Security at Apptonomy

Your private store metrics stay scoped to your account

Apptonomy uses private connected-account metrics to analyze your apps. We do not pool private metrics into cross-customer benchmarks, resell them, or use them to build market estimates.

Benchmark ranges use public sources and documented expert judgment.

Connect only when you need to

You can analyze a public App Store or Google Play listing without connecting a store account. Connecting unlocks private performance analytics and direct publishing. You can revoke that access in your store account at any time.

How credentials are protected

Store credentials are encrypted in your browser before upload. When a stored credential is required, Apptonomy application-encrypts it for persistence using Google Cloud Key Management Service. It is decrypted transiently only when an authorized store API request needs it, and it is not persisted or logged in plaintext.

With keyless Google Play linking, no customer service-account key is uploaded or stored. You grant an Apptonomy-managed service account access in Play Console and can revoke it by removing that account.

What access Apptonomy uses

Access depends on the store and the features you choose:

You choose the features and roles you enable. Apptonomy verifies the capabilities required for those features and reports missing or revoked access.

Publishing stays under human control

Apptonomy creates drafts. In the product today, an authorized project editor or administrator initiates every store publish, reviews the content, and chooses the included asset scopes, fields, and locales. Apptonomy does not schedule or initiate store publishing on its own.

AI processing and subprocessors

Some listing content and, when required for a feature, selected connected-account data are processed by named infrastructure and AI subprocessors solely to provide Apptonomy. We use commercial API services whose published terms exclude submitted API content from model training by default. Apptonomy does not intentionally opt in to provider training or data-sharing programs.

Apptonomy uses OpenAI, Anthropic, Perplexity, and Google Gemini for specific analysis tasks. Requests route through Cloudflare AI Gateway with prompt and response payload logging disabled. Eligible AI responses may be cached for up to 30 days. Current AI request paths use the cache-eligible classification, so Apptonomy does not represent that connected-account-derived requests bypass gateway caching.

Retention and processing locations vary by provider and are documented in our current subprocessor list.

Authentication, logging, and encryption

• Apptonomy uses Clerk for user authentication and enforces organization and project roles for protected actions.
• Network traffic uses TLS.
• Stored store credentials receive application-level encryption in addition to provider-managed storage encryption.
• Operational events are recorded in redacted logs; secrets and raw credentials are excluded from logging sinks.

Revoke access or request deletion

You can revoke App Store Connect keys or roles, remove the Apptonomy service account from Play Console, or revoke a bring-your-own Google key. Apptonomy reports credential failures rather than silently continuing.

For account-data access, correction, or deletion requests, see our Privacy Notice or contact the privacy address listed there. Backup and legally required retention are described in the Privacy Notice and DPA.