Documentation

Getting Started

OrbitKit generates and hosts every web page and file that Apple requires from iOS and macOS developers. Here's how to get up and running:

1. Create an account — Sign up with your email or Google account. You'll receive a verification email.
2. Subscribe — Choose monthly ($5/mo) or yearly ($50/yr). Both plans include every feature.
3. Configure — Set up your app name, privacy policy, support page, and any other features you need from the Dashboard.
4. Deploy — Click Deploy and your site goes live instantly. Copy the URLs into App Store Connect.

Site Setup

The first step is to configure your app's basic information. In the Dashboard, fill out the Site Info section:

App Name

The name of your app as it appears in the App Store. This is displayed at the top of your privacy policy, support page, and data deletion page.

Description

A short description of your app (optional). Shown below the app name on your hosted pages.

URL Slug

Your site's URL path. If you choose my-cool-app, your site will be available at orbitkit.io/s/my-cool-app.

• Must be 1–63 characters, lowercase letters, numbers, and hyphens only
• Cannot start or end with a hyphen
• Must be unique across all OrbitKit users
• Certain slugs are reserved (e.g., admin, api, dashboard)

App Icon

Upload your app icon (PNG, JPEG, or WebP, max 2 MB). It will be resized to 512×512 and displayed on all your hosted pages.

Privacy Policy

Every app on the App Store requires a privacy policy URL. OrbitKit generates one using a 12-step guided wizard that covers every category Apple requires.

Open the wizard from your Dashboard by clicking Open Privacy Wizard. The wizard walks you through:

1. Introduction — Your app name, developer/company name, and the policy's effective date.
2. Data Categories — Select which of Apple's 14 data categories your app collects: Contact Info, Health & Fitness, Financial Info, Location, Sensitive Info, Contacts, User Content, Browsing History, Search History, Identifiers, Purchases, Usage Data, Diagnostics, and Other Data.
3. Data Types — For each category you selected, specify the exact data types collected (e.g., "Email Address" under Contact Info).
4. Collection Methods — How data enters your app: direct user input, automatic collection, or third-party sources.
5. Use Purposes — Why you use the data. Maps to Apple's 6 purpose categories: Third-Party Advertising, Developer Advertising, Analytics, Product Personalization, App Functionality, and Other Purposes.
6. Third-Party Sharing — Whether data is shared with third parties, who they are, and which SDKs are used.
7. Data Retention — How long you keep user data.
8. Security — What security measures you use (encryption, access controls, etc.).
9. User Rights — What rights users have: access, correction, deletion, data export, and how to exercise them.
10. Account Deletion — How users can delete their accounts and the timeline for completion. Required by Guideline 5.1.1(v).
11. Children's Privacy — Whether your app is directed at children under 13 and how you comply with COPPA.
12. Tracking & Advertising — Whether your app uses the IDFA, the App Tracking Transparency framework, and any advertising SDKs.

Your progress is saved automatically. You can leave the wizard and come back at any time.

Support Page

App Store Connect requires a Support URL for every app. OrbitKit generates a hosted support page with your contact information.

In the Dashboard, fill out the Support Page section:

• Contact Email (required) — The email address users can reach you at.
• Phone Number — Displayed with a clickable tel: link.
• Website URL — A link to your main website or app page.
• Address — Your business address.
• Support Hours — When you're available (e.g., "Mon–Fri 9am–5pm EST").
• FAQ Items — Add question-and-answer pairs that appear as collapsible sections on your support page.

After deploying, your support page is available at orbitkit.io/s/your-slug/support.

Apple reference: App Store Connect — App Information

Data Deletion Page

Apple's Guideline 5.1.1(v) requires that apps supporting account creation must also support account deletion. OrbitKit generates a hosted page that explains your deletion process.

In the Dashboard, fill out the Data Deletion section:

• Deletion Methods — Check which methods you support: In-App, By Email, or Web Form.
• Contact Email — If "By Email" is selected, provide the email address for deletion requests.
• Web Form URL — If "Web Form" is selected, provide the URL of your deletion request form.
• Deletion Steps — Add step-by-step instructions for how users can delete their account in-app.
• Deletion Timeline — How long it takes to process a deletion request (e.g., "within 30 days").
• Data Retained — Optionally explain any data you're required to retain after deletion (e.g., transaction records for tax compliance).

After deploying, your deletion page is available at orbitkit.io/s/your-slug/delete.

Universal Links

Universal Links let users tap a link to your website and be taken directly to your app, rather than Safari. This requires an apple-app-site-association (AASA) file hosted at your domain.

In the Dashboard, go to the Associated Domains section and configure Universal Links:

1. Add App IDs — Enter your App ID in the format TEAMID.com.example.app. Your Team ID is a 10-character alphanumeric string found in your Apple Developer account.
2. Add URL Patterns — Specify which URL paths should open in your app (e.g., /products/*). You can mark patterns as excluded to keep certain URLs in Safari (e.g., /admin/*).

After deploying, your AASA file is served at /.well-known/apple-app-site-association and /apple-app-site-association.

Xcode Setup

In your Xcode project, add the Associated Domains capability with applinks:your-domain.com.

