Privacy Policy

1. Controller and contact

The controller responsible for the processing described in this Privacy Policy is Tobias Krenn, operating the AppStoreStatistics service as a sole proprietor.

Postal address: Grolzham 25B, 4680 Weibern, Austria. Email: [email protected].

2. Data we process

The data involved depends on the features you choose to use.

• Account data: Firebase user identifier, email address, authentication provider and session information.
• Workspace data: watchlists, selected apps, countries, saved trackers, analyses, run states and source metadata.
• ASO AI Agent data: prompts, assistant messages, app evidence, citations, response identifiers and token or web-search usage summaries.
• Billing references: plan, subscription state and Stripe customer, checkout or subscription identifiers. Card details entered in Stripe Checkout are not received or stored by AppStoreStatistics.
• Free-tool protection data: daily counters linked to cryptographically hashed account or device/network signals. The quota table does not intentionally store the raw IP address or raw user-agent string.
• Public report data: an app metadata analysis is published only when a signed-in user explicitly creates a public share. Published reports can be revoked.
• Technical data: request, security, error and operational logs needed to deliver and protect the service.
• Analytics data: page views and interactions processed by Google Analytics and Ahrefs Analytics only after analytics consent.

3. Purposes and legal bases

We process personal data only where a legal basis applies.

• Contract and pre-contractual steps: accounts, paid access, saved product workflows, support and requested analyses.
• Legitimate interests: service security, abuse prevention, rate limiting, troubleshooting and reliable operation, balanced against user rights.
• Consent: optional analytics storage and scripts. Consent can be withdrawn through Cookie settings at any time.
• Legal obligations: accounting, tax, fraud-prevention and legally required records or disclosures.

4. Service providers and external sources

We use processors and external source providers where required to operate a selected feature.

• Google Firebase for authentication and related account state.
• Stripe for hosted checkout, payment processing and the billing portal.
• OpenAI for the ASO AI Agent and optional source-linked web research. Requests are made server-side and use store:false where supported, but AppStoreStatistics stores the conversation needed for the product thread.
• Cloudflare and hosting infrastructure for delivery, security and network operation.
• Google Analytics and Ahrefs Analytics after analytics consent.
• Apple/iTunes, Apple public Store pages, Meta and TikTok as external public or authorized data sources. Requests can disclose ordinary technical connection data to the source provider.

5. International transfers

Some providers may process data outside Austria or the European Economic Area. Where required, the relevant provider and controller rely on an applicable adequacy decision, approved contractual safeguards or another lawful transfer mechanism. Provider terms and privacy information may change independently of AppStoreStatistics.

6. Retention

We retain account and product data for as long as needed to provide the account and requested features, resolve disputes, protect the service and comply with legal obligations. Billing and accounting references may be kept for legally required periods.

ASO AI conversations remain associated with the thread until they are deleted as part of an applicable account or privacy request. Public metadata reports remain available until revoked or removed and become noindex when stale under the published report policy. Operational logs and free-tool counters are retained only as long as reasonably needed for their security or quota purpose.

7. Your choices and rights

Depending on applicable law, you may request access, rectification, erasure, restriction, portability or object to processing based on legitimate interests. You may withdraw consent without affecting earlier lawful processing.

• Send privacy requests to [email protected].
• Include enough information to identify the relevant account, but never send a password, private key or access token.
• You may complain to the Austrian Data Protection Authority (Datenschutzbehörde) or another competent supervisory authority.
• Cookie preferences can be changed through Cookie settings.

8. Public reports and AI prompts

Do not place confidential information, third-party personal data or secrets in an ASO AI prompt. A public metadata report is discoverable only after an explicit publication action. You are responsible for ensuring that content you choose to publish may lawfully be made public.

9. Children, security and changes

The service is intended for people capable of entering a binding contract and is not directed to children. We use reasonable technical and organizational safeguards, but no internet service can guarantee absolute security.

This policy may be updated when products, providers or legal requirements change. The date at the top identifies the current version.