How a number gets on this site

Verification starts with the founder granting us the narrowest credential their provider offers. We test it immediately, and only store it if the test call succeeds — so a key that does not work is never saved.

Credentials are encrypted with AES-256-GCM using a key held only by the server, then written to a table that no browser session can read. The founders who add them cannot read them back either — reconnecting always means entering the credential again.

A figure that was true last quarter is not verification. Every active connection is re-read daily and written to an append-only history, which is what draws the chart on each app page. Profiles show the last sync time so you can judge freshness yourself.

App Store Connect publishes sales data a day behind, so apps verified through that route show a data as of date rather than today's.

An app billing through both in-app purchase and a web checkout can connect both. Each provider is stored separately and summed once per day, so connecting a second source cannot inflate a figure.

Verification confirms that a provider account reports this revenue. It does not audit the business behind it. Specifically, it cannot tell you:

• Whether refunds and chargebacks have been fully deducted — that depends on how the provider reports.
• Whether the connected account belongs solely to the app shown, if a founder ships several apps under one provider project.
• Profit. Every figure here is revenue, before Apple's cut and costs.

We state these limits rather than round them off. If you are buying a business on the strength of a number here, ask for provider access directly.

Superwall is not currently a connectable provider. It issues public SDK keys only, and publishes no API for reading revenue charts, so there is no way for us to verify a figure through it. We would rather list nothing than a badge we cannot stand behind. If that changes, we will add it.