Apogee Privacy Policy

Last updated: 25 September 2026

Apogee is a client app for self-hosted BookOrbit servers. This policy explains how Apogee handles your data.

What we collect

Nothing. The developer of Apogee does not collect, store, sell, or share any personal data, and operates no servers that receive your data.

How your data flows

Apogee talks to the BookOrbit server you choose to connect to, using the address and credentials you enter. Your library, reading and listening progress, reading sessions, highlights, and bookmarks move between your device and that server. Whoever runs that server decides how your data is stored and protected.

Apogee connects to other services only for features you turn on:

• Fanfic Updates. If you sign in to Archive of Our Own (AO3), you do so on AO3's own sign-in page, and Apogee keeps only the session AO3 gives back, on your device. It uses that session to check the works you subscribe to on AO3 and to download new chapters to your BookOrbit server. Signing out of AO3 in Settings removes it. Apogee is not affiliated with AO3 or the Organization for Transformative Works.
• Audiobook notes. Notes you add to audiobooks sync through your own private iCloud database, so they reach your other devices. Apple stores them under your Apple Account. The developer cannot see them.
• CrossPoint e-readers. If you send a book to a CrossPoint device, Apogee sends the file to that device over your local network.

On-device data

Downloaded books, cached covers, and your settings stay on your device. Delete the app and it is all gone.

Signing out and deleting data

Signing out in Settings removes your server credentials from the device. On BookOrbit 3.0 and later, a password sign-in's session is also ended on the server. Your BookOrbit account belongs to the server you connect to, and whoever runs that server can delete it. Apogee does not create accounts.

Diagnostics you choose to share

The app can build a short report about your setup: the app build, your iOS version, your device model, whether the app is online, how many changes are waiting to sync, and how many files you have downloaded. It classifies the kind of address your server uses, such as "Tailscale" or "public domain". It does not include your server's name or address.

The app can also save a file of its own log lines from the last fifteen minutes, with your server's host name removed.

Both are shown to you before anything happens, and neither leaves your device unless you choose to share it. The app sends nothing on its own, and the developer receives nothing you have not sent.

Third parties

Apogee contains no third-party analytics, advertising, or tracking SDKs.

Contact

Questions? Email privacy@apogeereader.app.