Yes. Orbit is local-first - your todos, projects, ideas, and reminders are stored only on your device and encrypted at rest. There is no cloud and no account. Even phone sync is end-to-end encrypted, so your data is never readable by anyone but you.

Which platforms does Orbit run on?

Windows and Linux on desktop, and Android on mobile. A backup file is portable between them.

How does syncing between my phone and computer work?

On your computer, open Settings, go to Phone sync, turn on Host sync server, and scan the QR code in Orbit on your phone. On the same network the phone connects straight to your computer, peer-to-peer, so your data never passes through our servers - if you would rather keep it that way, simply keep both devices on the same network. When you are apart, sync falls back to an end-to-end encrypted relay: the server only ever forwards scrambled data it cannot read (your pairing key never reaches it) and stores nothing. Either way, both devices need to be online, with the computer running and hosting on.

Does Orbit phone home or track me?

No. There are no accounts, no analytics, and no background pings. Orbit only reaches the internet for things you trigger: activating your key (once), checking for updates (only when you tap Check for updates) plus a quick licence re-check right after an update installs, and phone sync if you turn it on. The rest of the time it is fully offline.

Does Orbit need an internet connection?

No. After a one-time activation, Orbit works fully offline. It only reaches the network when you activate a key, check for updates, or use phone sync.

Where is my data stored?

On your own device, in an encrypted database (SQLCipher on desktop, the hardware Keystore on Android). You can export a backup file at any time.

Can my team use Orbit?

Yes. Orbit for Business adds an organization mode: your desktop hosts the org, each person gets a seat with a role, and tasks sync end-to-end encrypted between your machines - still no cloud. See orbit-reminders.com/business for the full guide and per-seat pricing.

Orbit for Business

Run your team's tasks, timesheets, and leave on your own machines - hosted by you, encrypted end to end, never on our servers. Paid once per seat.

See pricing See how it works

How it works

An Orbit organization has no cloud behind it. Your desktop is the server, your people's devices are the clients, and everything in between is sealed.

Your desktop is the host

Sign in with your organization key on your Windows or Linux desktop. That machine holds the org's encrypted database - there is no cloud copy anywhere.

You create seats

One seat per person, with a name and a role. Each seat covers 2 desktops and 1 mobile device for that person.

They join with a link

Every seat gets a one-tap invite link (or a claim code / QR). The link opens a guided setup that downloads Orbit and walks them in.

Everything syncs sealed

Devices talk to your host directly, with every request body sealed with AES-256-GCM. Each person only ever receives the items they are allowed to see.

Your organization's data lives on your machines and your people's devices - nowhere else. If remote members use the optional relay, it only ever forwards sealed data it cannot read and stores nothing. WrenchyProductions only ever sees the licence key.

Everything a team needs

Seats & devices

Each seat is one person with 2 desktop + 1 mobile device slots. Their first device activates instantly; extra devices wait in your approval queue.

Roles you define

Start with Manager, Director, and Staff, change what each can do, or add your own. A role is a set of switches: sees all work, reviews timesheets, plans projects, decides leave, and more.

Timesheets

A weekly grid per person, on desktop or Android. Project reviewers check the weeks booked to their projects, then an approver has the final word and the hours are booked.

Project budgets

Project Overview lists every project with a manhour budget per team: planned, booked from approved timesheets, and what is left. Alerts fire when a budget crosses your thresholds.

Leave

Book time off by type and date range, counted in working days. You set the leave types and each role's yearly allowance, and a request over the allowance is refused.

Manager Overview

Everyone's workload on one screen: open, overdue, and due-today tasks per person, completion rates, and how long the oldest overdue task has waited.

Task assignment

Assign a task to a person, a team, everyone, or leave it unassigned - unassigned org tasks stay visible only to roles that see all work.

Project sharing

Share a project with specific people or teams via "Shared with". Sharing widens visibility: everything inside the project comes with it.

Idea visibility

Each org idea has a visibility floor set by role, from everyone up to the top role only. People below the floor never receive it.

Teams

Group people into teams, then assign tasks or share projects with the whole team at once. Membership changes apply on the next sync.

Remote access, your call

Out of the box the org is LAN-only. Flip a toggle for encrypted relay access from anywhere, or port-forward for a direct connection with instant updates.

Instant revocation

Revoke a seat and every one of its devices stops syncing and purges its local copy of the org data - even devices that are off-network purge on their next contact.

Teams running Orbit

Organizations using Orbit across their team, on their own machines.

