Privacy policy

Last updated: September 16, 2026

Airlock is operated by New Orbit Digital ("we"), Chapel Hill, North Carolina, USA. This policy explains what we collect when you use Airlock at airlock.neworbitdigital.com or the Airlock desktop app, and what we do with it.

What we collect

• Account information. Your email address, and if you sign in with Google, the name and profile picture Google shares with us. We use these only to identify your account and to send sign-in codes.
• Your content. The tasks, tags, notes and completion status you create in Airlock.
• Technical data. Standard server logs (IP address, browser type, timestamps) kept by our hosting and authentication providers for security and debugging. We do not run analytics or advertising trackers inside the app.

How we use it

To run the service: store your tasks, sync them between your devices, sign you in, and email you sign-in codes. We do not sell your data, share it with advertisers, or use it to train AI models.

Who processes it for us

• Supabase — database, authentication and realtime sync; data stored in the United States.
• Cloudflare — hosting and content delivery.
• Resend — sends sign-in code emails.
• Google — only if you choose "Continue with Google"; governed by Google's privacy policy.

Each provider processes data only to provide its service to us.

How long we keep it

As long as your account exists. Deleting your account (menu → Delete my account) removes your tasks immediately and permanently. Provider logs expire on their own schedules, typically within 30 days.

Your choices

• Export everything at any time (menu → Export my tasks).
• Delete your account at any time from inside the app.
• Email justin@neworbitdigital.com with any question or request about your data. If you are in the EU or UK, you have rights of access, correction, erasure and portability; the export and delete functions above satisfy most requests immediately, and we'll handle the rest by email.

Security

Data is encrypted in transit (TLS) and at rest by our providers. Access to your rows is enforced by database-level row security tied to your account, not by application code alone. No system is perfectly secure; if we learn of a breach affecting your data we will tell you.

Children

Airlock is not directed at children under 13, and we do not knowingly collect their information.

Changes

If this policy changes materially we will note it here with a new date and, for significant changes, notify you by email.

Contact: justin@neworbitdigital.com