Credentials
Apple .p8 keys and complete Google service-account JSON keys are stored in the Keychain on the Mac or iPhone where you added them. StoreGauge marks these Keychain items as device-only, so they do not migrate to another device through a backup. StoreGauge reads them only to sign short-lived requests to the store provider you connected. Issuer IDs, key IDs, project IDs, vendor numbers, and report-bucket names are stored in the local application database.
Store data
Apps, metrics, reviews, replies, releases, and metadata history are stored with SwiftData on your Mac or iPhone. Raw Apple and Google report files are parsed locally and are not uploaded to StoreGauge or retained as a hosted copy.
Network connections
StoreGauge connects directly to Apple App Store Connect, Google OAuth, Google Play, and Google Cloud Storage APIs. It may fetch public app icons from Apple or Google listings and currency rates from the public Frankfurter API. Direct-download builds contact this site’s signed Sparkle feed to check for updates.
On iPhone, enabling store activity notifications lets iOS run a short, best-effort background check for new reviews and release status. These requests go directly to the connected store. Results remain local, and StoreGauge posts local notifications without a StoreGauge notification server.
Translations
Review translation uses Apple’s Translation framework. Translations are cached locally for the chosen target language. Language assets may be managed by the device operating system.
Widgets
The widget extension receives a minimal read-only snapshot through StoreGauge’s App Group. It does not receive credentials or direct access to the product database.
Local agents and MCP
MCP sharing is off by default. When enabled, StoreGauge writes a bounded, credential-free snapshot for the bundled read-only MCP helper. You control whether it includes review text, reviewer names, financial data, and apps not selected for the dashboard.
The helper cannot access Keychain, open the SwiftData database, call store APIs, or modify StoreGauge data. It serves local MCP clients over standard input and output.
Diagnostics
The rolling local log records connector operation names, status codes, and errors. It excludes credentials, access tokens, response bodies, and review text. StoreGauge never uploads the log automatically.
Deleting data
Deleting an account removes its locally stored app history and Keychain secret. Removing StoreGauge and its application data removes the remaining local database. Archived apps retain their history until restored or their account is deleted.
Questions or concerns can be reported in the public issue tracker. The implementation is available for inspection in the source repository.