NRGtechTechnical safety engineering for the energy industryKolkata - Sydney - Calgary - Bangkok

Set up in minutes

Get your organization key

Ask for a quote with your team size. We set up a key sized to your seats and send a secure checkout link. One key covers the whole organization.

Sign in as the host

Open Orbit on your desktop, click "Organization login" in the bottom-right of the activation screen, paste your key, and fill in your profile. Your machine is now the org host.

Create a seat per person

In Settings, open the Organization panel and add a seat with a name and role. Hit "Copy invite link" and send it over - the link opens a guided page that auto-downloads Orbit and walks them through joining.

Approve extra devices

Each person's first device activates instantly. If they add a second desktop or a phone, it appears in your approval queue until you allow it.

Optional: enable remote access

Working from one office network? You are done. Got remote people? Turn on external access in the Remote access card - it is off by default.

Every setting, explained

The full reference for what managers and members control, exactly as it appears in the app.

Remote access (owner)

By default an Orbit organization is LAN-only: nothing about it is reachable from outside your network. Three toggles control everything beyond that.

Allow external access: Lets seat devices join and sync from outside your network through the end-to-end encrypted relay. The relay only ever forwards sealed data it cannot read and stores nothing. Off by default.
Live updates for external members: When on, external devices are nudged the moment something changes so they pull immediately. When off, they simply pick up changes whenever they sync (on a schedule or with Sync now).
Direct connection: For instant updates without the relay: forward a port on your router (Orbit's default is 7421), enter your public address, and seat devices connect straight to your host. Invite links created afterwards carry the address automatically, with a LAN fallback for people in the office.

Seat management (owner)

Create a seat: A name plus one of your organization's roles. Orbit mints a one-time claim code shown as text, a QR code, and a shareable invite link.
Invite link: An orbit-reminders.com/join link with the seat's claim sealed in the URL fragment - browsers never send fragments to any server, so the code stays between you and the new member. The page auto-downloads Orbit and shows numbered setup steps.
Transfer: Hands a seat to a new person: they keep the seat's tasks and history, and Orbit mints a fresh claim code. Transfer is also your kill-switch if an invite link leaks - the old code dies instantly.
Revoke: Removes the seat. All of its devices stop syncing and purge their local copy of the org data.
Device approval: Extra devices beyond a seat's first one land in a pending queue. Approve or reject each device individually.

Workspace controls

Teams: Create teams and toggle members in or out. Teams can be assignees on tasks and grantees on projects.
Project "Shared with": Grant a project to specific people or teams. Everyone granted sees the project and everything in it, on top of whatever their assignments already show them.
Task assignee: Every org task has an assignee field: a person, a team, everyone, or unassigned (seen only by roles that see all work). Assignment decides who receives the task on sync.
Idea visibility: Org ideas carry a role floor: that role and every role ranked above it can see the idea.
Roles: Create, rename, and delete roles, set their order, and switch each capability on or off. Giving someone a different role is its own permission, and nobody can change their own role.
Your profile: Your display name and details as your organization sees them. Visible to your seats - never to us.

Timesheets, budgets & leave

Everyone in the organization fills in a weekly timesheet and books leave in the same app they keep their tasks in. Roles decide who reviews, approves, and plans.

Weekly timesheet: One row per project, one column per day, with live totals. Save a draft, submit, or withdraw a week that is still waiting. It checks the same rules your host does as you type, so a week that would be refused says why before you submit it.
Review and approval: Each project can have reviewers. They check the weeks booked to their projects and pass them on or return them for changes. An approver then approves, sends back, returns, or reopens. A week on projects with no reviewers goes straight to the approver.
Timesheet rules (owner): Week start day, daily cap, entry increment, weekly minimum and maximum, whether internal work needs a comment, and the budget alert thresholds. Every timesheet decision is kept in an audit trail you can filter and export.
Project Overview: Every org project with its code, client, project manager, dates, and status, plus a manhour budget split by team. Planned, booked, and remaining hours come straight from approved timesheets.
Reports & exports: Approved hours by project, by person, or by team over any date range, filtered by project, person, team, or client. Export to CSV for Excel, save as PDF, or print.
Leave: Book a date range or a half day by type, with a note. You define the leave types and working days, each role carries a yearly allowance per type, and balances are worked out from approved leave. Everyone can see who is off; the note and any decline reason stay with the person and whoever decides leave.