Apple reference: Supporting Universal Links in Your App

App Clips

App Clips are lightweight versions of your app that users can experience without downloading the full app. They're invoked via NFC tags, QR codes, or links.

To configure App Clips, add your App Clip's App ID in the App Clips section under Associated Domains. The format is TEAMID.com.example.app.Clip (note the .Clip suffix).

OrbitKit adds the appclips section to your AASA file automatically.

Xcode Setup

Add the Associated Domains capability with appclips:your-domain.com to your App Clip target.

Apple reference: App Clips Documentation

Passkeys & WebCredentials

WebCredentials associate your app with your domain for Passkeys and Password AutoFill. When configured, iOS can suggest credentials for your app that were saved on your website, and vice versa.

Add your App ID in the Password AutoFill / Passkeys section under Associated Domains.

Xcode Setup

Add the Associated Domains capability with webcredentials:your-domain.com.

Apple reference: Connecting to a Service with Passkeys

Handoff

Handoff lets users start an activity on one Apple device and continue it on another. If your app supports Handoff between your website and your app, add your App ID in the Handoff section.

Xcode Setup

Add the Associated Domains capability with activitycontinuation:your-domain.com.

Apple reference: Implementing Handoff in Your App

Smart App Banner

Smart App Banners display a banner at the top of Safari inviting users to download your app from the App Store. OrbitKit automatically adds the required <meta> tag to all your hosted pages.

In the Dashboard, fill out the Smart App Banner section:

• App Store ID (required) — Your numeric App Store ID. Find it in App Store Connect under your app's details, or from your App Store URL: apps.apple.com/app/id123456789.
• Affiliate Data — Your iTunes affiliate string, if you participate in the affiliate program.
• App Argument — A deep link URL or custom string passed to your app when the user taps the banner.
• App Clip Bundle ID — If you have an App Clip, its bundle ID for the App Clip card display.

The generated meta tag looks like:

<meta name="apple-itunes-app" content="app-id=123456789">

Apple reference: Promoting Apps with Smart App Banners

Well-Known Files

Certain Apple services require verification files hosted at /.well-known/ on your domain. OrbitKit can host these for you.

Sign in with Apple

To use Sign in with Apple on the web or to verify your domain, Apple requires a file at /.well-known/apple-developer-domain-association.txt.

1. Go to Certificates, Identifiers & Profiles in the Apple Developer portal.
2. Download the domain association file Apple provides.
3. Upload it in the Well-Known Files section of your Dashboard.

Apple Pay

To verify your domain for Apple Pay on the Web, Apple requires a file at /.well-known/apple-developer-merchantid-domain-association.

1. In the Apple Developer portal, register your domain for Apple Pay.
2. Download the merchant domain verification file.
3. Upload it in the Well-Known Files section of your Dashboard.

Apple reference: Sign in with Apple • Apple Pay Server Setup

Custom Domain

Every plan includes custom domain support with a free SSL certificate. Instead of orbitkit.io/s/your-slug, your pages can be served at privacy.yourapp.com (or any domain you own).

Custom domains are required for Universal Links, App Clips, and Passkeys — these features only work on domains you own.

Setup Steps

1. In the Dashboard, go to Custom Domain and enter your domain (e.g., privacy.myapp.com).
2. OrbitKit will show you DNS records to add. For subdomains, add a CNAME record pointing to orbitkit.io. For apex domains, add A records.
3. After adding the DNS records, click Check Status to verify propagation.
4. SSL is automatically provisioned via Let's Encrypt once DNS is verified.

Deploying

When you're ready, click Deploy in your Dashboard. OrbitKit will:

1. Generate your privacy policy HTML from the wizard data.
2. Generate your support page HTML (if configured).
3. Generate your data deletion page HTML (if configured).
4. Generate your AASA JSON file (if configured).
5. Upload all files along with any well-known files you've added.
6. Return live URLs for every page.

After deploying, your pages are available at:

Page	URL
Privacy Policy	orbitkit.io/s/your-slug
Support Page	orbitkit.io/s/your-slug/support
Data Deletion	orbitkit.io/s/your-slug/delete
AASA File	your-domain.com/.well-known/apple-app-site-association

If you've configured a custom domain, replace orbitkit.io/s/your-slug with your domain. You can redeploy as many times as you want — changes go live within seconds.

Billing

OrbitKit offers two plans:

Plan	Price	Billing
Monthly	$5/mo	Cancel anytime
Yearly	$50/yr	Save ~17% vs. monthly

Both plans include every feature. Yearly subscribers get priority email support.

Managing Your Subscription

Click Manage Subscription in your Dashboard to open the Stripe billing portal. From there you can:

• Switch between monthly and yearly plans
• Update your payment method
• View invoices and payment history
• Cancel your subscription

If you cancel, your site stays live until the end of the current billing period.

App Store Connect

After deploying, paste your URLs into App Store Connect:

Field in App Store Connect	OrbitKit URL
Privacy Policy URL	Your main site URL (the privacy policy page)
Support URL	/support page
Marketing URL	Your main site URL (optional)
User Privacy Choices URL	/delete page (optional)

For Universal Links, App Clips, or Passkeys, add the Associated Domains capability in Xcode pointing to your custom domain.

Apple reference: App Store Connect — App Information