Privacy Policy

Introduction

This Privacy Policy describes how Rivolu LLC (“we,” “us,” or “our”) handles information in connection with the AppDesk application (“Application”). AppDesk is an application that interfaces with Apple's App Store Connect API and the Apple Ads API to display app analytics, sales data, download metrics, revenue information, customer reviews, App Store chart rankings, and advertising campaign spend.

By downloading, installing, or using AppDesk, you agree to the practices described in this Privacy Policy.

Data We Do Not Collect

AppDesk does not collect, transmit, or store any of the following on servers operated by Rivolu LLC:

• Your App Store Connect API credentials (Issuer ID, Key ID, Private Key)
• Your Apple Ads API credentials (Client ID, Team ID, Key ID, Private Key)
• Your app analytics, sales data, or revenue information
• Your advertising campaign spend, keyword performance, or ad attribution data
• Download metrics or financial reports
• Customer reviews or ratings
• Payment, billing, or Apple Account information
• Personal information, usage patterns, or behavioral data
• Device identifiers or telemetry

Data Stored Locally on Your Device

AppDesk retrieves data from Apple's App Store Connect API and Apple Ads API and stores it entirely on your device. The following data is stored locally:

API Credentials

Your App Store Connect API credentials (Issuer ID, Key ID, and Private Key) and, if you connect Apple Ads, your Apple Ads API credentials (Client ID, Team ID, Key ID, and Private Key) are stored securely in the operating system's Keychain (macOS Keychain or iOS Keychain depending on your device). They are never transmitted to Rivolu LLC or any third party. The Keychain provides system-level encryption and access control to protect your credentials.

App Store Connect Data

Analytics, sales figures, download counts, revenue data, and customer reviews retrieved from App Store Connect are cached locally on your device to provide a responsive experience. This data remains on your device and is not sent to any external server operated by us.

Apple Ads Data

If you connect an Apple Ads account, daily campaign spend, taps, installs, and keyword-level performance retrieved from the Apple Ads API are cached locally on your device and compared against your App Store Connect figures on device. Removing your Apple Ads credentials in Settings deletes all downloaded ad spend data; your App Store Connect data is unaffected.

Chart Rankings

App Store chart positions and the apps you star for tracking are cached locally on your device. Chart positions are public App Store data — see the App Rankings Service below for how they are retrieved.

Application Preferences

Your app settings and preferences are stored locally using standard Apple platform storage mechanisms.

Third-Party Services

Apple App Store Connect API

AppDesk communicates directly with Apple's App Store Connect API using your credentials to retrieve your app data. This communication occurs between your device and Apple's servers. We do not act as an intermediary or proxy. Your use of the App Store Connect API is subject to Apple's own privacy policy and terms of service.

Apple Ads API

If you choose to connect an Apple Ads account, AppDesk communicates directly with Apple's Apple Ads API using your Apple Ads API client credentials to retrieve your campaign spend and keyword performance. This communication occurs between your device and Apple's servers. We do not act as an intermediary or proxy, and we never receive your campaign data. Apple Ads is optional — AppDesk works fully without it. Your use of the Apple Ads API is subject to Apple's own privacy policy and terms of service.

App Rankings Service (appdesk.dev)

The App Rankings feature retrieves public App Store chart positions from a Rivolu-operated service at appdesk.dev, which collects the published App Store Top 100 charts across storefronts and categories on a daily basis. AppDesk requests these positions in two ways: by chart selection (storefront, platform, chart type, and category), and by App Store app ID for the apps you track or star. No App Store Connect or Apple Ads credentials, sales figures, revenue data, or review content are transmitted in these requests. An App Store app ID is a public identifier that appears in every App Store listing URL. Standard HTTP request metadata such as your IP address may be logged transiently by our hosting provider for operational purposes but is not associated with you or your AppDesk usage.

Apple Intelligence (On-Device AI)

AppDesk uses Apple's Foundation Models (Apple Intelligence) to power AI-assisted features: generating suggested responses to customer reviews, categorizing reviews, and writing the AI Insights shown on the Charts, Subscriptions, Reviews, and Rankings tabs. Generating an insight involves analyzing your recent sales figures, revenue, subscriber counts, chart positions, and review text. All of this is processed entirely on your device using Apple's on-device machine learning framework, works offline, and is never sent to Rivolu LLC or any third party. Where Apple Intelligence is unavailable on your device, AppDesk falls back to a built-in rules-based analysis that also runs entirely on device.

