Applio Privacy Policy

Last updated: June 16, 2026

Introduction

At Applio, we take your privacy and the security of your App Store Connect data extremely seriously. This Privacy Policy explains how we handle your information. We built Applio with a strict "local-first" philosophy to give indie developers and small studios a powerful analytics dashboard without ever exposing their data to third parties.

100% On-Device Data Storage

Applio is designed so that your app portfolio data never leaves your device:

  • All portfolio analytics, sales reports, subscriptions, impressions, and crash metrics are stored in a local SQLite database on your iPhone.
  • We do not operate any backend servers.
  • We do not collect, transmit, or store any of your App Store Connect data on our own infrastructure.
  • We do not share your data with any third-party analytics or tracking networks.

API Credentials and Security

Connecting Applio to your App Store Connect account requires sensitive API credentials (Issuer ID, Key ID, and p8 Private Key). We ensure these are handled securely:

  • Credentials are stored securely in the iOS Keychain using strict access controls, only accessible when the device is unlocked.
  • Your private keys are never transmitted to our servers or any third-party.
  • JWT (JSON Web Token) signing for App Store Connect API requests happens entirely on-device.

Direct Connection to Apple

Applio connects directly from your device to Apple's App Store Connect API. There is no middleman, proxy server, or intermediary service involved. Your device communicates directly with Apple to fetch your portfolio data.

No Account Required

Applio operates without requiring you to create an account with us. There is no Applio cloud sync or backend registration. You simply enter your App Store Connect API keys locally and start using the app.

Data Deletion

Because all data is stored locally, you have complete and immediate control over its deletion:

  • Deleting your API keys within the app instantly removes them from your iOS Keychain.
  • Uninstalling Applio entirely wipes your local SQLite database and all associated portfolio data from your device.

App Permissions

Applio requires minimal device permissions:

  • Network access (strictly to communicate with Apple's App Store Connect API and process in-app purchases).
  • Push notifications (optional, if configured for local background fetching alerts).
  • No access to contacts, precise location, camera, or other sensitive information.

Changes to Privacy Policy

Any updates to this privacy policy will be reflected in the app and on our website. Users will be notified of significant changes through app updates. Our core commitment to on-device storage and zero third-party tracking will never change.

Contact Us

If you have any questions about our privacy policy or how we secure your App Store Connect API keys, please contact us at: hey@heyvish.com