Privacy policy

The short version: myMRR collects no data. There is no myMRR account and no myMRR server. Your keys and your revenue stay on your devices, and the app only talks to the services listed below, directly from your iPhone.

This policy covers the myMRR iOS app and this website, made by Castedev ("we").

Your API keys

• The keys you add (a Stripe restricted key, a RevenueCat secret key, a Polar access token) are stored in your iPhone's Keychain. myMRR accepts read-only keys and never calls an endpoint that changes anything.
• If "Sync keys with iCloud" is on (the default), Apple syncs them through iCloud Keychain, which is end-to-end encrypted. We can't read them. You can turn this off in Settings.
• With each key, the Keychain also holds the source's setup: its name, colour and currency, and the name, website and colour of its startup. That lets you import everything after reinstalling the app. It holds no revenue.
• Keys are never written to logs, crash reports or any other storage, and are never sent to us.

Your revenue data

• myMRR fetches your numbers straight from each provider's own API (api.stripe.com, api.revenuecat.com, api.polar.sh) with your key. Those requests are covered by each provider's own privacy policy.
• The results are cached on your iPhone, in storage shared only with myMRR's own widgets, so the widgets and Siri can show them.
• Revenue data never leaves your device except to the provider it came from.

Other connections the app makes

• Exchange rates. Once a day the app downloads the European Central Bank's reference rates from Frankfurter. The request contains nothing about you or your revenue.
• Startup icons. If you give a startup a website, the app loads that website's icon from the website itself. No icon service in between learns your domains.
• Purchases. Apple handles the payment. To confirm the unlock, the app uses RevenueCat, which receives an anonymous app ID and your App Store purchase record. It gets no name, email or revenue data. This is separate from any RevenueCat project you add as a source.

As with any internet request, these services see your device's IP address when it connects to them.

What we don't do

• No analytics, advertising, tracking or crash-reporting tools in the app.
• No account, sign-in, email or contact details collected.
• No data sold, shared or used to profile you.

Notifications (daily or weekly summaries, milestones) are created on your iPhone from data already on it. If you choose to share crash reports with developers in iOS settings, Apple may pass us anonymous crash logs; they never contain your keys.

Deleting your data

• Deleting a source in the app removes its key from your Keychain, and from iCloud Keychain on every device that syncs it.
• iOS keeps Keychain items after an app is deleted. To remove your keys completely, delete your sources in myMRR before deleting the app.
• Deleting the app removes its cached revenue data and settings.

This website

This website uses no cookies and no analytics. Our hosting provider may keep standard server logs (such as IP addresses) for security and reliability.

Children

myMRR is made for business owners and is not directed at children.

Your rights

Because we hold no personal data about you, there is nothing for us to access, correct or delete. If you have a question or a request anyway, write to support@mymrr.dev.

Changes

If this policy changes, we'll update it here and change the date at the top. If the app ever starts collecting data, we'll say so here and in the App Store listing first.