Privacy
Last updated 18 August 2026
IosAppMRR.com holds as little about you as the site can function on. This page describes what is actually stored, not what a template says might be.
What we store
Account
The email address and username your X or Google account hands over at sign-in. Authentication runs on Supabase Auth; we never see or store a password, because there isn't one — sign-in is X or Google OAuth.
Profile
A handle, and optionally a display name, avatar URL, bio, website, and X handle. All of it is published on your founder page, and all of it is optional except the handle.
Apps you submit
The App Store link and the details Apple returns for it, plus any app insights you choose to write. This is public by design — it is the point of the site.
Provider credentials
The read-only key you connect, encrypted before it reaches the database. See below.
Revenue figures
Daily totals read from your provider: monthly recurring revenue, active subscriptions, trials, and trailing revenue. Never individual customers, transactions, or payouts.
What we don't store
There are no third-party analytics or advertising scripts on this site, so there is no cross-site tracking to opt out of. Page popularity is counted as a single daily total per app — a number incremented per view, with no visitor identifier, IP address, or device record attached. We cannot tell which pages any individual visited, and neither can anyone who obtains the database.
Provider credentials
The key you connect is encrypted with AES-256-GCM before it is written, using a key held in the server environment and never in the database. A stolen database dump does not yield working credentials. Keys are decrypted only in memory, only to make the scheduled read, and are never returned to a browser — not even yours. Disconnecting a provider deletes the stored credential outright.
We ask for the narrowest key each provider offers: a RevenueCat key scoped to read metrics, or an App Store Connect key limited to finance reports. Neither can move money, issue refunds, or change your account.
Who else sees it
Data is stored with Supabase and the site is served by Vercel; both process data on our behalf as infrastructure providers. Revenue is read from the provider you connect. App Store metadata comes from Apple's public lookup API, which involves sending them an app ID and nothing about you. We do not sell data, and we do not share it with anyone else.
Your choices
You can edit or clear your profile and insights at any time from the dashboard, disconnect a provider to stop revenue being read, or ask us to delete your account entirely. Deleting an account removes your profile, your apps, and their revenue history. Reach us at hello@example.com.
Cookies
One cookie, set by Supabase Auth to keep you signed in. It is not used for tracking, and signing out clears it. Signed-out visitors are not given a cookie at all.
Questions about any of this, or about how a specific number was produced, are answered on the verification page or by email.