Scope and developer role
This policy applies to Orbit for iPhone, iPad, and Apple TV. Orbit is a client for services and sources selected by the user. Asterline Labs does not operate an Orbit account service, media catalog, streaming backend, advertising network, or analytics backend.
Information can be processed by the app and sent directly to a service you configure without being received by Asterline Labs. The distinction matters: app functionality may handle data even when the developer does not collect it on a developer-operated server.
Data Orbit handles
Connections and credentials
- Plex server details, account or profile tokens, selected libraries, and playback state.
- User-authorized M3U, Xtream-compatible, XMLTV, and guide-source URLs and credentials.
- Selected Invidious server details and, when used, related account information.
- Optional request-service endpoints and credentials, such as an Overseerr-compatible session or API key and a Cantinarr-compatible endpoint.
- Optional Google OAuth access and refresh tokens for read-only YouTube subscription features.
Local library and preferences
Orbit may store menu choices, profile selection, favorites, imported channel lists, guide data, searches, watch progress, playback preferences, artwork and metadata caches, downloaded or cached media created at the user’s direction, and diagnostic state needed to explain failures. Sensitive credentials are intended for Keychain or similarly protected local storage; ordinary preferences and caches use app storage.
How the data is used
Orbit uses this information to connect to the service you selected, display your library or channels, resolve playback, keep progress and preferences, switch profiles, show guide information, and carry out actions you request. It is not used by Asterline Labs for advertising, user profiling, data brokerage, or sale.
Google API data
Orbit requests only the Google access needed for the described read-only YouTube subscription experience. Use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements. Orbit does not use Google API data for advertising, credit decisions, or sale.
Retention and deletion
Data remains on the device, in Keychain, in optional iCloud Keychain synchronization, or with the external service according to that service’s settings. Within Orbit, disconnecting a service, removing an account, deleting an import, clearing history or downloads, or deleting the app removes the corresponding local data to the extent exposed by the build and platform. System backups or synchronized Keychain records may persist according to Apple settings.
Orbit does not create an Asterline account, so there is no Asterline account to delete. Deleting a Plex, Google, provider, or request-service account must be done with that provider. You can also revoke Orbit’s Google access from your Google account security settings.
Tracking, advertising, and analytics
Orbit is not designed to include Asterline advertising, third-party behavioral analytics, or cross-app tracking. The external services you connect may log requests or apply their own analytics and privacy practices. Review each provider before connecting it.
Security and user responsibilities
Orbit limits credential-bearing requests to the selected service and uses platform security features where implemented, but no software or network is perfectly secure. Use HTTPS endpoints where supported, protect your device, avoid untrusted playlists or servers, and never publish credentials in screenshots or support messages.
Children
Orbit is not directed to children under 13 and does not knowingly operate a service that collects children’s personal information. Parents and guardians are responsible for the media services, sources, and accounts they configure.
Questions and changes
Material changes will be posted on this page with a revised effective date. For a privacy request, use the support page. Include the app name and do not send tokens, playlist URLs, passwords, or private server details.