The promises built into the system
- No ads, paid unlocks, or sale of personal data.
- Administrators cannot browse notes, quiz answers, precise locations, or exports.
- AI creates a global date-based pool and receives no profiles, answers, notes, locations, relationship history, or emails.
- Raw location coordinates expire within 24 hours. Together-time is labelled as an estimate.
- Unpairing stops sharing immediately and never transfers an old archive into a new pairing.
Your choices
Location and optional non-graphic intimacy questions have separate controls. Both partners must enable intimacy questions, and either person can turn them off immediately. The Android app provides export and account-deletion controls.
Before public launch
This page explains the engineering design while Little Orbit is in development. A complete production privacy notice, retention table, processor list, deletion timing, and legal review are release gates. The detailed working policy lives in the open repository.