Skip to content
asorocket

Privacy

Privacy notice

Last updated October 5, 2026.

asorocket is made by Gava Group AB, a company registered in Sweden with the number 559427-5207, located at Ladugårdsgatan 6, 174 64 Sundbyberg, Sweden, which is responsible for the personal data described here.

The asorocket app

The desktop app stores everything it collects in a database on your own computer. There is no asorocket account, and the app sends nothing about you or your apps to us.

The app connects directly to these services, and only for the purposes listed:

  • Apple’s public App Store endpoints, to read rankings, charts, app details, search suggestions and reviews.
  • Google Play’s public data endpoint, the one its own website reads, if you follow Google Play apps: for rankings, charts, app details, search suggestions and reviews. Requests are sent without cookies.
  • App Store Connect and Apple Ads, only if you connect them, using your own keys. asorocket writes to App Store Connect only when you publish a draft or send a review reply yourself, and only reads from Apple Ads.
  • Google Play Console, only if you connect it, with a service account you create. asorocket signs in to Google as that service account, reads your listing, recent reviews and the statistics reports Google exports for your apps, and writes only when you publish a draft or send a reply yourself.
  • RevenueCat, only if you connect it, with a secret key you create with read permissions. asorocket reads your projects’ apps and daily figures (revenue, subscriptions, trials) and saves those on your computer. Your customers are read only when you open the Customers view; they are shown, never saved, and never sent anywhere else. asorocket writes nothing to RevenueCat.
  • Adapty, Superwall and Stripe, only if you connect them, with a read-only key you create. asorocket reads daily revenue, subscription and trial figures and saves those totals on your computer. For Stripe, customer ids are used while your subscriptions are read, to count new customers, and are never stored; no individual customer or payment is. asorocket writes nothing to these services.
  • AppsFlyer and Adjust, only if you connect them, with an API token you create. asorocket reads your apps’ installs by day and network and saves the daily totals on your computer.
  • Google Analytics 4 and Firebase, only if you connect them, with a Google service account you create. asorocket reads your apps’ daily usage totals (new and active users, time in the app, crash-free users) and retention, and saves those totals on your computer. No user is read or stored.
  • Where you send alerts and reports: Slack, Microsoft Teams, Discord or webhooks, only those you add. They receive the alerts and report summaries you choose to send them, which can include app names, rankings, review text and, for reports you add them to, your downloads and revenue figures. Client reports themselves are PDF files saved in a folder you choose; asorocket sends no email. Customer records are never included.
  • Your sync folder, only if you turn on sync: the folder in iCloud Drive, Dropbox or another service that you choose. What you set up in asorocket (the apps you follow, competitors, keywords, tags, drafts and a few preferences) is written there under your own account with that service, which handles it under its own terms. Fetched figures, keys and webhook addresses are not synced.
  • The AI provider you choose, only if you set one up and use an AI feature. It receives public App Store and Google Play data (including a review you ask it to draft a reply to), your drafts and keyword figures, never your keys, your App Store Connect or Google Play Console figures, or anything from your revenue, attribution or analytics connections. Local models through Ollama or LM Studio stay on your computer.
  • Lemon Squeezy, only once you enter a licence key: to activate it on this computer and check it about once a day. It receives the key, an ID for this computer’s activation, and your computer’s name and operating system (for example “Ada’s MacBook Pro (macOS)”), so you can see where the licence is in use. The trial is counted on your computer; nothing is sent to start it.
  • GitHub, to check for and download updates.

Your keys and webhook addresses are encrypted with your operating system’s secure storage, left out of backups and never synced.

Buying a licence

Licences are sold by Lemon Squeezy, which processes the payment and handles sales tax as the seller. Your card details go to Lemon Squeezy and never reach us. Lemon Squeezy shares your name, email address, country and what you bought with us, along with the licence key and the computers it is active on. We use these to provide your licence, answer support requests and keep the records tax law requires.

Lemon Squeezy’s privacy policy covers what it does with your details during checkout and in your Lemon Squeezy account, where you can also manage your subscription.

This website

With your permission, we use Hotjar, a service from Contentsquare, to see how the site is used: which pages are visited, how far people scroll, what they click, and sometimes a recording of a visit. Hotjar sets cookies to tell visits apart, masks what is typed into forms, and we do not use it to identify you or to advertise. It runs only after you choose Allow in the banner on your first visit; Decline keeps it off, and a browser with Do Not Track turned on is never asked. Your choice is kept in your browser, and the Cookies link in the footer lets you change it. The site has no advertising cookies.

When you use the contact form, we receive your name, email address, topic, message and your browser’s user-agent string, sent to us by email through our email provider, Resend. We use them only to reply to you and keep them only as long as needed for that conversation.

Our hosting provider may keep standard server logs, such as IP addresses and requested pages, for security and reliability.

Your rights

You can ask us to see, correct or delete anything you sent us. Use the contact form and we will reply.

If you are not satisfied with how we handle your data, you can complain to the data protection authority of your country. In Sweden that is the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY).