ASO Analytics Privacy Policy

Scope

This policy covers ASO Analytics and its product pages on nestor.studio, provided by the developer identified on the app’s App Store listing (“we” or “us”), under the ASO Guide brand, presented here by Nestor Studio. The subscription section applies to app version 1.2.0 and later; earlier versions do not use RevenueCat.

Your App Store data

The app connects directly from your device to App Store Connect using your own API key. Sales, subscription reports, and app analytics are processed and stored on your device and synced through your private iCloud database. We do not operate a backend that receives these reports. The app reads aggregate reports, not records identifying your individual customers.

Your API key

Your .p8 private key and connection credentials are stored in the device’s Keychain with device-only protection. They do not sync through iCloud or iCloud Keychain and are not included in backups. Add your key separately on each device. The recommended Sales and Reports role cannot change prices, edit metadata, or submit builds. You can revoke the key in App Store Connect at any time.

Connections made by the app

App Store Connect receives authenticated report requests signed on your device. Apple’s public storefront services receive app identifiers, search terms, and storefront codes to return rankings, suggestions, ratings, and listings. The European Central Bank supplies exchange rates. Apple’s CloudKit service syncs your stored data through your private iCloud database. These services receive normal network information, such as the IP address used to make a request.

Indie subscriptions and RevenueCat

From version 1.2.0, the app uses RevenueCat to validate purchases, restore access, and determine your subscription plan. Billing is initialized after you connect a real App Store Connect account, including when you use the Free plan. It is not initialized in the sample-data demo.

RevenueCat processes a randomly generated app user identifier, purchase and receipt or transaction information, subscription status, and technical information such as app and SDK versions, operating system, and device type. Its service can record when the app contacts it. This supports billing, fraud prevention, and subscription reporting in the RevenueCat dashboard, which we can access.

We do not send RevenueCat your App Store Connect API key, vendor number, sales reports, tracked keywords, or notes. We do not associate its identifier with your name or email, and we do not use advertising identifiers or cross-app advertising tracking. Apple handles App Store payments; we do not receive your payment-card details.

Sample data and tracking

The native app’s sample-data mode uses an in-memory portfolio and makes no network requests. After using a real account, restart the app before entering the demo again. The website’s product images show sample data; they do not access your account.

We do not include advertising trackers or a separate app usage-analytics or crash-reporting SDK. Subscription processing and reporting through RevenueCat are described above.

This website

The site is hosted through AWS Amplify Hosting. Delivering and securing the site involves processing request information such as IP address, requested URL, browser information, and request time. Hosting providers may retain access and security logs under their policies. We do not add analytics trackers, advertising scripts, tracking cookies, or a newsletter submission service. Fonts and images are served with the site. Following an external link opens a service with its own privacy policy.

If you contact us

Contact buttons open your email app; the website does not send the message. If you send it, we and our email provider process your address, message, and any attachments to respond and resolve your request. Please do not include API keys or private credentials. If you choose to send a diagnostics report, review its contents first; it can include app and report identifiers, dates, and error information.

Retention and your choices

Your device and private iCloud database hold your app reports and keyword history. Disconnecting removes the saved API key; it does not erase report history. Revoking the key in App Store Connect stops future access. Removing the app does not necessarily remove Keychain entries or copies stored in iCloud or on other devices. You can manage iCloud app data through Apple’s settings; contact us if you need help locating the relevant controls.

We retain correspondence for as long as needed to handle your request and meet applicable legal obligations. Purchase records and hosting logs follow the providers’ retention requirements; uninstalling the app does not automatically delete them or cancel a subscription. Contact us to request access, correction, or deletion of information we can control. We may need enough information to locate an anonymous billing record, and some records must be kept for legal or fraud-prevention purposes.

Purposes, service providers, and your rights

We process subscription information to provide the plan you request, and correspondence to provide support. Security, fraud prevention, and subscription reporting serve our legitimate interests, subject to applicable law. We also process information where needed to meet legal obligations. We do not sell your personal information or use it for targeted advertising.

Apple, RevenueCat, AWS, and email providers may process information outside your country under their applicable safeguards and privacy policies. RevenueCat states that its service data is stored in the United States. Depending on your location, you may have rights to access, correct, delete, or receive your information, restrict or object to processing, and complain to your local data protection authority. Contact us to exercise those rights.

Changes and contact

We will update this page when our data practices change and identify the revision date. For questions about privacy or requests concerning your information, use the email link below.

Contact: send email.

Apple privacy · RevenueCat privacy · AWS privacy · Terms of Use