It's not a constitution

It's a light switch.The switch is the invite.

You don't read the bylaws before you walk out — a coworker you trust says "we're meeting about the schedule, you in?" and you're in. RORBT is that, hardened. Everything below unlocks only when you actually want it.

Get the app
Layered disclosure // take the rungs you need

Read exactly as much as you give a shit about.

Small, trusted crews that coordinate without bosses — and a server too deaf to narc on you.

That's the whole pitch. No dues, no titles, no telemetry. Like a union, except the cells are tiny, every role rotates, and the app genuinely does not know who the hell you are.

You don't need to read another word to use it. The rest of these tabs are here for when — and only when — you actually want them.

Two guarantees, front and center

The stuff that has to be true or none of it matters.

The server can't read your room

Transparency logs are end-to-end encrypted with a group key the platform never holds. Subpoena the box; you'll get noise.

The protocol outlives the app

Decentralized means exactly that. Take the app down and the org doesn't die — the rules live in the people, portable to any transport.

The difference // reclamation of real resistance

A counter-force they can't buy off in a single handshake.

The oligarch class has money, lawyers, media, politicians, and law enforcement on retainer. What they don't have is a counter-force that can be bought in one backroom. Because there's no single leader to buy, orbits and assemblies have no single room where the whole movement gets sold.

  • Build an orbit.
  • Run the kernel.
  • Send delegates to assemblies that turn a hundred local grievances into one coordinated squeeze.
▸ The machine

runs on your compliance

Every quiet "fine, whatever" is a vote for the way things are.

▸ Orbits & assemblies

run on your refusal

Which side of the equation are you on?

Transparency // your data

We hold ourselves to a higher standard.

Operating doctrine

We collect as little data as operationally possible. Only what you knowingly provide. Only for explicitly stated purposes. Every PII field is AES-GCM encrypted at rest with a rotatable key.

The one unavoidable exception is your phone number — an SMS one-time passcode can't be sent to a number we can't read. So it stays readable, but inside a store that's encrypted, sharded, and salted. Prying it loose would take a sophisticated, total compromise. Anything short of that means we mishandled it — and if we ever do, we'll hand you the brief on how to sue us and shut us down.

⊘ We will never
  • Sell, rent, or trade your data.
  • Monetize your behavior or attention.
  • Build advertising profiles.
  • Participate in surveillance capitalism.

Surveillance capitalism is morally diseased. We don't participate.

Deletion

You ask, we delete all of it.

No tombstones, no "archived" purgatory, no shadow copy for the lawyers. We leave no ghosts in the machine.

If compelled by a court

We interpret narrowly, fight overbroad demands, lawyer up at our own expense where feasible, and notify you unless legally gagged.

Authentication & security brief

Enter with confidence. Leave freely.

No "social logins"

No "Log in with Google," no "Continue with Apple." Not because OAuth2 is broken — because we won't put Big Tech's tracking anywhere near our auth flow. A real email, a real password, and a one-time SMS code. Intentional friction.

Don't use a password you already know. Let your password manager spit out a random string of encrypted garbage. Store it. Guard it.

The prime directive

Your data is yours.

  • You own your profile.
  • You own your footprint.
  • Leave anytime — one button, and we delete all of it.

Corporations spent two decades stealing privacy to build their empires. It's our official position that it's time to take it the fuck back.

Get the app