Effective October 28, 2026 · Last updated October 28, 2026
Orbit by MyRecoverySteps ("Orbit", myrecoverysteps.com) is a private, invite-only health habit dashboard run by Tyler Welch, an individual in Seattle, Washington, USA. This policy says what data Orbit handles, why, who processes it, and the choices you have. The short version: Orbit does not sell your data, does not share it for advertising, and uses it only to show you your own dashboard.
Orbit is invite-only. Accounts are created by the operator for people they know. There is no public sign-up, and Orbit is not directed to children under 18.
| Data | Source |
|---|---|
| Garmin Connect data: activities (type, duration, distance, training load), steps, sleep, HRV, resting heart rate, stress, Body Battery, weight and body composition, food and nutrition logs, water, and related daily summaries | Your Garmin Connect account, with your consent |
| Blood pressure readings, soreness, energy, therapy-done flags and notes | You, through the Daily Journal |
| Goals, habits, check-ins and coaching messages | You and the built-in coach |
| Messages you send through the contact form (name, email, message) | You |
| Login session cookie (to keep you signed in) | Your browser |
Orbit does not collect or store GPS tracks, location names or routes. Any location fields in Garmin data are discarded before storage. Orbit has no advertising, analytics or tracking cookies. For the contact form, your IP address is not stored; a keyed one-way hash of it is kept to limit abuse, and contact messages are deleted after 12 months.
Garmin data is used only for these internal purposes, only for your own account, and not for any other product or service.
Orbit uses a small number of service providers ("processors") that handle data only to run the service, under their own terms and security practices:
| Provider | Role |
|---|---|
| Supabase | Database where your data is stored |
| Vercel | Hosting and serverless functions |
| Garmin | Source of your Garmin Connect data |
| Anthropic (AI model provider) | The built-in coach sends your dashboard summary (for example your scores, activity, sleep, nutrition totals, blood pressure and journal notes) to an AI model to write your daily notes. It is used to generate your notes and is not used for advertising. |
Orbit does not sell your personal data and does not share it with anyone else. It may be disclosed only if required by law.
Orbit receives your Garmin data only after you connect your own Garmin Connect account and give your consent. Garmin's handling of your data is described in the Garmin Connect privacy notice. Orbit does not upload your data to Garmin. You can withdraw access at any time in your Garmin Connect account settings, or by telling Orbit to disconnect.
Orbit keeps your data while your account is active so trends and history work. When you ask to delete your account or disconnect, your data is deleted from Orbit's database, normally within 30 days. Backups held by the database provider are removed on their normal rotation.
Use the contact form (choose "Privacy request"). Requests are answered within 30 days. Residents of states and countries with privacy laws (for example Washington, California, the EU and the UK) have the rights those laws provide, and Orbit honors them for all users.
Some data Orbit handles is health-related (for example blood pressure and sleep). It is used only to show your own information back to you. Orbit is not a medical device, is not a substitute for professional care, and is not covered by HIPAA.
Data is encrypted in transit (HTTPS) and at rest by the database provider. Access to the app requires a login, and the database cannot be read directly from a browser. No system is perfectly secure. If a breach affecting your data occurs, you will be told promptly as required by law.
If this policy changes in a meaningful way, the date above is updated and invited users are told before the change takes effect for any new use of their data.
Tyler Welch · Contact form