Applio Privacy Policy

Last updated: October 20, 2026hey@heyvish.com

Applio is no longer available on the App Store. This policy still applies to existing installs.

Introduction

Applio is made by one person, and I take your privacy and the security of your App Store Connect data seriously. This Privacy Policy explains how I handle your information. I built Applio with a strict "local-first" philosophy to give indie developers and small studios a powerful analytics dashboard without ever exposing their data to third parties.

100% On-Device Data Storage

Applio is designed so that your app portfolio data never leaves your device:

  • All portfolio analytics, sales reports, subscriptions, impressions, and crash metrics are stored in a local SQLite database on your iPhone.
  • I do not operate any backend servers.
  • I do not collect, transmit, or store any of your App Store Connect data on my own infrastructure.
  • I do not share your data with any third-party analytics or tracking networks.

API Credentials and Security

Connecting Applio to your App Store Connect account requires sensitive API credentials (Issuer ID, Key ID, and p8 Private Key). I ensure these are handled securely:

  • Credentials are stored securely in the iOS Keychain using strict access controls, only accessible when the device is unlocked.
  • Your private keys are never transmitted to my servers or any third-party.
  • JWT (JSON Web Token) signing for App Store Connect API requests happens entirely on-device.

Direct Connection to Apple

Applio connects directly from your device to Apple's App Store Connect API. There is no middleman, proxy server, or intermediary service involved. Your device communicates directly with Apple to fetch your portfolio data.

No Account Required

Applio operates without requiring you to create an account with me. There is no Applio cloud sync or backend registration. You simply enter your App Store Connect API keys locally and start using the app.

Data Deletion

Because all data is stored locally, you have complete and immediate control over its deletion:

  • Deleting your API keys within the app instantly removes them from your iOS Keychain.
  • Uninstalling Applio entirely wipes your local SQLite database and all associated portfolio data from your device.

App Permissions

Applio requires minimal device permissions:

  • Network access (strictly to communicate with Apple's App Store Connect API and process in-app purchases).
  • Push notifications (optional, if configured for local background fetching alerts).
  • No access to contacts, precise location, camera, or other sensitive information.

Changes to Privacy Policy

Any updates to this privacy policy will be reflected in the app and on my website. Users will be notified of significant changes through app updates. My core commitment to on-device storage and zero third-party tracking will never change.

Contact

If you have any questions about my privacy policy or how I secure your App Store Connect API keys, please contact me at: hey@heyvish.com