Privacy Policy

LocalePush helps app developers publish localized metadata to the App Store and Play Store. Questions about this policy: [email protected].

• Account info from Google sign-in: name, email, profile image.
• Store credentials you provide (App Store Connect API key, Play Console service-account key). Encrypted at rest with AES-256.
• Metadata content you create or generate inside the app.
• Usage data: IP, user agent, pages visited, and actions taken — for diagnostics and security.
• Billing data if you subscribe: a Stripe customer ID and subscription status. Stripe handles your payment method; we don't receive card numbers.

• To run the service (authentication, publishing, version history).
• To bill you and communicate about your account.
• To prevent fraud and abuse.
• To comply with the law.

We don't sell your data, and we don't use your metadata content to train third-party AI models.

To operate, we share the minimum data needed with:

• Google — sign-in and Play Store Developer API. When you use these features, Google's Privacy Policy also applies.
• Apple — App Store Connect API. Apple's Privacy Policy also applies when publishing to the App Store.
• Stripe — subscription billing and payment processing. Stripe handles your payment method under its own Privacy Policy.
• AI model providers — used to generate localized copy. We send only the metadata you explicitly ask to generate; we do not send your store credentials or billing data, and providers are bound not to train on your content.
• Hosting and email providers bound by data-processing agreements.

We use the minimum cookies needed to keep you signed in and remember preferences. We don't use third-party advertising cookies or cross-site tracking. Any aggregated analytics we run (to understand platform usage) is not linked to individual identities and is never sold or shared.

We keep your data while your account is active. If you delete your account, we remove personal data within 30 days, except billing records we're legally required to keep (typically up to 7 years). Store credentials are kept only as long as they're needed to operate the service — remove a connection in the dashboard and the corresponding credential is deleted. To delete your account, email [email protected].

Depending on where you live (EEA, UK, California, Brazil, etc.), you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. Email us to exercise any of these. You also have the right to complain to your local data-protection authority.

• We use AES-256 for store credentials at rest, TLS in transit, and standard operational safeguards. No system is perfectly secure.
• LocalePush is not for people under 16. We don't knowingly collect their data.
• Material changes to this policy will be announced at least 14 days before taking effect. The date at the top reflects the current version.

We follow the practices above in good faith, but privacy laws vary by country and change over time (GDPR, CCPA/CPRA, LGPD, and others). If you have specific compliance questions about your jurisdiction or a particular use case, we recommend consulting a qualified legal professional.