Read-only, and it stays that way

Ascent cannot change your apps, your prices or your account. It reads Apple’s daily reports with a key you can revoke, and deletes what it holds when you leave.

See what we keep

API key · Ascent

Key ID 7QK4M2XN9R

Read-only

App Store Connect role

  • Sales and Reports

    Downloads, proceeds, subscriptions

    Required

  • Customer Support

    Read and reply to reviews

    Optional

  • Developer

    Builds and certificates

    Never asked

  • App Manager

    Pricing, metadata, releases

    Never asked

  • Finance

    Banking and tax forms

    Never asked

  • Admin

    Everything, including your team

    Never asked

Key last used

6:52 AM PT

Read 4 reports, changed nothing

One key, one role, and you choose both

Ascent connects with an App Store Connect API key that you create and can revoke. It needs the Sales and Reports role. Replying to reviews adds one more, and only if you want it.

A wider key is turned away
Paste an Admin or App Manager key and setup stops, then asks for a narrower one.
Shown once, never again
The key is encrypted as it arrives. No screen, ours or yours, displays it afterward.
Revocable without us
Revoke it in App Store Connect and the next import simply fails. You get one email saying so.
Read the full post

What we keep, and for how long

Six things, in plain words. If one of them changes, the changelog says so the same day.

Write to security
Your API key
Encrypted with a key held in a separate service from the database. Decrypted in memory for the few seconds each night the importer needs it.
AES-256
Reports
Daily totals from Apple, stored in a US data center in Oregon. Apple’s reports contain no names, emails or device IDs, so neither do we.
Totals only
Reviews and replies
Public reviews and the replies you write, kept while the account is open so last year can be compared with this one.
While open
Payment
Card details go straight to our payment processor. Ascent stores the last four digits and the expiry month, nothing else.
Last 4 digits
People
Two engineers can reach production, both with hardware keys. Support sees a key’s ID, roles and last use, never the key.
2 engineers
Deletion
Disconnect an app and its key is deleted in the same request. Stored reports follow 30 days later, or at once if you ask.
30 days

Before you paste a key

Security questions go to an engineer who can read the code. Expect an answer within one business day.

Email security
Can Ascent change anything in my account?

No. The Sales and Reports role can download reports and nothing else. With Customer Support added it can also post the review replies you write. It cannot edit an app, a price or your team.

Do you see my customers’ data?

No. Apple’s reports are totals by day, product and storefront. Ascent has never received a name, an email address or a device identifier, because Apple does not send them.

Where is everything stored?

In one US data center in Oregon, with encrypted backups in a second in Ohio. Nothing is stored or processed outside the United States.

Do you sell or share what you collect?

No. We publish a few medians across all studios, such as the 11 minutes saved each morning, and never a figure that could be traced to one app.

What if I revoke the key?

The next overnight import fails, Ascent emails you once to say so, and the account waits. Your stored reports stay until you delete them or 30 days after you disconnect.

How do I report a vulnerability?

Write to [email protected]. A person who can read the code replies within one business day, and we credit every report we fix in the changelog.

Connect with a key you can revoke

Create a Sales and Reports key in App Store Connect, paste it once, and the first email arrives at 7:00 AM. Revoke it whenever you like.

Start free Read the full post

Sunday, Sep 13 · 7:00 AM PT

Tidepool

638 downloads

+4%

Proceeds

$227.14

2 new reviews, both five stars