Privacy policy

Laika Dynamics Limited, New Zealand · Last updated: 20 September 2026

The short version

Laika Orbit runs on your machine. Your files, chats, inbox and calendar stay there. We collect what we need to sell and support Orbit Pro, and — only if you turn it on — anonymous counts of coarse actions in the app.

What we collect

• Purchases: your name, email, billing address and tax ID (if given), processed by Stripe. Stripe handles card details; we never see them.
• Waitlist: your email address, stored with our email provider.
• Licence checks: when the app checks your licence it sends the licence key to laikaorbit.com. We use it to confirm your subscription, and we record that the check happened — see below.
• Website analytics: aggregate, cookie-free page statistics (page views, downloads started, referrers, country). No personal profiles, and no IP addresses kept.
• Abuse prevention: when you use checkout, the billing portal or a licence check, we count how many times that has been asked for from your network in the last few minutes, so nobody can hammer those endpoints. What is stored is a one-way hash of your IP address, salted with a secret only our server holds, which cannot be turned back into an address; it carries no name, email or account, and it is deleted once the few minutes are up.
• Anonymous usage reporting in the app: off unless you turn it on. See below.

Licence checks

When Laika Orbit Pro checks that your licence is valid — at most once an hour while the app is open — we record two things on your own subscription record at Stripe: the time of your first activation, and the date (not the time) of the most recent check. We use them to tell an active licence from a dormant one and to count how many people are actually using Pro. They are stored with Stripe, who already hold your subscription, and nowhere else. We do not record what you did in the app, and this check sends us nothing about your work.

Anonymous usage reporting

The app can send anonymous counts of coarse actions — that recall ran, that a chat opened — once a day. It is off unless you say yes to the card that asks, and declining creates nothing at all. If you do turn it on, what reaches us is a random id made at that moment and tied to no account, the app version, your platform, and daily counts of a fixed list of actions. Never anything finer than a day, and no location of any kind: not your country, not your region, not an IP address we keep.

Turning it off again destroys the id and anything still waiting to be sent.

What we don't collect

We never receive your code, files, file names, paths, search queries, recall results, chat text, prompts, emails, calendar entries, browser URLs, account names or hostnames — from the app there is no code path that could send them. That is true whether or not you turn on usage reporting: what it sends is counts of actions, never their content.

Who we share it with

Stripe (payments, tax and the licence-check dates above), Vercel (website hosting), our email provider (waitlist and receipts), and Cloudflare.

Cloudflare runs the endpoint that counts page views and, if you have turned on anonymous usage reporting in the app, receives those counts. Cloudflare sees the network request — and so your IP address, as any web server does; we never store it. What we keep is a daily count per page, referring site and country, with no identifier attached. The same endpoint holds the abuse-prevention counts described above, which reach it already hashed: your address is never sent there.

We don't sell personal information.

Your rights

You can ask to see, correct or delete your personal information under the New Zealand Privacy Act 2020, and the GDPR or UK GDPR where they apply. Email laika@laikadynamics.com. We keep billing records for as long as tax law requires.