Privacy

Approbo holds two kinds of data: the account you created, and public review text collected from app stores — plus the request log any web server keeps. This page says what each is and how long it lives.

Your account

A name, an email address, a hashed password unless you sign in with Google, and the addresses you told us to send alerts to. Webhook URLs are encrypted at rest because a webhook URL is a credential — whoever holds it can post as us into the channel behind it.

If you sign in with Google, Google tells us your name, your email address and a number that identifies your Google account. We keep that number, so the next sign-in finds you, and nothing else from Google: no access to your mail, contacts or files, and no Google token is stored. A cookie that lasts ten minutes, and only on the sign-in path, ties Google’s answer to the browser that asked for it.

When you invite somebody, we store the address you typed and send one email to it. An invitation keeps that address until it is accepted or revoked, and is deleted a week after it expires. Each signed-in browser is a session we list under Settings, with the time it was last used, so you can end the ones you do not recognise.

Approbo never asks for App Store Connect or Play Console access. There is no field for it, no OAuth flow, and nothing to revoke.

Review data

Reviews are public documents their authors published in a shop window. We store the rating, the text, the display name attached to it, the storefront, the app version and the timestamp. We do not store store account identifiers, avatars, device details, or anything about the reader’s location beyond the storefront the review was filed in.

Reviews past your plan’s retention window are deleted nightly, beginning 14 days after a change of plan. Daily rating aggregates — counts and averages, with no text and no names — are kept for as long as the account exists.

The free reader

Each read is stored — the listing, the public reviews it fetched and what they added up to — so a shared link does not re-read the store for every visitor, and it is deleted after 30 days. The read is stored without anything about who asked: no account, no cookie, and no IP address beside it. Rate limiting recognises a caller for sixty seconds and then forgets them. Opening the reader is still a request to this site, and is logged like any other (see below).

Server logs

The web server writes a line for every request to this site: the IP address it came from, the time, the address asked for and the browser’s user agent. It is used to keep the service running and to look into abuse, it is not joined to anything else, and it is overwritten as it rotates — by size, not by date, so how long a line lasts depends on how busy the site is.

Third parties

Outbound email is sent through Resend. Alerts you route to Slack, Microsoft Teams, Discord, Google Chat or your own endpoint are delivered to the address you configured. Payments are taken by Whop, which never shares a card number with us. Signing in with Google goes through Google, and only when you choose it. Errors may be reported to Sentry. Nothing else leaves this system.

If you connect an assistant such as Claude or ChatGPT over MCP, what it reads from your account is sent to that assistant with the key you gave it, and is then governed by your agreement with its provider. Revoking the key under Settings stops it at once.

Deleting an account

From Settings → Workspace, with your password (an account that signs in with Google sets one first, from the emailed link under Settings → Security). If you are the only person in the workspace, that deletes the whole organization: its users, apps, reviews, alerts, channels, reports and keys. It cannot be undone and the review history does not come back. If other people are in it, only your own login is removed and the workspace carries on. A paid plan has to be cancelled first, so nothing keeps billing an account that no longer exists.

Or write to [email protected] and a person will do it for you.

Contact

Questions about this page go to [email protected], and a person answers.