Privacy Policy

Last updated: 7 July 2026

AuditStore is a native macOS app by NativLab that audits your App Store Connect submission from your own Mac. It is built to keep your credentials and your project entirely under your control.

The short version

There is no AuditStore server and no account to create.
Your App Store Connect API key is stored only in the macOS Keychain — never in plain text, never in a log, never sent anywhere except directly to Apple.
We collect no analytics and no personal data.
Your Xcode project is read on your Mac and never uploaded.

No account, no server

AuditStore has no backend. You do not create an account, and you do not sign in to anything we run. Every audit runs locally on your Mac and talks directly to Apple's App Store Connect API over HTTPS. Nothing about your app, your key, or your project passes through NativLab.

Your App Store Connect API key

To run a live audit you supply your own App Store Connect API key (a .p8 private key, a Key ID, and an Issuer ID). We handle it as follows:

The .p8 private key is stored only in the macOS Keychain, scoped to this device (it is never synced to iCloud).
It is never written to disk in plain text and never written to any log.
It is used solely to sign requests to Apple's App Store Connect API, and is transmitted only to Apple, over HTTPS.
The Key ID and Issuer ID are stored in the app's local preferences on your Mac.
You can remove the key at any time from Settings; this deletes it from the Keychain.

Your Xcode project

When you point AuditStore at an Xcode project, it reads project files (such as Info.plist, entitlements, build settings, and the asset catalog) locally, on your Mac, to run its static checks. Project contents are never uploaded. Access to the folder you choose is remembered using a macOS security-scoped bookmark stored in the app's local preferences, so the sandboxed app can reopen it — you can clear this at any time from Settings.

Data we collect

None. AuditStore contains no analytics, no telemetry, no advertising, and no third-party tracking SDKs. We do not collect your name, email, device identifiers, or usage data. This is reflected in the app's bundled PrivacyInfo.xcprivacy manifest.

Network connections

AuditStore only makes network requests to Apple:

api.appstoreconnect.apple.com — the App Store Connect API, using your key, to run the live audit.
Apple's App Store / StoreKit — to process the in-app purchase and restore purchases.

Demo mode and local Xcode analysis run fully offline, with no network access at all.

In-app purchases

AuditStore Pro is a one-time purchase handled entirely by Apple through StoreKit. Apple processes the payment; NativLab never receives your payment details or any personally identifying purchase information.

Children's privacy

AuditStore is a developer tool rated 4+. It collects no data from anyone, including children.

Changes to this policy

If this policy changes, the updated version will be posted on this page with a new "last updated" date. Material changes will be reflected before they take effect.

Contact

Questions about privacy? Email contact@nativlab.app.