Apple App Store (Distribution and In-App Purchases)

AppDesk is distributed through the Apple App Store. Apple may collect information related to your purchase and download in accordance with Apple's privacy policy. We receive only aggregated, anonymized sales data from Apple and cannot identify individual purchasers.

Currency Exchange Rate Service

AppDesk fetches historical currency exchange rates from a Rivolu-operated service to convert sales figures into your chosen display currency. These requests contain only the currency code and month (for example, “USD, 2025-01”). No personal data, device identifiers, App Store Connect credentials, or sales figures are transmitted in these requests. Standard HTTP request metadata such as your IP address may be logged transiently by our hosting provider for operational purposes but is not associated with you or your AppDesk usage.

In-App Purchases and Subscriptions

AppDesk offers both a one-time lifetime purchase and auto-renewing subscriptions (monthly and annual) to unlock AppDesk Pro features. All purchases are processed through Apple's In-App Purchase system.

• Payment Processing: Apple handles all payment, subscription lifecycle, and receipt validation. Rivolu LLC never receives or stores your payment method, credit card information, or Apple Account identifier.
• Entitlement Verification: The Application verifies your purchase entitlement locally on your device using Apple's StoreKit framework. No entitlement data is sent to Rivolu LLC.
• Aggregate Statistics: Apple provides Rivolu LLC with anonymized aggregate sales statistics through App Store Connect. These cannot be used to identify individual purchasers.
• Managing Subscriptions: You can view, cancel, or modify subscriptions at any time in Settings → [Your Name] → Subscriptions (iPhone/iPad) or System Settings → [Your Name] → Media & Purchases → Manage Subscriptions (Mac).

Notifications

AppDesk may ask for permission to send local notifications when a new sales report or user review is synced. These notifications are scheduled locally by your device using Apple's UserNotifications framework — no notification content, tokens, or delivery data is sent to Rivolu LLC or any third-party notification service. You can enable or disable these notifications at any time in AppDesk's General settings, or revoke notification permission in System Settings.

Network Communication

AppDesk makes network requests only in the following circumstances:

• App Store Connect API: To fetch your app analytics, sales data, reviews, and other information from Apple's servers using your API credentials.
• Apple Ads API: If you connect an Apple Ads account, to fetch your campaign spend and keyword performance from Apple's servers using your Apple Ads API credentials.
• App Rankings Service: To retrieve public App Store chart positions by chart selection or App Store app ID. See the Third-Party Services section for details on what is (and is not) transmitted.
• Currency Exchange Rate Service: To retrieve historical currency exchange rates used to convert sales figures into your chosen display currency. See the Third-Party Services section for details on what is (and is not) transmitted.
• In-App Purchases: Apple's StoreKit framework communicates with Apple's servers to process purchases, validate receipts, and manage subscriptions. This communication is between your device and Apple.
• Software Updates: The Application may check for updates through the Apple App Store's standard update mechanism.

Data Security

We take the security of your data seriously. AppDesk employs the following measures:

• API credentials are stored in the Apple Keychain with system-level encryption
• All network communication uses encrypted HTTPS connections
• The Application runs in a sandboxed environment as required by the App Store
• No personal data, credentials, or App Store Connect data is transmitted to servers operated by Rivolu LLC

Data Retention and Deletion

Since all personal data is stored locally on your device, you have full control over it:

• You can remove your API credentials from the Keychain at any time via the Application settings or the system Keychain tools
• Cached data can be cleared from within the Application
• Removing your Apple Ads credentials in the Application settings also deletes all downloaded ad spend data; your App Store Connect data is unaffected
• Uninstalling AppDesk removes all locally-stored data including credentials, cached App Store Connect and Apple Ads data, cached chart rankings, and application preferences

Children's Privacy

AppDesk is a professional tool intended for app developers and is not directed at children under 18. We do not knowingly collect personal information from children. As described above, AppDesk does not collect personal information from any users.

Your Rights

Because AppDesk does not collect your personal data, credentials, or App Store Connect data on remote servers, most traditional data subject rights (access, deletion, portability) are inherently satisfied — your data never leaves your device and remains under your control at all times.

If you have questions about how your data is handled, you may contact us at the address below.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last updated” date. Your continued use of AppDesk after any changes constitutes your acceptance of the updated policy.

We encourage you to review this Privacy Policy periodically.

Contact Us

If you have any questions about this Privacy Policy, please contact us at: