Privacy Policy

Last updated October 21, 2026

In short

There is no account, no analytics and no tracking. Your App Store Connect key stays on your iPhone, and your reports and reviews come straight from Apple. The only exception is sale notifications, which are optional: when you turn them on, Apple tells Grisbi's notification server about each in-app purchase and subscription of the apps you choose, and the server passes it on to your iPhone without keeping it.

Your App Store Connect key

Grisbi reads your sales with the App Store Connect API key, Issuer ID and vendor number you enter during setup. The key and Issuer ID are stored in the Keychain of your iPhone, and the vendor number in Grisbi's settings on your iPhone. They are sent to nobody but Apple.

Sales, reviews and reports

Sales reports and customer reviews are downloaded directly from Apple's App Store Connect API and kept on your iPhone. Review replies you write are sent to Apple, which publishes them on the App Store.

Other services Grisbi contacts

• Apple's iTunes Search API, for app icons, ratings and prices.
• Frankfurter (frankfurter.dev), for exchange rates. Only the currency code is sent.
• The What's New file, hosted on Cloudflare, to announce new features.

These requests carry no personal identifier, only public App Store app IDs, your region or a currency code. Like any web request, they reveal your IP address to the service that answers them.

Sale notifications

When you turn on sale notifications, Grisbi uses your API key, from your iPhone, to set the App Store Server Notifications address of the apps you choose to Grisbi's notification server, hosted on Cloudflare. Apple then sends that server a signed notice for each in-app purchase and subscription event of those apps, such as a purchase, a renewal or a refund. Your API key is never sent to the server.

The server stores:

• the push token Apple gives your iPhone, to deliver the notifications;
• the names and bundle IDs of the apps you choose, to show which app made the sale;
• your language and region, to format prices;
• a random code created on your iPhone, kept only in hashed form, so that only your iPhone can change these settings.

Apple's notice describes the transaction, such as the product, price, currency and country, but not the customer's name, email or Apple Account. The server reads it, sends the notification to your iPhone through Apple's push service, and does not store it. Like any web service, Cloudflare keeps technical request logs for a limited time.

Your iPhone keeps the details of each sale notification for up to 14 days, to show it in Grisbi until Apple's daily report includes it. Grisbi does not send these details anywhere.

Widgets

The widgets are built on your iPhone from the reports it already downloaded.

Purchases

Subscriptions and purchases are handled by Apple. Grisbi never receives your payment details or your Apple Account.

Deleting your data

In Grisbi, open Settings and tap Disconnect to remove your API key, vendor number, apps and downloaded reports from your iPhone. Deleting the app removes your reports and settings, but iOS can keep the API key in the Keychain after the app is gone, so tap Disconnect first to remove it.

Turning off sale notifications, or tapping Disconnect, removes Grisbi's address from your apps in App Store Connect and deletes everything the notification server stored. If you delete Grisbi without doing this, the server deletes your iPhone's entry the next time a notification can't be delivered, and Grisbi's address stays set in App Store Connect until you remove it there.

Contact

For any question about this policy or about Grisbi, write to cassard@gmail.com.

Changes

If this policy changes, the new version will be published on this page with a new date.