Privacy and terms
Written to be read. Every claim here matches what the code actually does, and the retention figures are read live from the running configuration rather than typed in by hand.
Privacy
Last updated 31 July 2026
The short version
- Google Analytics is off until you choose “Allow analytics”. It is used to understand visits and product usage, never for advertising. You can change that choice from “Analytics settings” in the footer.
- Your account holds an email address, password hash, plan, tracked apps and keywords, plus the last time the signed-in product was used and the country indicated by the browser's language setting.
- App listing data is public information about companies, not about people.
- Public app reviews are processed without the reviewer's nickname or review id, both of which are discarded at fetch time.
- Review text is redacted before storage: emails, phone numbers, URLs, handles, postcodes, long reference numbers and volunteered names are replaced with tokens, so what is kept is an opinion about software rather than a way to reach anybody.
- The redacted text is retained as the training corpus for the classifier that produces the complaint themes. It is kept for as long as that purpose lasts.
- Card details never reach this server. Stripe collects them on their own domain.
What is collected, and why
| Data | Why | Basis | Kept |
|---|---|---|---|
| Account and last activity | Email, password hash, plan and a last-active time are used to create the account, sign you in and understand whether the product is being used. | Contract | Until you delete the account |
| Session cookie | To keep you signed in between requests. Strictly necessary, which is why there is no cookie banner: consent is not required for a cookie that only delivers a service you asked for. | Contract | Until sign out |
| Website usage data (optional) | If you consent, Google Analytics measures pages viewed, product interactions, approximate location, device and referral source. AsoTheory also records a random browser identifier only as a one-way hash, with an event name, page path and time, to produce its private signup funnel. No IP address, user agent, fingerprint or raw browser identifier is stored by AsoTheory. Advertising storage and personalisation are disabled. | Consent | AsoTheory's event rows are deleted after 180 days. Google Analytics follows its configured retention period. You can withdraw consent at any time. |
| Your tracking list and keywords | To know which apps and terms to collect for you. | Contract | Until you delete the account |
| Browser settings country | To understand which countries signed-in customers appear to come from. This uses the browser's language-region and time-zone settings, not GPS, precise location or IP geolocation, so it may be inaccurate. | Legitimate interest | Until you delete the account |
| App listing snapshots and changes | The product itself. This is published commercial information about software products, not personal data. | Legitimate interest | Indefinitely |
| Public review text and ratings | To identify recurring complaints, rate listings per storefront, and train and improve the classifier that does it. The reviewer's nickname and Apple's review id are read only to remove duplicates within a single fetch and are then discarded. The text is then redacted, so what is stored is an opinion with no identifier and no contact detail attached. | Legitimate interest | Retained as a training corpus |
| Derived review analysis | Star distributions, complaint theme counts, per-storefront verdicts. Aggregate figures that identify no one. | Not personal data | Indefinitely |
| Billing records | To take payment and meet tax and accounting obligations. | Contract, then legal obligation | As tax law requires, typically 6 to 10 years |
On review text specifically
This is the only place where the product touches anything written by an individual, so it is worth being precise.
App Store reviews are published by their authors on a public storefront. We read them, discard the nickname and the review id, and keep the rating, the text, the storefront and the app version. The purpose is to tell a developer what people complain about and in which market, which is a legitimate interest under Article 6(1)(f) and does not require the reviewer's consent, since asking them would be impossible and refusing to process would defeat the purpose.
Free text is the part where someone can volunteer more than they meant to, so before anything is written to disk it is passed through redaction. Email addresses, phone numbers, URLs, social handles, postcodes, runs of seven or more digits, and names following "my name is" or a sign-off are each replaced with a token such as [EMAIL] or [PHONE]. The token is left in place rather than the text being deleted, because the fact that someone quoted an order number is itself part of a billing complaint. Prices, version numbers and quantities are deliberately preserved, since those carry the meaning.
The redacted text is kept as the labelled corpus that trains and improves the complaint classifier whose output you see as themes. That is a specific purpose, compatible with the purpose the text was collected for, rather than an open-ended intention to find a use for it later. It is retained for as long as that purpose lasts.
Balancing this against the reviewer's interests: the content was voluntarily published on a public storefront, every identifier is discarded, contact details are redacted, nothing is used to profile or contact anybody, no automated decision is made about any individual, and the text is never republished as a feed.
If you are a reviewer and want your text removed, write to the address below with the app and storefront and it will be deleted.
Your rights
If you are in the EU, EEA or UK you can ask for access, correction, deletion, a copy of your data, or restriction of processing, and you can object to processing based on legitimate interest. Account deletion is self service in the workspace and removes your account, sessions, tracking list, keywords and keyword rank history immediately.
App listing snapshots are deliberately not deleted with an account. They describe public app listings rather than you, and the same records serve every other customer tracking that app, so removing them would corrupt other people's history without protecting yours.
You may also complain to your local supervisory authority.
Security
Passwords are stored as PBKDF2-SHA256 hashes with a per-user salt and 120,000 iterations, never as recoverable text. The session cookie is HttpOnly and SameSite. Card data never touches this server.
Contact
For anything on this page, including erasure requests, write to digitalboxstudios2@proton.me.
Terms of service
Last updated 31 July 2026
What you are buying
Access to a tool that collects public App Store and Google Play data and analyses it. Standard and Studio are annual subscriptions. Each begins with a 7-day free trial; the annual charge starts when the trial ends unless you cancel first through the billing portal. After payment, cancellation stops the next renewal and access continues to the end of the paid annual period. Any rights that applicable consumer law gives you remain unaffected.
What the numbers are, and are not
This matters more here than in most products, so it is a term rather than a footnote. Install and revenue figures are estimates derived from public signals, not reported financials. Where a figure is reported by a store it is labelled reported; everywhere else it is labelled estimated, and the assumptions behind it are shown on screen. Keyword traffic and difficulty are relative proxies, not search volumes, because neither store publishes volume. Nothing here is financial advice, and decisions you take on the strength of an estimate are yours.
Fair use
Plan limits are enforced. Do not attempt to circumvent them, resell access, or automate the interface in a way that multiplies the load a plan implies. The product depends on staying a well-behaved consumer of public endpoints, and one account abusing that degrades collection for everybody.
Availability
No uptime guarantee is offered at these prices. The product depends on public store endpoints that can change format or restrict access without notice; when that happens, collection can pause. Gaps are shown as gaps rather than interpolated, so you will be able to see it.
Cancellation and refunds
Cancel any time; the subscription then ends at the close of the current period. If a collection failure meant you got materially less than the plan describes, write in and it will be refunded.
Trademarks
App Store and Apple are trademarks of Apple Inc. Google Play is a trademark of Google LLC. This product is independent and not endorsed by, affiliated with or sponsored by either company. App names, icons and screenshots belong to their publishers and are shown to identify the app being analysed.
Liability
To the extent the law allows, liability is limited to the fees you paid in the twelve months before a claim. Nothing here limits liability that cannot be limited.
Subprocessors
The complete list of third parties that process data on our behalf. It is short by design.
| Who | What for | What they receive |
|---|---|---|
| Stripe | Payments and invoicing | Your email, billing address and card details, collected on Stripe's own domain |
| Google Analytics | Optional website and product usage measurement | Page and interaction data, approximate location, device details and referral source, only after consent |
| Hosting provider | Running the server and database | Everything stored, as the operator of the machine |
No advertising network, session recording, customer data platform or email marketing tool is used.