Privacy Policy

Apsity ("we", "us") operates the web application at apsity.com. This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data.

Account Data

• Email address (required for registration)
• Display name (optional)
• Subscription plan and status
• Alert preferences (JSON settings)

App Store Connect Credentials

• Key ID, Issuer ID, Vendor Number, and App ID
• ASC private key — encrypted with AES-256-GCM before storage

App Performance Data (fetched from Apple APIs)

• Daily sales: units, proceeds, currency, country, product type, device type
• Subscription data: active subscribers, renewal status, plan names
• App reviews: title, body, rating, author name
• Keyword rankings: position in App Store search results
• Category rankings: position in category charts

Competitor Data

• Public App Store metadata: app name, developer, icon, rating, genre, version
• Daily metadata snapshots for change detection

Payment Data

• LemonSqueezy subscription ID and customer ID
• Subscription status and renewal dates
• We do NOT store credit card numbers — payment is handled entirely by LemonSqueezy

AI Processing Data

• App name, category, keywords, and description are sent to Anthropic's API for keyword optimization and insight generation
• AI-generated results are stored in our database with confidence levels and evidence

We use localStorage (not cookies) for:

• apsity-locale — language preference (en/ko)
• apsity-favorites — favorited app IDs
• apsity-currency-mode — currency display preference
• apsity-last-sync — last sync timestamp

Supabase uses HTTP-only cookies for session authentication. These are essential for the Service to function and cannot be disabled.

• Display your app analytics in the dashboard
• Send email alerts (rank changes, revenue drops, low-rating reviews, download surges)
• Send weekly performance reports (Starter and Pro plans, every Monday)
• Generate AI-powered keyword suggestions and growth insights
• Process subscription payments via LemonSqueezy
• Enforce plan limits (apps, keywords, competitors, data retention)

We share data with the following services, solely to operate Apsity:

We do not sell, rent, or share your data with data brokers, advertisers, or any parties not listed above.

• Free plan: Performance data (sales, rankings, insights) auto-deleted after 7 days
• Starter plan: Auto-deleted after 90 days
• Pro plan: Retained indefinitely
• Competitor snapshots: Deleted after 90 days (all plans)
• Account data: Retained until you delete your account

• App Store Connect private keys are encrypted at rest using AES-256-GCM
• All data is transmitted over HTTPS
• Database hosted on Supabase with row-level security
• Webhook payloads verified with HMAC-SHA256 signatures
• Cron endpoints protected with Bearer token authentication

Apsity does not use any third-party analytics or tracking services. We do not use Google Analytics, Facebook Pixel, or any similar tracking tools. We do not collect IP addresses or browsing behavior for advertising purposes.

You have the right to:

• Access: View all data we hold about you through the dashboard
• Delete: Request deletion of your account and all associated data
• Export: Export your data via CSV (Starter and Pro plans)
• Rectify: Update your account information at any time
• Withdraw consent: Delete your ASC credentials or cancel alerts at any time

To exercise these rights, contact jinseok.help@gmail.com.

Apsity is not intended for users under 18 years of age. We do not knowingly collect data from minors.

We may update this Privacy Policy periodically. Changes will be posted on this page with an updated date. Material changes will be communicated via email.

For privacy inquiries, contact jinseok.help@gmail.com.