Built so there's nothing to leak.

Last updated 30 July 2026

What AppScope stores

Your Issuer ID, Key ID, Vendor Number and private key are stored in the iOS Keychain with device-only accessibility. They are not written to UserDefaults, files, caches or logs, and are never included in an iCloud or iTunes backup.

What leaves your device

Only requests to Apple. AppScope signs a token locally with your key and calls api.appstoreconnect.apple.com directly. App artwork is fetched from Apple's public iTunes lookup endpoint, which receives only an app's public App Store ID.

What AppScope does not do

There is no AppScope server and no AppScope account. No analytics SDK, no crash reporter, no advertising identifier, no tracking of any kind. Nothing about you or your apps is collected, profiled or sold.

Cached data

Sales reports and dashboard snapshots are cached on device so the app opens instantly and works offline. If you add a widget, a small summary of the figures already on your dashboard is written to a container the widget can read, so it can draw without going online. All of it holds sales figures only — never credentials — and is excluded from backups. Disconnecting deletes every part of it along with your key.

Your key's permissions

AppScope only ever reads. It requests your app list and your sales reports. It cannot submit builds, change metadata, or modify anything in your account. A key with the Finance or Sales role is enough.

Deleting everything

Settings → Disconnect removes your key from the Keychain and deletes every cached report. Deleting the app removes everything AppScope has stored.