Privacy Policy

Effective: 2026-08-29

Summary

Appcrest has no server and no account. There is nothing to sign up for and nowhere for your data to go.
Your Apple credentials stay in your Keychain; cached reports stay on your devices and in your own private iCloud. Neither is readable by the developer.
The app talks directly to Apple's App Store Connect and Apple Ads APIs, with your keys, on your behalf.
The optional AI evaluator is off unless you run it, and you choose the provider — including fully on-device.
App Store privacy label: Data Not Collected.

What Appcrest is

Appcrest is a local-first dashboard for indie developers. It fetches your own developer data — downloads, sales, submissions, TestFlight feedback, Apple Ads campaigns — from Apple's APIs and shows it to you. The developer of Appcrest operates no server, runs no analytics pipeline, and receives none of this data.

What we collect

Nothing. The App Store privacy nutrition label for Appcrest is Data Not Collected.

The only usage information the developer can ever see is Apple's own App Analytics — aggregated, anonymized statistics Apple shares with developers only if you have opted in under Settings → Privacy & Security → Analytics & Improvements on your device. Apple strips personal identifiers before anything is shared.

Your credentials

Connecting live data means giving the app your own Apple-issued API credentials: an App Store Connect API key (issuer ID, key ID, private key, optional vendor number) and, optionally, Apple Ads API credentials. If you use the Claude evaluator, an Anthropic API key as well.

Keys are stored only in your device Keychain, marked synchronizable, so your own iCloud Keychain (end-to-end encrypted by Apple) can carry them between your devices.
Keys are never written into the report cache or any CloudKit record, never included in widget data or notifications, and never sent anywhere except directly to the API they authenticate against.
Each key can be deleted in the app's Settings at any time; deleting removes it from your Keychain.

Your report data and iCloud

Reports fetched from Apple are cached on-device. If you turn on iCloud sync, the cache is mirrored to your own private iCloud database (Apple's CloudKit, container iCloud.com.tylerfitch.Appcrest) so your iPhone, iPad, and Mac stay in step. That data lives in your Apple ID, not on any server the developer operates, and the developer has no read access to it.

Settings → Clear cache removes cached reports, wins, recommendations, and sync history. You can also remove Appcrest's iCloud data under Settings → [your name] → iCloud → Manage Account Storage.

Who the app talks to

With your credentials connected, Appcrest communicates directly with Apple's App Store Connect API and Apple's Apple Ads API, over TLS, from your device. Those requests necessarily carry your API authentication and are governed by Apple's Privacy Policy and your developer agreements with Apple.

Syncing only reads. The one write path is explicit: if you apply a listing change the app drafted (for example, updated promotional text), Appcrest submits exactly the change you approved to App Store Connect, using your key. Nothing is written without that action.

The optional AI evaluator

You can ask Appcrest to evaluate an app in writing. This feature runs only when you start it, and the provider is your choice in Settings:

On-device — Apple's Foundation Models. The evaluation never leaves your device.
Private Cloud Compute — Apple's stateless cloud models, under Apple's Private Cloud Compute privacy guarantees.
Claude (your API key) — the evaluation conversation, including the portfolio data the model requests through its tools, is sent to Anthropic's API under your own account and is governed by Anthropic's Privacy Policy and your agreement with Anthropic. The developer of Appcrest is not a party to that traffic and cannot see it.

Widgets and notifications

The home-screen widgets read a small aggregate snapshot the app shares with them locally: app names, stages, seven-day totals, sparklines, and recent win text — never credentials and never raw report rows. Notifications are generated locally on your device, are optional, and contain no credentials or report rows. There is no push server.

What we do not collect

No account, email address, name, or profile.
No contacts, photos, microphone, camera, or location data.
No advertising identifier (IDFA) and no ad SDKs.
No third-party analytics, attribution, or tracking SDKs.
No cross-app or cross-website tracking.
No sale or sharing of data with anyone — there is nothing to sell.

Children

Appcrest is a professional tool for Apple developers and is not directed at children. It collects no data from anyone, children included.

Changes

If a future version changes any of the above — a new data flow, a new provider — this policy will be updated first, and the effective date at the top will change. Material changes will also be called out in the App Store release notes.

Contact

Questions about privacy or your data: tyler@tylerfit.ch.