Privacy

Privacy policy

Effective October 29, 2026

AppStatus Live (“the app”) is made by a2ra-ms (“we”). The app helps developers monitor their own App Store Connect and Google Play accounts. This policy explains what the app stores, what our server stores, and why.

In short: no account or sign-up, no ads, no analytics or tracking. To send push alerts, our server keeps your read-only key encrypted and checks your account for changes. Write keys never leave your phone. You can delete everything from Settings → Delete all data.

On your device

API keys: your App Store Connect keys and Google Play service account files, in the iOS Keychain or encrypted with the Android Keystore. Write keys require Face ID, your passcode or screen lock for every use.
Cached data: your app list, recent feed items, reviews, ratings and sales figures, so the app opens quickly.
Settings: your alert choices, linked apps, vendor number, Play package names and reports bucket.

The app talks directly to Apple (App Store Connect API, public App Store lookup) and Google (Google Play Developer API, Play Developer Reporting API, Cloud Storage for your reports) using your own keys.

On our server

To check your accounts and send push notifications while the app is closed, the app registers with our server at api.appstatus.live. The server stores:

Data	Why	Kept
A random device ID and a device token (no name, email or Apple/Google account)	To recognize your device	Until you delete it
Push token, locale and time zone	To deliver notifications	Until you delete it
Alert settings, plan (number of apps covered, Google Play on or off) and Play package names you entered	To check the same apps the app shows and send only the alerts you chose	Until you delete it
Your read App Store Connect key and view-only Google Play service account, encrypted	To check your accounts for changes	Until you remove the key or delete all data
The latest status of your apps (versions, builds, recent reviews and tester feedback, releases) and the events derived from it	To detect changes and show the same feed on your devices	Events: 7 days. Status: until you remove the key
Public App Store ratings for your apps	To alert you about new ratings and show them in Stats	While an account tracks the app, then 30 days

How your keys are protected

Before upload, the app encrypts the key with a random AES-256-GCM key, which it encrypts with an RSA-4096 public key held in AWS Key Management Service (KMS). The matching private key never leaves KMS.
On the server the key is stored encrypted with a separate KMS key and bound to your account record. Only the job that checks for changes is allowed to decrypt it, and only in memory. Keys and request contents are never written to logs.
The server only reads from Apple and Google. It never replies to reviews or changes releases; those actions use your write key on your phone.

Service providers

Amazon Web Services (United States, us-east-1) hosts the server, database and encryption keys.
Apple Push Notification service and Google Firebase Cloud Messaging deliver notifications. They receive your push token and the notification text (for example “FlightDeck: In Review”).
Apple and Google receive API requests made with your keys, as with any App Store Connect or Play Console tool.

We don't sell or share your data, use it for advertising, or combine it with other data. The app contains no analytics or advertising SDKs.

Purchases

AppStatus Live Pro is sold through Apple. We don't receive your payment details. The app tells our server only how many apps your plan covers and whether it includes Google Play.

Deleting your data

Remove a key in Settings: the encrypted copy on our server is deleted.
Settings → Delete all data: deletes everything on your device and your device record and keys on our server. When no other device uses the same key, its stored status and events are deleted too (events expire within 7 days regardless).
Also revoke the keys in App Store Connect and Google Cloud if you no longer use them.

You can also email us to ask what we hold or to delete it.

Children

AppStatus Live is a tool for app developers and isn't directed at children.

Changes

If this policy changes, we'll update this page and the date above, and mention significant changes in the app's release notes.

Contact

a2ra-ms · info@a2ra-ms.com · www.a2ra-ms.com