ASO Analytics Privacy Policy
Last updated
Overview
ASO Analytics (“the App”) shows an app developer their own App Store numbers on iPhone, iPad and Mac. It is published by Nestor Studio. This policy explains what the App stores, where it stores it, who it talks to, and what it does not do.
Short version: the App has no backend. Every figure it shows is fetched by your device, from your own App Store Connect account, using your own API key. Nestor Studio operates no server for this app, receives nothing, and can read nothing.
What the App Stores, and Where
| Data | Where it lives | Who can reach it |
|---|---|---|
| Your App Store Connect private key (.p8) | The device keychain, accessible only when the device is unlocked, on that device alone | The app, on that device. Never in a backup, never in iCloud Keychain |
| Issuer ID, key ID, vendor number | Stored beside the key in the keychain | The app, on that device |
| Sales, subscription and usage reports | On the device with SwiftData, and in your own iCloud private database via CloudKit | You, on the devices signed in to your Apple Account |
| Tracked keywords, positions and notes | The same local and iCloud store as the reports | You, on the devices signed in to your Apple Account |
| Display currency, daily-check preference | UserDefaults on the device | The app, on that device |
Your App Store Connect Key
The App asks you to create an App Store Connect API key with the Sales and Reports role — the narrowest role that can read what it shows. That role cannot change prices, edit metadata, submit builds, manage users or create further keys.
The private key file (.p8) is stored in your device's keychain, with accessibility set to when-unlocked-this-device-only. In practical terms that means it is not included in device backups, is not synchronised through iCloud Keychain, and is never written into the database that syncs between your devices. It is used on the device to sign requests to Apple, and for nothing else. You can replace or remove it at any time in Settings.
Every Host the App Can Reach
There are exactly four, and the same list is shown inside the App's own settings screen so it can be checked without taking this page's word for it.
| Host | Why | What is sent |
|---|---|---|
api.appstoreconnect.apple.com | Your own sales, analytics and app metadata | A signed token proving your own API key, and the report filters |
itunes.apple.com | Public ratings, charts, rating breakdowns and product pages | An app ID and a storefront code. Unauthenticated |
search.itunes.apple.com | The App Store’s own search ranking and its search suggestions | A search term and a storefront code. Unauthenticated |
www.ecb.europa.eu | Daily euro reference rates, so revenue can be shown in one currency | Nothing. A static XML file is downloaded |
The two Apple search hosts are asked anonymously: no key, no token, no account, and no device or advertising identifier. What leaves the device is the keyword being checked and which country's store to check it in — the same two things any visitor's App Store search sends.
iCloud Sync
If you are signed in to iCloud, the App syncs your reports, tracked keywords and notes between your devices through CloudKit, in your own iCloud private database. That database belongs to your Apple Account. Nestor Studio has no access to its contents; Apple's handling of iCloud data is governed by the Apple Privacy Policy.
Your API key is deliberately excluded from that sync. Turning iCloud off leaves the App fully usable; the data simply stays on the device that fetched it.
Data the App Does NOT Collect
- No personal information (name, email, Apple Account, location)
- No device identifiers (UDID, serial number, advertising identifier)
- No usage analytics, telemetry, or crash reports
- No contacts, calendars, photos, or data from other apps
- No advertising, and no profiling or tracking of any kind
The App's privacy manifest declares the same thing in the form Apple reads automatically: tracking off, no tracking domains, no collected data types, and one required-reason API — UserDefaults, used for the App's own settings.
Third-Party SDKs and Frameworks
ASO Analytics has no third-party dependencies. It is built entirely on Apple system frameworks (SwiftUI, SwiftData, CloudKit, CryptoKit, BackgroundTasks). There are no analytics SDKs, ad networks or crash reporting libraries embedded in the App.
Deleting Your Data
Disconnecting your key in Settings removes it from the keychain. Deleting the App removes its local store; the iCloud copy can be removed from Settings → your name → iCloud → Manage Account Storage. You can also revoke the API key itself in App Store Connect at any time, which stops the App reading anything further. Because we never receive your data, there is nothing for us to delete on your behalf.
Children's Privacy
ASO Analytics does not collect data from anyone, including children under 13.
Changes to This Policy
If this policy changes in a future version, the updated policy will be published here and the “Last updated” date above will be revised.
Contact
Questions about this privacy policy? send email.