Privacy Policy

AppWatch (appwatch.dev) is a service operated by Roberto Anguita Martín ("we", "us", "our"). This policy applies to the AppWatch website and its official iOS and Android applications.

• Account data: email address and name provided at registration.
• Store configuration: app identifiers (package names, Steam app IDs) and API credentials you provide to connect your developer accounts. Credentials are stored encrypted (AES-256-GCM).
• App metrics: ratings, download counts, crash rates, ANR rates, review text, and other public or Steamworks/Play Console data fetched on your behalf.
• Alert configuration: thresholds and optional webhook URLs you set.
• Sign-up source: if you arrive through a link of one of our campaigns (for example from a social network), the campaign tags in that link (source, medium, campaign, content), the page where your visit began and the website that sent you are saved with your account when you register, to know which campaigns work. Nothing is stored on your device for this: the tags travel in the page addresses until you sign up.
• Crash and error reports: when the mobile apps fail, they send a report to our server and to Firebase Crashlytics (Google) so we can fix the problem: the app version, the operating system version, the device model, the screen where it happened and the technical trace of the error. Reports do not include your content (such as store data, app names, reviews or credentials) and are cleaned of e-mail addresses and tokens before they are saved. On our server they may be linked to your account to help us follow up a problem, and they are deleted after 60 days.
• Usage data: standard server logs (IP address, timestamp, HTTP method/path). We do not use third-party analytics or advertising SDKs in the mobile apps; the only third-party SDK is Firebase Crashlytics, described above.

• To provide the AppWatch service: fetching metrics, sending alert emails, and displaying dashboards.
• To authenticate you and keep your session secure.
• To send transactional emails (alerts, weekly digest, account verification). You can disable digest and alert emails in Settings.
• To improve the service based on aggregated, anonymised usage patterns.

We do not sell your data. We do not use your data for advertising.

We share data only with the following sub-processors, strictly to operate the service:

• Resend — transactional email delivery.
• Google Cloud Storage — Play Console report exports (your own data, accessed with your credentials).
• Google (Firebase Crashlytics) — crash reports from the mobile apps (see section 2).
• Hetzner / hosting provider — server infrastructure.

No data is shared with any other third party without your explicit consent.

Snapshot data (metrics history) is retained for as long as your account is active. You can delete your account and all associated data at any time from Settings → Account → Close my account. Your data is permanently deleted 30 days after you close it (see section 6). Crash and error reports are kept on our server for 60 days.

You can request deletion of your account and all associated data at any time:

1. Log in at appwatch.dev
2. Go to Settings → Close my account
3. Confirm. Your account is closed immediately and we stop sending e-mails and scanning your apps
4. If you change your mind, sign in again within 30 days and the account is restored. If you do not, everything is deleted

The following data is permanently deleted 30 days after you close your account:

• Account credentials (name, email, password hash)
• Store configurations and API credentials
• All snapshot and metrics history
• Alert configurations

If you prefer to request deletion by email, contact us at info@appwatch.dev with the subject "Delete my account" and we will delete it immediately, without the 30-day waiting period.

API credentials and private keys are encrypted at rest with AES-256-GCM. Authentication tokens are short-lived JWTs transmitted over HTTPS. We follow industry-standard security practices and review them regularly.

If you are in the European Economic Area you have the right to:

• Access the personal data we hold about you.
• Request correction or deletion of your data.
• Object to or restrict processing.
• Data portability.

To exercise any of these rights, email us at roberto.anguitamartin@gmail.com. We will respond within 30 days.

The website uses a single session cookie for authentication. No tracking or advertising cookies are set. The mobile apps do not use cookies.

AppWatch is intended for developers aged 16 and over. We do not knowingly collect personal data from children under 16.

We may update this policy occasionally. When we do, we will update the date at the top of this page and, for material changes, notify you by email.

Questions or requests: roberto.anguitamartin@gmail.com