M87STUDIOS / ORBIT
Orbit Launcher privacy policy
Effective October 26, 2026 · M87Studios · com.m87.orbit
Orbit combines a launcher, file manager and local media player. It has no ads, analytics, developer accounts, tracking SDKs or developer-operated cloud storage. M87Studios does not receive your installed-app list, files, media, searches or local settings from Orbit.
Device access and local data
Orbit uses Android app listings to display, organize and launch installed apps and load icon-pack resources. Categories, favorites, appearance and playback preferences are stored locally.
Explorer uses Android's system document picker to access only the files and folders you choose, including supported removable drives. Granted access lets you create, read, edit, copy, move, archive and delete accessible files. Orbit's current release does not request All files access. Android's protected-folder rules still apply, and availability depends on the selected document provider and device. Unlinking a folder or revoking its grant disables operations that require that access.
The editor stores local recovery backups. Trash retains deleted items until emptied. Setup exports contain preferences and folder shortcut names, not personal file contents or transferable Android permissions. Exports may contain app identifiers and folder names; share them only with recipients you choose.
Media Player reads files you explicitly open and may continue playback through Android's foreground media notification. Artwork and playback details are displayed locally. It does not scan your media library.
Optional Orbit widgets and weather
Clock and device-info widgets use the local clock, Android version/model, internal-storage capacity, available memory, battery status when present, and network transport. This information stays on the device.
Weather is optional and uses a ZIP code or city you explicitly choose; Orbit does not request GPS/location permission. Pressing Find weather or Search sends the entered US ZIP code or city/region to Photon's public geocoding service (photon.komoot.io), based on OpenStreetMap. Selecting a city and displaying its weather sends city coordinates rounded to three decimal places to MET Norway (api.met.no). Both providers receive ordinary connection data, including your IP address, under their own policies. Orbit does not send them your app list, files, or device-info widget readings. M87Studios does not receive these requests.
Selected ZIP codes, city names, coordinates and units are saved with the widget and included in setup exports. Small local caches retain recent city searches and forecasts. Weather refreshes only while visible; saved data can appear offline and old forecasts are labeled. Clear location removes the selected location from that widget. Clear saved weather data removes locally cached searches and forecasts; it does not delete provider logs or remove cities from other widgets. Removing a weather widget stops its refreshes. No paid service credentials are bundled.
MET Norway records the requesting IP address and requested coordinates in its access logs in Oslo, Norway. Its privacy policy says IP addresses for meteorological services without login are retained for up to 90 days; it does not separately specify coordinate-log retention. Photon-specific log retention has not been verified. These requests are not treated as ephemeral processing. Local deletion controls do not delete either provider's logs.
Provider information: https://photon.komoot.io/, https://api.met.no/doc/TermsOfService and https://www.met.no/en/About-us/privacy. Weather attribution: MET Norway, CC BY 4.0; city lookup: Photon and OpenStreetMap contributors. Before a broad commercial rollout, service capacity and provider requirements must be reassessed, including MET's caching-proxy guidance and agreement requirement above 20 requests per second across all installations. Photon may throttle extensive use; neither service guarantees availability.
Optional notification gestures
Orbit's optional AccessibilityService API helper opens Android Notifications or Quick Settings only in response to a gesture or test button you use in Orbit. It requests no screen-content access, accessibility event subscriptions or gesture-injection capability. It does not read notification contents, monitor other apps, or collect or share accessibility data. A separate disclosure appears during normal launcher setup and requires your affirmative agreement before the helper can act. Android also requires you to enable the service in Accessibility settings; enabling it there alone does not grant Orbit consent. Refusing or leaving the disclosure grants no consent. Your versioned consent stays on this device and is excluded from app backup, device transfer and Orbit setup archives. You can withdraw consent and turn off the helper in Orbit's notification-gesture setup, or disable it in Android Accessibility settings. The rest of Orbit works without it.
Optional Home setup and debugging
Home setup can use a user-initiated ADB connection to this device's own address. It does not scan your network or connect automatically. A private authorization key is encrypted with Android Keystore and excluded from app and setup backups. Disconnect closes the session; Forget deletes Orbit's stored credentials. Android may retain its authorized public key until you revoke debugging authorizations in Developer settings.
Known-device Home changes save the device fingerprint, profile, original package enabled states and Home preference locally for Undo. Exported recovery instructions contain these diagnostics but never private keys or pairing codes. Orbit does not send them to M87Studios. Commands are constrained to Home setup and its diagnostics. File-manager storage access is independent of ADB.
Sharing and external services
Sharing, opening another app, and using third-party document providers are initiated by you. Those providers may transfer data under their own policies. Support email contains whatever you choose to send and is used to respond to your request. Google Play processes purchases under Google's policies; Orbit does not receive payment-card details.
The public privacy page is hosted by Cloudflare Pages. Visiting it may expose ordinary connection information, such as IP address and browser request headers, to the hosting provider. The page contains no advertising or analytics scripts. The in-app privacy summary works offline.
On phones, public privacy and attribution links open in the browser you choose. On Android TV, opening the full privacy policy, MET Norway license or OpenStreetMap attribution uses Orbit's optional in-app document reader. Initial page and resource requests and top-level navigation are restricted to the selected site's HTTPS host (m87studios.com, api.met.no or www.openstreetmap.org). Android WebView does not report every resource redirect to Orbit's request filter, so a permitted HTTPS resource may redirect to another HTTPS host. The requested sites and their hosting providers receive your IP address and ordinary WebView request headers, including its User-Agent, under their own policies. Actual redirected destinations remain unverified. The reader disables JavaScript, cookies, web storage, location access and downloads, blocks insecure mixed content, and does not expose your local files or an app-to-page scripting bridge. It does not send your app list, files, weather location or device-info widget readings to those pages. Closing the reader does not delete website or hosting-provider logs.
Retention and choices
Clear Orbit's app storage or uninstall it to remove its private settings and app-private files, including editor backups. Ordinary files in shared storage and user-exported setup archives are not removed by uninstalling Orbit. Empty Trash, remove exports, or delete files explicitly when desired. Unlinking a folder removes the shortcut and unused permission grant, never that folder's files. You can revoke storage access in Android Settings.
Orbit does not knowingly collect children's personal information. It offers general-purpose utilities and no social or account features. Contact support to request removal of information you previously sent by email; legal record-retention obligations may apply.
Contact and updates
M87Studios · support@m87studios.com. Material policy changes will update this document and its effective date.