Privacy — Orchard

Last updated: November 13, 2026

What the app doesn’t collect

Orchard does not collect repository contents, file paths, branch names or commit messages on its own servers. Optional AI requests send relevant information directly to OpenAI as described below.
Usage statistics, crash logs or device identifiers. Orchard includes no analytics or tracking SDKs.

When the app goes online

Checking for updates. The app downloads a version list and update packages from updates.orchardgit.com and sends no system information. You can turn off automatic checks in Settings.
git fetch. By default it runs git fetch in the background against your own git remotes. You can turn this off in Settings.
GitHub PR status. Read through the gh CLI you’re already signed in to. Requests go straight to GitHub under your own sign-in.
License activation and checks. Activation sends your license key and this Mac’s instance name, to confirm the key is valid and count activated devices. It’s then re-checked every 3 days. Nothing is sent if you don’t activate a license.
AI features (optional). Only when you sign in with ChatGPT and use an AI feature are the relevant change summaries and file contents sent to OpenAI to generate summaries and drafts. This uses your own plan and is subject to OpenAI’s terms. Signed out, no code leaves your Mac.

What’s stored on your Mac

Your license key and ChatGPT sign-in credentials are stored only in the macOS Keychain, never in logs or cache files.
Scan results are cached in ~/Library/Application Support/Orchard. Deleting this folder doesn’t affect your repositories.
Snapshots taken before cleanup are stored in your own repository under refs/orchard/trash/ and kept for 7 days by default.

Purchases

Payments are handled by Creem as merchant of record. Creem collects and holds your payment details; Orchard only receives what’s needed to fulfill the order, such as your email address and order number.

This website

This site uses Cloudflare Web Analytics to understand website traffic and performance. If you dismiss the language hint, the site stores that preference in your browser. The hosting provider may keep standard access logs (such as IP addresses) for security and abuse prevention.

Contact