Security
To change your listing and reply to reviews, we need an App Store Connect API key. Here is exactly how we handle it.
What you give us
One Team API key: an Issuer ID, a Key ID and a .p8 file. Never your Apple ID, password or two-factor codes.
Which access to choose
| Key access | What it lets us do |
|---|---|
| App Manager | Read your app and stage listing changes you approve. No review replies, no download numbers. |
| Customer Support | Post review replies you approve. Can be added alongside App Manager. |
| Admin | All of the above, plus downloads by source. Apple only lets Admin keys turn on download reports. |
Apple's keys apply to every app on your team. An Admin key can technically do more than we need. If that concerns you, use App Manager and you lose only download numbers and review replies.
How we store it
- The .p8 file is encrypted in Supabase Vault the moment it arrives. It is never stored in plain text, never logged, and never shown again, including to us in our dashboards.
- Only our server reads it, and only to call Apple for the apps in your workspace.
- Short-lived tokens (15 minutes) are signed from it for each session with Apple.
What we do with it
- Read your app, versions, listing text and reviews.
- Stage name, subtitle and keyword changes on a version you are preparing, after you approve them.
- Update promotional text, after you approve it.
- Post review replies, after you approve them (or automatically for the star ratings you choose).
- Request and read App Analytics reports for downloads, if the key allows it.
We never submit an app for review, change prices, touch in-app purchases, invite users, or access TestFlight. Every action we take is recorded in your activity feed with who approved it.
How to revoke it
- In the dashboard: Settings, Connections, Disconnect. We delete the stored key immediately.
- In App Store Connect: Users and Access, Integrations, App Store Connect API, then revoke the key. It stops working everywhere at once.
The rest of the system
- Every workspace is isolated at the database level with row-level security. One customer can never read another's data.
- Sign-in uses email links or Google. We never store passwords.
- All traffic is encrypted in transit. Payments are handled by Stripe; we never see card numbers.
- You can download everything we hold about you, or delete your account, from Settings.
Report a problem
Found a security issue? Email [email protected] with the word Security in the subject. We read every report.