Legal

Privacy Policy

Effective date: July 2, 2026 · Operated by Foxxception LLC

AppKeep is built by Foxxception LLC. The short version: we collect the minimum we need to monitor your apps, we never store your source code, and we never sell your data. The details follow.

1. What We Collect

• GitHub account info — your GitHub username, display name, email address, and avatar, received when you sign in with GitHub OAuth.
• Repository metadata only — package manifests (package.json, lockfile metadata, app configs) from the repositories you connect. We do not store your source code.
• Encrypted API keys — LLM provider keys and integration tokens you add are encrypted at rest with AES-256-GCM before they touch our database.
• App store review data — public reviews and ratings for your apps from the Apple App Store and Google Play.
• Revenue metrics — subscription metrics (MRR, churn, trial conversions) pulled from RevenueCat if you connect it.
• Waitlist emails — if you join the waitlist, we store your email address and use it only to contact you about the launch and your early-bird pricing.
• Billing data — payment details are handled entirely by Stripe; we never see or store your card number.

2. What We Don't Do

• We never store or clone your source code. One exception worth being explicit about: if you trigger a repo-specific upgrade analysis, small excerpts of the files that use the package in question are read transiently and sent to your own LLM provider for that one analysis — they are never stored on our servers (only the resulting analysis text and the list of scanned file paths are kept).
• We do not sell your data to anyone, ever.
• We do not use your data to train AI models.
• We do not send marketing email beyond launch-related contact for waitlist members and service notices for account holders.

3. How We Use Your Data

Everything we collect exists to power the dashboard you see: dependency freshness checks, review sentiment, revenue health, and the composite health score. When you trigger AI analysis, the relevant data is sent to the LLM provider you configured, using your own API key. For most analyses that means metadata (dependency versions, changelogs, review text); for repo-specific upgrade analysis it also includes short excerpts of source files that import the package being analyzed. These excerpts go directly to your chosen provider and are not stored by us.

4. Subprocessors

These services process data on our behalf:

Additionally, if you configure a BYOK LLM provider (OpenAI, Anthropic, Google, xAI, Perplexity, or a custom endpoint), analysis requests go directly to that provider under your own account and their privacy terms.

5. Cookies

We use a session cookie to keep you signed in to the app. That's it — no advertising cookies, no cross-site trackers, no third-party analytics cookies.

6. Data Retention & Deletion

We keep your data while your account is active. To delete your account and all associated data, email support@foxxception.com and we will remove it, except records we are legally required to keep (such as billing history). Waitlist emails are deleted on request the same way.

7. Security

Sensitive credentials are encrypted at rest with AES-256-GCM, traffic is encrypted in transit with TLS, and access to production systems is restricted. No system is perfectly secure; if we ever discover a breach affecting your data, we will notify you promptly.

8. Changes to This Policy

If we change this policy in a material way, we will notify account holders by email or an in-app notice before the change takes effect. The effective date at the top always reflects the current version.

9. Contact

Privacy questions or deletion requests: support@foxxception.com.