The employee side

Personal / Organization toggle: One click in the sidebar switches between their private personal workspace and the org workspace. Hovering the org side shows the full organization name. The two never mix.
Sync now & status: Employees see when they last synced and how they are connected (direct or relay), and can trigger a sync on demand.
Host address: If your public address changes, employees can update the host address on their end without re-joining.
Leave organization: Any member can leave. Leaving stops sync and removes the org's data from their device; their personal workspace is untouched.

Roles & permissions

The owner holds the organization key and runs the host. Everyone else can do what their role allows - and your host checks every action against the role it has on file, so a device can never grant itself more.

	Owner	Everyone else, by role
Sees	Every org task, project, category, idea, timesheet, and leave request.	Items assigned to them, their teams, or everyone; projects shared with them; ideas their role clears; the project list. A role that sees all work sees everything.
Creates & assigns	Tasks, projects, categories, ideas, teams, and roles.	Whatever their role allows: creating and assigning tasks, creating projects and setting budgets, managing teams, or editing roles.
Edits	Everything.	The content of what they see: title, notes, due dates, subtasks, reminders, attachments, tags, and completion.
Timesheets & leave	Their own weeks are approved as they submit them. Can decide anyone's week or leave.	Fill in their own week and book their own leave. Reviewer and approver roles handle the team's weeks; a leave role decides requests.
Seats & org settings	Seats, device approval, transfers and revocation, remote access, the org name, timesheet rules, and deleting records.	None of it, whatever their role. Their own device and sync settings only.
Personal workspace	Private. Invisible to the org.	Private. Invisible to the org - including the owner.

Security & privacy

Every database is encrypted at rest with SQLCipher - on the host and on every seat device.
Sync bodies are sealed with AES-256-GCM. Decrypting is the authentication: there are no bearer tokens or passwords on the wire to steal.
Seat identities are Ed25519-signed by your organization's own key, minted on your host.
Your host re-checks every review, approval, and project or role change against the role it has on file. Nothing a device says about itself grants anything.
Private by default: the org is LAN-only until you switch on external access.
The optional relay is blind - it forwards sealed data it cannot read and stores nothing.
Revocation is authenticated and final: a revoked device proves the order came from your host, then purges its copy.
Your organization's data never touches our servers. We only ever see the licence key.

Pricing

Per seat, paid once - no subscription and no monthly bill, the same as personal Orbit. Each seat is one person with 2 desktops and 1 mobile device.

5-24 seats

EUR 12.00

per seat

25-99 seats

EUR 10.00

per seat

100+ seats

Quote

priced for your team

For comparison, a personal Orbit licence is EUR 14.99. Fewer than 5 seats, or want personal-use mode or themes on the same key? Ask in your quote. Adding seats later tops up the same key.

Get your organization key

Tell us your team size - we set up your key and send a secure checkout link. One key covers every seat's devices.

Rather talk first?

Chat with us on Discord [email protected]

Business questions

Is it a subscription?

No. Seats are paid once, like personal Orbit: EUR 12.00 per seat for 5-24 seats, EUR 10.00 per seat for 25-99, and a quote for 100 or more. Adding seats later tops up the same key.

Do employees need their own licence?

No. One organization key covers every seat - each person gets 2 desktop and 1 mobile device slots under it, with nothing extra to buy or activate.

Can people fill in timesheets and book leave on their phone?

Yes. The Android app fills in and submits the weekly timesheet and books leave, the same as the desktop app.

What happens if the host computer is off?

Everyone keeps working normally - Orbit is local-first, so each device has its own encrypted copy of what it is allowed to see. Changes queue up and sync automatically the next time the host is reachable.

Can people work from home?

Yes. Turn on external access and remote devices sync through the end-to-end encrypted relay. For instant updates you can also forward a port and use a direct connection to your host.

Can employees see my personal tasks?

Never. Personal and organization are two separate workspaces, and the separation cuts both ways: the org never receives personal items, and personal devices never receive org items they were not granted.

What does WrenchyProductions see?

Only the licence key when it is activated. Your organization's tasks, people, and projects live on your machines; if the relay is used it only ever carries sealed data it cannot read and stores nothing.

What happens when someone leaves the company?

Revoke their seat, or transfer it to their replacement (the new person keeps the seat's tasks and history). Either way the old devices stop syncing and purge the org's data - even off-network devices purge on their next contact.

Which platforms are supported?

The host runs on Windows and Linux desktop. Seat members can use Windows, Linux, and Android.

Want Orbit for yourself first? See the personal edition