Deploy Studio is a client for Apple's App Store Connect API. It runs entirely on your device: there is no server of ours, no account to create, and no copy of your App Store Connect data anywhere but your iPhone. This policy sets out exactly what the app holds, what leaves the device, and what the third-party components collect.
.p8 private key, its key ID and issuer ID) is stored in the device Keychain with kSecAttrAccessibleWhenUnlockedThisDeviceOnly and marked non-synchronizable. It does not sync to iCloud and does not transfer to a new device.Everything the app shows you — your apps, versions, builds, release notes, screenshots, in-app purchases, sales and proceeds, ratings and reviews, crash reports, certificates, profiles, devices, testers and Xcode Cloud runs — is fetched directly from api.appstoreconnect.apple.com to your device, using your own key, on your own behalf. It is not routed through, copied to, or stored on any system of ours. Cached copies live on your device and are cleared when you sign out or delete the app.
Anything you write in the app — release notes, a store listing, a reply to a review — goes from your device to Apple and nowhere else. Apple's handling of it is covered by your Apple Developer Program agreement, not by this policy.
Choosing “Look Around First” opens the app against built-in sample data. No network request to Apple is made and no key is required.
Optional notifications when a version is approved or rejected are local. The check that produces them runs on your device through background app refresh; there is no push server and no remote notification. The Home Screen widget reads the same on-device cache through an App Group.
You can require Face ID to unlock the app and its stored keys. Authentication is performed by iOS; the app is told only whether it succeeded and never receives your biometric data, which stays in the Secure Enclave.
The app uses Firebase Analytics and Crashlytics to report which screens are opened, how often core actions succeed or fail, and crash and performance diagnostics. Events are defined as closed lists of screen names, enumerated values and counts, so no free text can be attached — it is structurally impossible for an app name, bundle identifier, sales figure or key to appear in one. This data is not linked to an identity; the app has no accounts. See Firebase's privacy information.
The free version shows banner ads served by Google AdMob. AdMob may collect device identifiers (including the advertising identifier, only if you allow it at Apple's App Tracking Transparency prompt), coarse location derived from IP address, ad interaction data and diagnostic data, and may use some of it to track across apps and websites. Declining the prompt keeps the ads, just less personalised. See Google's privacy policy. The Deploy Pro purchase removes ads entirely, and with them this collection.
Deploy Pro is a one-off purchase processed by Apple; it removes advertising and unlocks no features. RevenueCat manages purchase status and receives the transaction against an anonymous, randomly generated identifier — not your name, email or Apple Account. We never see payment details.
Deploy Studio is a developer tool, is not directed at children under 13, and does not knowingly collect information from them.
If this policy changes, the new version appears here with a new effective date. Material changes are noted in the app's release notes.
Deploy Studio is an independent client for Apple's public App Store Connect API. App Store, App Store Connect, TestFlight and Xcode are trademarks of Apple Inc. Deploy Studio is not affiliated with, endorsed by, or sponsored by Apple.