What We Collect
When you sign in via GitHub or Google, we store:
- Your provider user ID and, for GitHub, your login (username)
- Your avatar URL
- Your email address (if provided by your sign-in provider)
- Your display name (if provided by your sign-in provider)
When you use Pro apps, we store:
- Data you explicitly save in your apps (KV entries, database rows, uploaded files)
- Subscription status and Stripe customer ID (for billing)
- Per-(app, day) usage counts: session-minutes spent in each app and API calls made on your behalf. Used for platform operations and future creator reporting. See Usage analytics.
What We Don't Collect
- No analytics or tracking cookies
- No third-party trackers (Google Analytics, Facebook Pixel, etc.)
- No advertising IDs or fingerprinting
- No event-by-event logs, no IP-address profiling, no usage data sold or shared with advertisers
How We Use Your Data
- Authentication — Your GitHub or Google identity lets you sign in across apps. Signing in with Google requests only your basic identity; connecting Google Calendar and Meet is a separate permission step.
- App data — Your KV entries, database rows, and files are stored so your apps work. Each app's data is isolated.
- Billing — Stripe handles payment processing. We store your Stripe customer ID to manage your subscription.
- Usage reporting — Coarse usage counts (session-minutes, API calls per app per day) help operate the platform and may support creator reporting. See below.
Google Calendar and Meet Connections
Some Pro apps offer an optional Google Calendar and Meet connection, for example to show meeting attendance. When you connect your Google account, ProAppStore requests read-only access to your calendar list, calendar events, and Google Meet spaces and conference records, alongside your Google account ID and email address.
- Access and use. We list calendars so you can select one for the app. For the selected calendar, we read event IDs, titles, status, times, recurring-series information, and meeting links. For related Meet conferences, we read conference times, participant identities and display names (including anonymous or phone participant labels), and joining and leaving times. These records support the app's visible meeting and attendance features. The connector does not request calendar editing, Gmail, Drive, recording, or transcript access.
- Storage and sharing. ProAppStore stores your connected Google account ID and email, calendar authorization metadata, and encrypted access and refresh tokens on Cloudflare. Connection credentials are retained while the account remains connected in ProAppStore. Tokens stay within the platform and are not returned to app workers. Calendar and Meet records are returned to the app you authorize; that app may store records and display them to users allowed by its organization roles. Review the app's privacy notice for its record retention and audience.
- Your controls. An app can revoke its selected calendar grant to stop further reads through that grant. Disconnecting the shared Google account erases its stored tokens and connected identity and invalidates its existing calendar grants across Pro apps. You can also revoke ProAppStore access in your Google Account connections. Disconnecting or revoking access does not automatically delete records already saved by an app; contact the app operator for deletion of those records, or use the privacy contact below for platform data requests.
ProAppStore's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements. Google user data is used to provide the connected features you authorize, and is not sold, used for advertising, or used to train generalized AI or machine-learning models.
Usage Analytics
ProAppStore is a single subscription that unlocks every Pro app. We keep coarse per-app usage counts so the platform can operate, debug capacity, and support creator-facing reporting without tracking detailed behavior.
What we record, while you're signed in and a Pro app is the focused tab:
- A heartbeat every 60 seconds from
@proappstore/sdk, bumping a counter on (app, your user id, day in UTC). - Optional API-call counts that an app increments when it does work on your behalf.
What we do not record:
- Event-by-event session timelines — only daily totals.
- What you did inside the app (clicks, scrolls, content viewed).
- Your IP address or user-agent in these usage rows.
- Anything when the tab is hidden, backgrounded, or you're signed out.
Who sees what:
- You can see your own per-app usage on the Account page.
- Creators see daily aggregates for their own apps (active users, session-minutes, API calls). They cannot see per-user data.
- Stripe receives the payout amount, not the underlying usage data, when the monthly payout runs.
- No one else. We don't sell, share, or use usage data for advertising.
Usage heartbeats stop when you sign out. To request deletion of existing usage data, contact us as described under Data Deletion. Free apps are also available where applicable on FreeAppStore.
Data Storage
Platform data is stored on Cloudflare's global network (D1 databases, R2 storage, KV). Data is encrypted at rest by Cloudflare. We use Stripe for payment processing and GitHub or Google for sign-in. Optional Google connections share the selected records with the app you authorize as described above.
Data Deletion
To request deletion of your platform account or stored platform data, email serge.the.dev@gmail.com. The current Dashboard clear-data action clears its own app KV data and signs you out; it does not delete your platform account, other apps' records, uploaded files, or subscription records. For data retained by a particular app or organization, contact its operator. Disconnecting Google stops future connector access as described above, but does not automatically erase previously saved records.
Cookies
We use a single session cookie for authentication. No tracking cookies, no analytics cookies, no third-party cookies.
Third-Party Services
- GitHub — OAuth identity provider. GitHub Privacy Statement
- Google — Sign-in and optional Calendar and Meet connections. Google Privacy Policy
- Stripe — Payment processing. Stripe Privacy Policy
- Cloudflare — Hosting and data storage. Cloudflare Privacy Policy
Changes
We'll update this page if our practices change. No email notifications — check back here.
For developers
Most Pro apps don't need their own privacy policy — this page already covers sign-in, billing, storage, usage analytics, and account deletion. If your app does something app-specific that this page doesn't already describe, copy the app privacy policy template, fill in the blanks, and link the result from your app's listing in the Creator Console.
Contact
Questions about privacy or requests to delete Google connection data: serge.the.dev@gmail.com. For non-sensitive platform questions, you can also open an issue on GitHub.