Less time on web infrastructure. More time in Xcode.

Why OrbitKit exists

Apple's App Review process expects every submitted app to come with a small library of public web URLs and bundled files: a privacy policy, a support page, a data-deletion page, an apple-app-site-association file, a PrivacyInfo.xcprivacy manifest, and several optional verification files for Sign in with Apple, Apple Pay, and Wallet. Each one has its own format, hosting requirements, and rejection patterns. Together they easily eat a weekend.

OrbitKit replaces all of it with a guided wizard, hosted pages on your own domain, and a single $5/month subscription per app. You stay in Xcode; OrbitKit handles the part Apple wants on the web.

About the founder

OrbitKit was built by Elijah Graham, an Apple-platform developer who got tired of watching indie teams hit App Review rejections for the same handful of avoidable reasons — generic privacy policy templates that don't match the app's actual data practices, AASA files served with the wrong Content-Type, account-deletion flows that satisfy the letter of Guideline 5.1.1(v) but not the intent.

Elijah's mission with OrbitKit is straightforward: make every web URL Apple's App Store demands a one-click affair, so the developer can ship faster, stop juggling unrelated infrastructure, and focus on the part that actually changes when the user opens the app — the iOS, iPadOS, macOS, tvOS, visionOS, or CarPlay code itself.

What OrbitKit covers

• Privacy policy generator — the App Store's most-cited rejection field, structured around Apple's own 14 data categories.
• Support page generator — passes App Review's iPhone-first rendering check by default.
• Data deletion page generator — the public side of Guideline 5.1.1(v).
• Apple App Site Association (AASA) file generator — Universal Links, App Clips, Passkeys, Handoff.
• PrivacyInfo.xcprivacy generator — required since May 2024, derived from the same wizard answers as the policy.
• Privacy nutrition label generator — outputs match the App Store Connect questionnaire shape.
• Custom-domain hosting with automatic SSL, deploy history, sitemap generation, security headers — the engineering ergonomics indie developers usually skip.

See every URL and file Apple requires for iOS and macOS App Store submission for the full requirement list, with platform-by-platform applicability notes.

What we believe

• Indie developers shouldn't have to be web ops engineers just to ship an iOS app.
• Compliance tools should be specific to the platform — generic privacy-policy SaaS misses the cross-references App Review actually checks (Info.plist permission strings, App Privacy Details questionnaire, privacy manifest declarations).
• Pricing should be predictable. $5/month per app, no clause-counting, no per-feature add-ons, no enterprise upsell.
• Your data is yours. Every page is exportable as a ZIP. If you ever leave OrbitKit, your privacy policy, AASA file, and other generated outputs come with you.

Get in touch

Questions, bug reports, feature ideas, or App Review pattern observations: help@orbitkit.io. Elijah reads every message that comes through that inbox.

OrbitKit is open about the engineering work. The product is closed-source, but the open-source CLI and AGPL-licensed templates live at github.com/OrbitKit-io.