Privacy Policy
This policy explains how Geddes Ventures LLC ("we") handles personal information for Gap in Your App. We collect as little as we can and we do not sell or share your personal information for advertising.
What we collect
- Account details: your email, your name if you add it, and your sign-in method (email link or Google).
- Billing details: handled by Stripe. We receive your billing name, country and the last four digits of your card, never the full number.
- App data: the App Store apps you add and the public data about them (listing, ratings, reviews, search positions), plus data Apple returns through the key you connect (listing text, reviews, download reports).
- Keys and tokens: your App Store Connect key and any site publishing token, stored encrypted. See Security.
- Consent records: which documents you agreed to, when, the version, and the IP address and browser used, as the law requires us to keep.
- Free looks: the App Store link you paste and a one-way hash of your IP address, used only to limit abuse.
- Email activity: which emails we sent you and whether they were delivered.
We do not use advertising cookies or tracking pixels. The dashboard stores your sign-in session in your browser so you stay signed in.
Why we use it
- To provide the Service you asked for (contract).
- To bill you and keep records (contract and legal obligation).
- To keep the Service secure and prevent abuse (legitimate interest).
- To send account emails, such as receipts, reminders and your weekly report (contract).
- To send product tips, only if you opt in (consent). You can opt out anytime from any of those emails or in Settings.
Who we share it with
Only the providers we need to run the Service, under contracts that limit their use of your data:
| Provider | What they do | Location |
|---|---|---|
| Supabase | Database, authentication, encrypted key storage and servers | United States |
| Stripe | Payments and invoices | United States |
| Resend | Sending email | United States |
| Cloudflare | Website hosting and network | Global |
| Anthropic | AI model for analysis and writing (Claude) | United States |
| OpenAI | AI assistant checks (ChatGPT), AI Search only | United States |
| Perplexity | AI assistant checks, AI Search only | United States |
| AI assistant checks (Gemini), AI Search only; Google sign-in if you choose it | United States | |
| Apple | App Store Connect, at your direction | United States |
When AI models process your app data, we send only what the task needs (for example, public reviews and listing text). We use the providers' paid business APIs, whose terms say they do not train their models on data sent through them.
We disclose information if the law requires it, or to protect our rights or someone's safety. If the business is sold, your data moves with it under this policy, and we will tell you.
How long we keep it
- Account, app and report data: while your account is open. When you delete your account, we delete it within 30 days, except billing records we must keep for tax law (usually 7 years, held by Stripe).
- Free looks that never become an account: 30 days.
- Forum posts and rival app reviews we collect for analysis: 1 year.
- Your activity feed: 2 years.
- Email send records: 13 months.
Your rights
You can access, download, correct or delete your data. Most of this is self-serve in Settings: download everything as one file, edit your profile, or delete your account. For anything else, email [email protected]. We respond within 30 days and will not treat you differently for using these rights.
California residents
Under the CCPA as amended by the CPRA, you have the right to know what personal information we collect, use and disclose; to delete it; to correct it; and to opt out of its sale or sharing. We do not sell or share personal information for cross-context behavioral advertising, and we do not use sensitive personal information to infer characteristics about you. The categories we collect are listed above: identifiers, commercial information, internet activity related to the Service, and business information about your apps. You may use an authorized agent; we may ask them to prove they act for you.
Visitors from the EU, UK and Switzerland
We process data on the legal bases listed above. Data is stored in the United States. Where it is transferred, we rely on our providers' standard contractual clauses. You may complain to your local data protection authority. Business customers can review our Data Processing Addendum.
Children
The Service is for adults running app businesses. We do not knowingly collect data from children under 16.
Changes
If we change this policy in a meaningful way, we email account holders before it takes effect. The date at the top shows the current version.
Contact
Geddes Ventures LLC, Westlake Village, California. [email protected].