Privacy Policy

Overview

We collect what is needed to sell you a license, verify that license inside the app, and support your account. We do not sell your personal information and we do not run advertising trackers.

Information we collect

The information tied to your account is limited to the following:

• Account identity. When you sign in with Apple, we receive a stable Apple account identifier and, if you allow it, a relay or real email address. We use this to recognize your account across the website and the Mac app.
• Billing identifiers. When you purchase, our payment processor creates a customer record and returns identifiers such as a customer ID, purchase status, and update eligibility. We store these to confirm your entitlement.
• Entitlement records. Whether your annual plan is active and when its current billing period ends.
• Download link requests. If you ask us to email you the download link while browsing on a phone, we store that address, which surface you asked from, and when. We send you the link and nothing else: there is no list behind it and no follow-up sequence. Ask us on the support page and we will delete it.
• Product analytics. How this website is used, including pages viewed, clicks, and session recordings with form inputs masked. This covers the website only, not the Mac app.
• Operational data. Standard server logs (such as IP address, timestamp, and request path) generated when your browser or the app contacts our service, used for security and reliability.

We do not receive or store complete payment card numbers. Card details are entered directly with our payment processor.

Your research data

Tracked apps, keywords, rankings, notes, tags, history, and every metric ASO Studio computes are stored on your Mac, and that copy stays yours whether or not you keep the subscription. Your notes and tags are never sent to us at all.

If you connect optional services such as an Apple Ads account or an OpenAI key, those credentials are stored in the macOS Keychain on your device and are used only to make requests you initiate. They are never transmitted to us. You can remove them at any time.

Connecting an AI agent works in one of two ways, and they differ in exactly one respect. On your Mac, it is a socket readable only by your account, and nothing in that exchange passes through our servers. From anywhere else, your Mac holds an outbound connection to our edge and we pass messages along it.

On that second path we are a relay and not a destination. Messages are forwarded between your agent and your Mac and are not stored, logged or read; your workspace stays on your Mac, and every App Store request is still made from your machine rather than ours. It is off unless you switch it on, it needs you to sign in and approve the connection, and turning it off ends it immediately.

The weekly report email (not yet available)

This feature does not exist yet and no data is collected for it today. We are describing it here in advance so the change is not a surprise, and we will update this policy and its date before it starts collecting anything.

The plan is an email at the end of each week covering the apps you track: which terms moved, the rank each moved from, and what we suggest doing next. Producing that email would mean holding a copy of what it reports on, specifically your tracked apps and their rank readings and associated metrics, so the report can compare this week against earlier ones. It would not include your notes, your tags, or any key you have connected.

It will be off until you switch it on, it will be usable only to build and send your own report, and it will carry an unsubscribe control that stops the email and deletes what it was holding. We will not sell that data, share it with other customers, or use it to advertise to you.

How we use information

• To create and authenticate your account.
• To process subscription payments and manage your license entitlement.
• To deliver eligible application updates through the authenticated update feed.
• To understand how this website is used so we can improve it.
• To provide customer support and respond to your requests.
• To secure the service, prevent abuse, and meet legal obligations.

We do not use your information for advertising, and we do not sell it or build profiles of you to share with anyone else.

Legal bases for processing

Where the GDPR or similar laws apply, we process your information to perform our contract with you (providing the app and your license), to pursue our legitimate interests in operating and securing the service, and to comply with legal obligations such as tax and accounting requirements.

How information is shared

We share information only as needed to run the service: with the service providers listed below, when required by law or valid legal process, and in connection with a business transfer such as a merger or acquisition. We do not sell or rent your personal information.

Service providers

We rely on a small set of providers who process limited data on our behalf:

• Apple, for Sign in with Apple authentication.
• Stripe, for payment processing and billing management.
• SendGrid, for delivering support email and download links.
• PostHog, for product analytics on this website.
• Our hosting and database provider, for running the website and storing entitlement records.

Each provider processes information under its own terms and privacy commitments.

Data retention

We keep account and entitlement records for as long as your account exists and as needed to honor your license. A download link request is kept until you ask us to remove it. Billing records may be retained longer where required for tax, accounting, or legal reasons. When you delete your account, we remove the associated entitlement record and revoke stored authentication tokens, subject to the retention periods above.

Security

We use encryption in transit, restricted access, and provider-managed infrastructure to protect account data. Secret keys used by the service are never exposed to your browser. No method of transmission or storage is perfectly secure, but we work to protect your information and to limit what we hold in the first place.

International transfers

Our providers may process information in countries other than yours. Where required, transfers rely on appropriate safeguards such as standard contractual clauses offered by those providers.

Your privacy rights

Depending on where you live, you may have the right to access, correct, delete, or export your personal information, to object to or restrict certain processing, and to withdraw consent. To request account deletion and token revocation, or to exercise any of these rights, contact us using the details on the support page. Active billing may need to be resolved before an account can be deleted. We will not discriminate against you for exercising your rights.

Children's privacy

ASO Studio is intended for developers and is not directed to children under 13 (or the minimum age in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will remove it.

Cookies and analytics

The website uses essential cookies to keep you signed in and to complete secure checkout, and product analytics cookies set by PostHog to measure how the site is used. That analytics measurement covers pages viewed, clicks, and session recordings in which form inputs are masked and the billing and account area is not recorded.

We do not use advertising cookies or cross-site advertising trackers, and none of this data is sold or shared with advertisers. You can block analytics with your browser's Do Not Track or tracking protection settings, and the site works normally with it blocked.

Changes to this policy

We may update this policy as the product evolves. When we make material changes, we will revise the date above and, where appropriate, provide additional notice. Continued use after an update means you accept the revised policy.

Contact us

Questions about this policy or your data can be sent to the address listed on the support page. Please do not include private API keys or Apple Ads private-key material in any message.