Privacy policy

Last updated November 2, 2026

AppKeep is a marketplace where you buy apps once and we host them for you. This policy explains what we collect, why, and what you can do about it. Questions go to hello@appkeep.io.

What we collect

• Your account: name, email address, a hash of your password (never the password itself) and, if you sign in with Google, your Google account ID, name and email.
• Purchases and plans: what you bought, your hosting plan and its status. Card details go straight to Stripe; we only keep Stripe's customer and subscription IDs.
• Makers: the apps and source code you publish, review results, sales and payout records. Payout and identity details are collected by Stripe, not us.
• Data in your apps: whatever you and your team put into the apps you run. We store it in a private database for each app and process it only to run the app for you.
• Connected accounts: when you connect an account on another service to an app (see Connected accounts below), we store its access token encrypted, plus the account's ID and name, and use them only for the requests that app makes for you.
• Usage: request counts, response times, database reads and writes and storage per app, used for plan limits and your dashboard, plus activity logs for each app.
• Emails we send you: a copy of each account email (sign-in, receipts, usage warnings, invites) so we can see what went out.

Connected accounts

Some apps work with your accounts on other services. PostEasy, for example, publishes the posts you write and schedule. You choose each account to connect, on that service's own sign-in screen, and you can disconnect it at any time. For each one we get only the following, and use it only to do what you ask in the app:

• Facebook: the Pages you pick, their names and IDs, and a token for each, to publish to those Pages and read basic engagement on what you published. We can't see or post to your personal profile.
• Instagram: your professional account's ID and username, to publish the posts, reels and stories you create.
• Threads: your profile's ID and username, to publish your posts and the replies that make up a thread.
• X: your user ID and username, to publish your posts and their images and videos.
• LinkedIn: your member ID, name and profile photo, to publish to your LinkedIn profile.
• TikTok: your account's ID, display name and avatar, and the posting options TikTok offers you, to upload your videos as drafts or publish them with the settings you choose.
• YouTube: your channel's ID and name, to upload the videos you choose to it.
• Google, Slack, GitHub: your account ID and name or email, plus whatever the app's listing says it uses, for the app's requests.

When you publish, the text and media you attach are sent to the service you publish to. We don't use data from connected accounts for advertising, don't sell it, don't use it to train AI models, and don't let people read it except where you ask us to for support, it's needed for security, or the law requires it.

Google and YouTube

AppKeep's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Connecting YouTube uses YouTube API Services: by connecting, you agree to the YouTube Terms of Service, and Google handles your data under the Google Privacy Policy. You can remove AppKeep's access at any time from your Google account's third-party connections.

Removing access

Disconnecting an account in the app or on your AppKeep dashboard deletes its token straight away. You can also remove AppKeep on the service itself: Facebook business integrations, Instagram apps and websites, Threads (Settings → Account → Website permissions), X connected apps, LinkedIn permitted services, TikTok (Settings and privacy → Security → Apps and services) or Google. When Facebook, Instagram or Threads tell us you removed us, we delete those connections automatically. See deleting your data.

Cookies

We use a few cookies that are needed for the site to work: one that keeps you signed in, one that remembers which account (personal or team) you're working in, a short-lived one during Google sign-in, and one that signs you in to the apps you open. Your light or dark theme choice is kept in your browser's local storage. We don't use advertising or tracking cookies.

Who processes it for us

• Cloudflare runs the site and your apps and stores their data.
• Stripe handles payments, subscriptions and maker payouts.
• Resend delivers our emails.
• Google, only if you choose to sign in with Google.
• Meta, X, LinkedIn, TikTok and Google receive what you publish through their APIs, only for the accounts you connect.

We don't sell your data and don't share it with anyone else unless the law requires it.

How long we keep it

We keep your account data while your account exists. App data stays until you delete the app or your account. Connected-account tokens are deleted as soon as you disconnect the account, remove AppKeep on that service, or delete the app. Webhook delivery logs are kept for 30 days. Purchase and payout records are kept as long as tax and accounting rules require.

Your choices

• Export any app's data and download its source from your dashboard at any time.
• Disconnect connected accounts and delete apps from your dashboard.
• Email hello@appkeep.io to see, correct or delete your personal data, or to close your account. We'll answer within 30 days. Deleting your data has the details.

Changes

If we change this policy in a way that matters, we'll email you before it takes effect.