This policy covers the Appsium App Store Optimization portal: the website at appsium.io and the web application at app.appsium.io (together, the “Service”). Our mobile apps are covered by a separate policy at appsium.co/privacy.
1. Who we are
The Service is operated by Berkay Öçgüder, trading as Appsium, in Türkiye (“Appsium”, “we”, “us”). We are the data controller for the personal data described here. For any privacy question or request, write to support@appsium.co.
2. Data we collect
Account data
Your email address, display name and sign-in identifiers when you create an account with email and password, Google or Apple. Passwords are handled by Firebase Authentication; we never see or store them.
Workspace content
Everything you create or upload in the portal: app briefs, metadata drafts, keywords, competitor lists, screenshots, logos, images and pre-review answers.
Connected credentials
If you choose to connect them, your App Store Connect API key (issuer ID, key ID and private key) and Apple Ads API credentials. We store these encrypted with keys managed in Google Cloud KMS and only decrypt them on our servers to perform the actions you request.
Data from Apple
When you connect App Store Connect we read the apps, versions, localizations, metadata and screenshots that your key gives access to. We also use public App Store data (search results, store pages, ratings and reviews) to power keyword, competitor and search-simulator features. Some public searches are sent directly from your browser to Apple's iTunes Search API, which means Apple receives your IP address for those requests.
Billing and usage data
Your plan, credit balance and a ledger of the actions that consumed credits. When paid plans are offered, payments are processed by our payment provider acting as merchant of record; we receive your plan, billing country and transaction status, but never your full card details.
Technical data
IP address, browser type, request logs and error reports needed to run, secure and rate-limit the Service.
3. How we use your data
- To provide the Service: create your account, store your workspace and run the features you request (performance of a contract).
- To act on your behalf with Apple when you ask us to read from or write to App Store Connect or Apple Ads (performance of a contract).
- To meter credits, enforce plan limits and prevent abuse (legitimate interest).
- To keep the Service secure, debug problems and improve reliability (legitimate interest).
- To send essential emails such as verification, password reset and account notices (performance of a contract).
- To meet legal, tax and accounting obligations (legal obligation).
We do not sell your personal data and we do not use your workspace content to train AI models.
4. AI processing
AI features send the relevant parts of your workspace — for example your brief, metadata, keywords, competitor information or images — to our AI providers to generate the output you asked for. We currently use OpenAI and Google (Gemini on Google Cloud). These providers process the data under their API terms; their own retention and training policies for API data apply. Only send content you are allowed to share, and review AI output before you publish it.
5. Service providers
- Google Cloud and Firebase — hosting, database, file storage, encryption keys and authentication. Our infrastructure runs in the EU (europe-west1, Belgium).
- OpenAI and Google — AI text and image generation.
- Apple — App Store Connect, Apple Ads and public App Store data, as directed by you.
- Google Workspace — support email.
- Payment provider — checkout, subscriptions, invoicing and tax, when paid plans are available.
6. International transfers
Some providers process data outside Türkiye and the European Economic Area, including in the United States. Where required, we rely on appropriate safeguards such as standard contractual clauses and the transfer mechanisms permitted under Turkish data protection law (KVKK) and the GDPR.
7. Retention and deletion
We keep your account and workspace content while your account is active. You can delete individual items in the portal at any time. If you ask us to delete your account, we delete your account data, workspace content and stored credentials within 30 days, except for records we must keep by law (for example billing records). Backups and logs are removed on their normal rotation cycle.
You can disconnect your App Store Connect or Apple Ads credentials at any time; we then delete the stored, encrypted keys.
8. Security
Data is encrypted in transit (TLS) and at rest. App Store Connect keys are protected with envelope encryption using Google Cloud KMS. Access to production systems is limited and logged. No system is perfectly secure; if we learn of a breach affecting your data we will notify you and the authorities as required by law.
9. Cookies and local storage
The appsium.io website does not use advertising or analytics cookies. The portal uses your browser's local storage and strictly necessary cookies to keep you signed in. Fonts are loaded from Google Fonts, which receives your IP address when the page loads.
10. Your rights
Depending on where you live — including under KVKK (Article 11) and the GDPR — you may have the right to access, correct, delete, restrict or port your data, to object to processing, and to withdraw consent. Email support@appsium.co and we will respond within the time required by law. You may also complain to your data protection authority, such as the Turkish Personal Data Protection Authority (KVKK) or your local EU authority.
11. Children
The Service is a professional tool for app developers and is not intended for anyone under 18. We do not knowingly collect data from children.
12. Changes to this policy
We may update this policy as the Service changes. We will change the date at the top of this page and, for material changes, notify you by email or in the portal before they take effect.