Privacy

AppsOut ("we") runs this website and the advertising and app market research service on it. This policy covers the personal data of people who visit the site or create an account.

Account: your email, an optional name, a salted scrypt hash of your password (never the password itself), your plan and trial dates, your theme and language preferences and when you were last active, recorded at most once an hour.

Sessions and API keys: a hash of each session token and API key, never the raw value, plus API usage counts per key for credit limits.

Your work in the product: watchlists, collections and notes, saved searches, tracked keywords, feedback you send and our replies, alerts about your watched apps and whether you want them by email, and AI usage counts (which feature, how many tokens) for limits and cost.

Billing: subscription status, plan, amounts, dates and invoice links that Dodo Payments sends us. We never receive or store card numbers.

Contact form: the email and message you send.

Security: your IP address, held in rate-limit counters for up to a day to slow down password guessing and spam, and an audit log of admin, billing and promo actions.

We do not use advertising or analytics trackers, and we do not sell or rent personal data. We set two cookies: a session cookie (HttpOnly, SameSite=Lax) that keeps you signed in for up to 30 days, and a language cookie that remembers the language you chose. Your theme choice is kept in your browser's local storage.

The app data in the product (store listings, public reviews, ad library entries, public videos) is published by app stores and ad platforms; it is about apps and advertisers, not about you as a user of this site.

To provide the service you signed up for (contract): your account, your saved work and the API.

To bill you (contract and legal obligation): subscription state and invoices, kept as long as tax law requires.

To keep the service safe (legitimate interest): rate limits, audit logs and abuse prevention.

To answer you (legitimate interest): contact messages and feedback.

Dodo Payments acts as merchant of record: they take the payment, handle tax and send invoices, under their own privacy policy.

Our hosting provider stores the database and files on our behalf.

Anthropic processes the text you type into plain-language search, public app reviews when you ask for review insights, and our own public page text when we translate the website. Your email and account details are not sent.

Nothing else receives your personal data.

Account data stays while your account exists. Sessions expire after 30 days. Rate-limit counters are cleared within about a day. When you delete your account we remove your account and saved work; billing records are kept for as long as tax law requires, and audit entries keep only your account ID.

You can ask to see, correct, export or delete your data, or object to how we use it. Send the request through the contact form from the email on your account so we can verify it is you. You can also complain to your local data protection authority.

If this policy changes in a way that matters, we will update the date above and tell account holders by email before it takes effect.