What we read, keep and delete
Every connection is read-only and starts only when the seller chooses it. We read the totals for the one app being sold, keep a signed summary, and discard anything that could be used to get back into your account.
How we handle every integration
- Read-only. We never ask for permission to change anything in your accounts.
- One app. If an account holds several apps, we keep only the one that matches your store link and discard the rest.
- Totals, not people. We store a signed summary of aggregate numbers, never user-level data.
- No saved access. Google sign-in tokens, API keys and private keys are used once and discarded. We do not keep them.
- Signed. Each summary is signed by AppAcquire, so it cannot be edited and an admin can check it is genuine.
Integration by integration
| Integration | What we read | What we keep |
|---|---|---|
| App Store Connect | Twelve monthly sales reports for your app | A signed summary: proceeds and downloads by month. The key is discarded. |
| Stripe | Revenue figures using a restricted read-only key | A signed summary. The key is not stored. |
| RevenueCat | Your public Verified page | The page link and the figures on it. |
| TrustMRR | Your public startup page and its verified revenue | The page link and a signed summary. |
| Firebase Analytics | Active users and new users for the matching app stream (Google sign-in, read-only) | A signed summary of aggregate totals. The Google access is discarded. |
| AdMob (coming soon) | Earnings for the matching app (Google sign-in, read-only) | A signed summary of aggregate totals. The Google access is discarded. |
| Play Console (coming soon) | Play vitals and, if you add them, report files for your app | A signed summary. Report files are not stored. |
Google user data
Our use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. The full details are in our privacy policy.
Removing a connection or your data
- Delete your listing, or your whole account, from your account settings. The signed summaries go with it.
- Revoke Google access any time at myaccount.google.com/permissions.
- Delete an App Store Connect, Stripe or other key in that provider once it says connected. We do not need it again.
Troubleshooting
Do you keep my API key?
No. Keys are used for the single request that reads your numbers and are never stored or logged.
Can you change anything in my accounts?
No. Every connection is read-only.
Related
- How verification works · What the Verified badge needs, which connections count, what buyers see, and what stays seller-reported.
- App Store Connect · Verify an iOS app with a read-only App Store Connect API key: real proceeds and downloads, and proof you own the app.
- Firebase Analytics · Show buyers verified active users by connecting Firebase Analytics with read-only Google sign-in.
Still stuck? Contact us and we will help.