Legal

Privacy Policy

Last updated: July 2025

What we collect

App Tracker collects only what is necessary to provide the service:

  • Your email address and account information, managed by Clerk (our authentication provider).
  • App Store Connect and RevenueCat API credentials you provide during setup, stored encrypted in our database.
  • App metadata (app IDs, bundle identifiers, names) associated with your account.
  • Install and revenue data fetched from Apple and RevenueCat on your behalf, cached temporarily.
  • Subscription and billing information, managed by Stripe. We do not store card details.
  • Basic server access logs (IP addresses, request paths, timestamps) for security and debugging.

How we use it

We use the data you provide solely to operate the App Tracker dashboard:

  • To authenticate you and manage your session.
  • To fetch your app analytics from Apple and RevenueCat using your credentials.
  • To manage your subscription through Stripe.
  • To send transactional emails about your account (billing receipts, trial expiry).

We do not sell your data. We do not use it for advertising.

Credential storage

Your App Store Connect private keys and RevenueCat API keys are encrypted at rest using AES-256-GCM before being stored. Credentials are scoped to your account and are never shared with other users or used for any purpose other than fetching your own analytics data.

Third-party providers

  • Clerk — authentication and user management.
  • Stripe — payment processing and subscription billing.
  • Neon / PostgreSQL — database hosting for your account data.
  • Replit — infrastructure and hosting.
  • RevenueCat — fetched on your behalf using your own API key.
  • Apple App Store Connect — fetched on your behalf using your own API key.

Data retention

Your account data is retained for as long as your account is active. Cached analytics data (installs, revenue) is stored temporarily to reduce API calls. If you cancel your subscription and delete your account, your credentials and cached data are deleted within 30 days.

Your rights

You can request a copy of your data, correction of inaccurate data, or deletion of your account at any time. To exercise these rights, email enquiries@exitapp.social.

Contact

Questions about this policy? enquiries@exitapp.social