StudioDash Privacy

The App Store Connect API key and the Google Analytics service-account file you connect are stored in the device Keychain. The list of apps you add is stored in the app's own storage.

This information is kept so the app can read your metrics on later launches without asking you to sign in again.

The app calls Apple's App Store Connect API and Google's Analytics API using your own credentials, directly from your device. Those requests carry your keys to Apple and Google, not to us.

Your subscriber history stays on your device. We do not hold a copy of it.

Subscription alerts reach you through our server, and nothing about your subscribers is kept there.

To deliver those alerts we store a device push token, an anonymous sign-in identifier, and your apps' names and App Store ids so an alert can say which app it is about.

When you connect Google Analytics, StudioDash asks for one permission: read-only access to your Analytics data, the analytics.readonly scope. You can grant it by signing in with your Google account, or by connecting a service-account key you create yourself.

That access is used for two things. It lists the Analytics properties your account can open, so each one can be matched to an app of yours by the bundle id on its iOS data stream. It then reads active, new and returning user counts for those properties so the app can show them to you.

These requests go from your device straight to Google over HTTPS. Your Google credentials, and the Analytics data they return, never pass through any server we run. We do not store this data, share it, transfer it, or put it to any other use. It is never used for advertising, sold on, or used to train any model, and the same holds for anyone we work with.

The figures Google returns are held in memory for as long as you are looking at them. They are not written to disk, and they are gone when you sign out or quit the app. The credential itself stays in the encrypted device Keychain until you remove it.

You can withdraw access whenever you like. If you signed in with Google, remove StudioDash at myaccount.google.com/permissions. If you connected a service-account key, remove its access in Google Analytics or delete the key. Disconnecting inside the app deletes the stored credential from your device straight away.

Your App Store Connect key and your Google Analytics credentials sit in the iOS Keychain. The Keychain is encrypted by the device hardware, an entry can be read only after the first unlock following a restart, and only StudioDash can read what StudioDash wrote. Those credentials never go into a log, a crash report or an analytics event.

The entries are marked for iCloud Keychain so your own other devices can pick the setup up without you typing a key again. Apple encrypts that sync end to end and it runs between your devices. No server of ours takes part in it.

Everything the app sends leaves the device over HTTPS. The access token it trades your Google credential for is held in memory, expires within the hour, and is fetched again after that.

Our own server holds your push token, your anonymous sign-in id, and your apps' names and App Store ids. It runs on Google Cloud, which encrypts that data in transit and at rest. Every record is scoped to the account that signed in, so another account cannot read it. Push signing keys are kept in Google Secret Manager, and a push token that reaches a log is cut down to four characters.

We never receive your App Store Connect key or your Google Analytics credentials, and your Analytics data never passes through our servers. Apple gives us no names, email addresses or payment details for your subscribers, and we never ask for them. There is no advertising and no tracking across other apps or websites.

If you turn on subscription alerts, your device push token is stored so we can notify you when one of your own apps records a subscription event. You can turn alerts off at any time in the app or in the system Settings.

The app talks to Apple and Google using your own accounts. Anonymous sign-in and the subscription-alert store are handled by Google Firebase, used only to scope alerts to your device. No end-user content is sent to these services.

Deleting the app removes the keys, the app list and the subscriber history held on your device.

There is no subscriber history on our side to remove. What we hold is your push token, your anonymous sign-in and your apps' names, and deleting your account removes all of it. That deletion runs as soon as you ask for it.

If you deleted the app before deleting your account, that is the one case where you cannot reach those from the app. Write to us and we will remove them.

Questions about privacy? Write to hello@studiodash.live.

If this policy changes, the date at the top of this page is updated. Continued use of the app after a change means you accept the updated policy.