputs for up to 2 years, and safety classification scores for up to 7 years.
• Microsoft Azure hosts My Orbit in its UAE North region in the United Arab Emirates. Our database and its backups, our cache, our logs and performance data, and our secrets are stored there.
• Azure Communication Services (Microsoft), with its data stored in the UAE, sends your sign-in links. It receives your email address and the link. While an email is being delivered it may pass through systems outside the UAE, like any email.
• Microsoft Defender for Cloud checks our hosting for security threats. Microsoft may process its security information, which can include IP addresses, outside the UAE.
• Google, only if you choose "Continue with Google".

Transfer outside the UAE

Your chats, memories, to-dos, drafts and first name are processed by Anthropic in the United States. We ask for your explicit consent before your first chat, and record when you gave it. The safeguards: Anthropic's Data Processing Addendum, inference limited to the United States, encrypted connections (TLS), no email address or account id sent, and no training under Anthropic's Commercial Terms. You can withdraw your consent at any time on the Your data page; chat and day plans then stop. Withdrawing stops new processing; it does not recall what Anthropic already received, which it deletes as described above.

How we protect it

Chats, chat titles, memories, to-dos, day plans, drafts and agent names are encrypted in our database (AES-256-GCM), and the database and its backups are encrypted at rest. Connections use TLS. My Orbit refuses to store card numbers, Emirates ID numbers, IBANs and passwords in memories, to-dos and drafts. Please do not enter health details or other people's private information you do not want processed.

How long we keep it

• Your account, agent, chats, memories, to-dos, plans and drafts: until you delete them or your account. You can delete a chat, a to-do, a memory, a draft, your agent or your whole account in the app at any time.
• A fact your agent saved that you did not keep or undo: 14 days.
• A to-do your agent added that you did not keep or undo: 14 days.
• Daily usage counts: 90 days.
• Security records in our database: 365 days.
• Waitlist entry: 180 days after you join, or until you delete your account if that is sooner.
• Sign-in links: they work once, for 15 minutes; expired links are removed daily.
• While a sign-in email waits to be sent, your email address and the link are kept encrypted in our database. They are deleted once the email is sent, and in any case about one day after the link expires.
• Sign-in records (device kind and times): 30 days after the sign-in ends (at most 60 days).
• Passkeys: until you remove them or delete your account. A request to remove lost passkeys: until it is done or cancelled (removal happens 7 days after you confirm it). Recovery codes: until you make new ones, remove your last passkey, or delete your account.
• Security notices in the app: 30 days.
• If you cannot sign in and ask our support team to delete your account: the request record (support ticket reference, the two staff members who approved it, dates, and a keyed hash instead of your account id): 365 days after it is closed. We email your address when the request is made and when the account is deleted.
• Your reports ("Report a problem"): up to 365 days, or until you delete your account if that is sooner. Copies in our support mailbox are deleted on the same schedule.
• Database backups (encrypted, in the UAE): up to 35 days. They are used only to recover from a failure.
• Security logs of our hosting provider (IP addresses, pages requested): up to 30 days.
• Application, database and performance logs (no chat content, IP addresses masked): up to 90 days.
• Our administrators' activity records, which include your email address when we invite you to the pilot: up to 12 months, kept for security auditing.
• At Anthropic: up to 30 days, or up to 2 years if a conversation is flagged (see above).

When you delete your account

Your account, agent, chats, memories, to-dos, plans, drafts, usage, consents, security records, waitlist entry, invite and pending sign-in links are removed from My Orbit at once. Copies in our encrypted backups are erased automatically within 35 days; if we ever have to restore a backup, we delete your account again before the restored data is used. Anthropic deletes what it received within 30 days (up to 2 years if a conversation was flagged). Security logs and administrator activity records are not changed; they expire after the periods above.

We keep one deletion record with no name, email, IP address or account id, only a keyed hash of the old account id, for 365 days. It lets us delete your account again after a restore, and answer "was my account deleted?".

Security logs

Our hosting provider's security logs record your IP address, in full, not hashed: our web application firewall records it with the page requested when a request triggers one of its rules, for example a rate limit, and our network logs record the addresses of connections, not pages. They are kept for up to 30 days in the UAE and used only for security. Sign-in links do not put your email address in these logs.

Age

My Orbit is only for people aged 18 or older, and we ask you to confirm your age before you start. If we learn that someone under 18 has an account, we delete it.

Your rights

You can download all your data (as a complete JSON file or as a readable page), delete it, and withdraw your consent, on the Your data page. To correct your name or email address, to object to how we use your data, or for anything else, write to privacy@myorbit.ae. We reply within 30 days, free of charge. Please contact us first; you can also complain to the competent UAE data protection authority: the UAE Artificial Intelligence and Data Authority (which took over the functions of the UAE Data Office in June 2026).

If a security breach affects your personal data, we will tell you and the authority as UAE law requires.

To report a security problem in My Orbit, write to security@myorbit.ae (also listed at /.well-known/security.txt). To report a problem, abuse or harmful content from inside the app, use Report a problem.

Cookies

My Orbit uses only the cookies needed to sign you in, protect forms, remember your language and recognise a device you have used before (a random id, so we can warn you about sign-ins from new devices). No analytics, no advertising.

AI replies

Replies are written by AI and can be wrong. Check important facts. Your agent cannot send, book, post or pay for anything.

Changes

The version is shown at the top. When it changes, we ask for your consent again.