MASTER GUIDE / v0.4 — DRAFT FOR FOUNDER REVIEW
Orbis
The Master Guide to the Product — communication, identity and protection in one app.
Keep your commitments. Work clearly. Protect what matters.
Designed-to descriptions only. No security, legal compliance or launch outcome is guaranteed.
Product Promise
Orbis helps people keep their commitments and communicate clearly, while their conversations, identity and work stay protected. It is designed to reduce the effort of chasing replies, remembering promises and finding context, and to keep work and personal life in separate spaces. After work, a Growth layer helps people turn learning and personal goals into visible, measurable output.
[PROPOSED DESIGN] Designed to, not guaranteed.Brand & Naming
What It Is
Orbis
The product and the brand.
[ESTABLISHED CONCEPT]Aura
The personal profile: work style, strengths, growth edges, portfolio, shown with the color archetype language from Chromatica.
[PROPOSED DESIGN]Culture
The company's working rules: hours, tone, approval steps. Optional for companies.
[PROPOSED DESIGN]Growth
Personal learning and progress layer, from the 5–9 Freedom Lab method. After-work time, separate from work data.
[PROPOSED DESIGN]Orbis Work
A planned job-discovery module (search, introduction, conversation).
[FUTURE VISION]Audience
Who It Is For
Individual users (B2C)
Core communication features, personal Aura, personal privacy controls.
Free plan, with an optional personal paid plan.
Companies (B2B)
Team workspace, Culture rules, admin controls, audit trail.
Per-seat team plan.
Job seekers and employers
Orbis Work (planned): portfolios, search, introductions.
Planned. Pricing to be decided.
Foundation
Core Principles
Privacy is the protection layer
Built into every feature. Not a marketing theme.
Human in control
AI suggests with a reason. The person decides. Nothing is sent without approval.
Explainable
Every suggestion shows why it appeared and the source it came from.
Work and personal are separate
Separate spaces, quiet hours and urgent-only exceptions by default.
Self-chosen identity
Aura is created and edited by the person, never inferred from their messages.
Fair in hiring
Personality never ranks, filters or rejects candidates. Human review is required for hiring decisions.
Accessible
Screen-reader support, plain language, text labels alongside color.
Start from real use
Build from a real problem, test with real people, and show what failed as well as what worked.
Evidence before expansion
Each layer earns the next one through measured results.
Engine
The Communication Engine
Follow-up queue
Messages that may need a reply, with reason and source. Confirm, edit, snooze or dismiss.
[PROPOSED DESIGN]Commitment tracking
Promises, requests and deadlines extracted with their source. Dates are used only when stated.
[PROPOSED DESIGN]Search by meaning
Ask in plain words. Results show the original message.
[PROPOSED DESIGN]Thread summaries
Main topic, decisions, open questions. Facts are separated from guesses.
[PROPOSED DESIGN]Quiet hours
Work alerts stop at the end of the day unless marked urgent.
[PROPOSED DESIGN]Drafts
A suggested reply for review. Never sent without approval.
[PROPOSED DESIGN]How a suggestion is made
Explainability — every suggestion shows its reason and source.
Uncertainty — inferred items labeled as suggestions, never facts.
No invention — no invented date, owner or amount.
Correction — dismissed or wrong items teach the system and are easy to fix.
Sending — nothing is sent without explicit approval.
Identity
Aura
Aura is self-chosen and fully editable. It contains the person's work style, strengths, growth edges and a portfolio the person chooses to show. Its color archetype (twelve archetypes) gives a shared visual language.
Created by the person — self-reflection quiz or by hand; never inferred from messages.
Visibility — private by default; shared only per item.
Used for — reflection, communication preferences, and context in an introduction the person accepts.
NEVER used for — ranking, filtering, rejecting or scoring any person, or for employer decisions.
Sensitive content — health, religion, political views not collected; written content of this kind is warned about and excluded from matching and search.
Control — edit, hide or delete at any time.
Organization
Culture
Culture is an optional set of working norms an organization can publish: hours, tone of messages, approval steps and quiet-hour defaults.
Optional — never forced beyond the workspace.
Visible — employees can read every rule that applies to them and why.
Scope — workspace only; personal life is outside its reach.
Admin limits — admins set rules but do not see private message content.
Personal Development
Growth Layer
A personal learning and progress layer for after-work time, built on the 5–9 Freedom Lab method. Separate from work data.
5-Stage Method
Features
- Curriculum
- Key results (measurable goal with baseline, target and current value)
- Session log
- Weekly review (output, blockers and energy reviewed as evidence, not guilt — no streaks that punish missed days)
- Before and after metrics
- Progress card (opt-in summary the person designs)
- Export (everything can be exported or deleted)
Growth Rules
- Separate from work
- No work-message analysis unless explicitly opted in
- Private by default
- No ranking/leaderboards
- No guaranteed outcomes
- Rest counts
Growth is a personal tool. It does not coach, diagnose or decide a person's purpose, and it does not claim that tracking will create wealth, discipline or success.
Protection
Privacy Protection Layer
Minimum data
Only what each feature needs.
Consent
Clear, revocable, per-source.
Visibility
You see what is stored and why.
Control
Edit, export or delete at any time.
Separation
Work and personal data never mix.
Kill switch
Disconnect any source instantly.
Audit
Logs of access and changes.
Aura and portfolio fields do not ask for health, religion, political views or similar sensitive data. If a person writes such content, Orbis warns them, and the content is excluded from matching, search and summaries.
Data by Category
| Data | Collected? | Use | Never used for |
|---|---|---|---|
| Message references and extracted commitments | Yes, from connected sources only | Follow-ups, commitments, search | Training, advertising, profiling |
| Message content | Only where needed for a feature | Summaries and suggestions | Anything outside the feature |
| Aura (self-chosen profile) | Yes, with the person's input | Personal reflection, chosen context | Ranking, rejecting, employer decisions |
| Portfolio items | Yes, chosen by the person | Shown to others the person picks | Matching without consent |
| Health, religion, political views, similar written | No. Warned and excluded if written | None | All uses |
Retention
| Data | Retention |
|---|---|
| Message references and commitments | While the source is connected, plus 30 days after disconnect, then deleted |
| Aura and portfolio | Until the person deletes them |
| Audit logs | 12 months, then deleted |
| Backups | Deleted within a stated window (target 30 to 90 days) |
| Deletion requests | Confirmed in the app with a receipt |
Legal baseline. One design, built to the strictest common standard: data minimization, consent, deletion rights, explainability and human review. Each market needs a short addendum confirmed by counsel: Indonesia (PDP Law), the EU (GDPR and AI Act) and US states (automated hiring rules).
System
Architecture and Data
Figure 1. Proposed Orbis architecture, from user interface to privacy controls.
Business Model
Pricing
Individual use is the entry point. Company plans carry the revenue. Pricing needs willingness-to-pay evidence before it is fixed.
Planning
Risks & Next Steps
Key Risks
- Privacy failure — Privacy built in; independent review before launch
- Hiring law — Human review; counsel confirmation per market
- Platform access — Launch with sources that allow it
- Noisy suggestions — Easy dismiss; learn from corrections
- Fake profiles — Verification stages and report queue
- Crowded market — Win on commitments and privacy, not inbox features
Decision Register
All status: Open