Privacy Policy

This policy explains how ASOFlow handles information in the Mac app and its service at app.hip958.com. For privacy questions or requests, contact support@hip958.com.

1. Local workspace data

ASOFlow stores projects, Apple metadata snapshots, local drafts, AI candidates, approved values, translation baselines, glossary entries and operation history in its local database on your Mac. Opening a project or manually editing a draft does not by itself send that draft to an AI provider. The offline sample uses local example data.

Basic editing does not require an ASOFlow registration or password. Optional network services have separate data flows described below.

2. App Store Connect credentials and Apple

You supply an Individual or Team App Store Connect API key to access apps you are authorized to manage. If you choose to remember it, the imported .p8 private key is persisted only in this Mac’s Keychain. Session-only mode keeps the imported key in memory for the session; ASOFlow does not create an additional key file. Your original imported file remains under your control.

ASOFlow creates Apple authentication tokens in memory and sends them directly to Apple for requested App Store Connect operations. Neither your .p8 key nor these Apple JWTs are sent to the ASOFlow AI backend or AI provider.

Fetching metadata, checking conflicts and confirming metadata writes communicate with Apple. Apple handles information under its own Privacy Policy.

3. Optional AI processing

When you initiate Translate, Generate, ASO suggestions or AI alignment, ASOFlow sends the selected metadata or text and the relevant task context to its first-party service, which forwards the request to DeepSeek. Context can include source and target languages, previous approved translations, glossary terms, an app brief and seed keywords.

The app explains this processing beside the AI action. Initiating the action permits processing for that request. AI results remain candidates; they do not automatically approve or publish Apple metadata.

Do not include passwords, private keys, customer records or other sensitive information in text submitted to AI. To avoid new AI submissions, do not initiate further AI actions. Canceling stops later work where possible, but cannot recall information already transmitted.

DeepSeek is an external model provider. Its processing is subject to the applicable provider terms and privacy arrangements; ASOFlow does not promise zero provider retention or that submitted content can never be used to improve models. See DeepSeek’s published privacy information. That policy distinguishes DeepSeek’s own services from downstream developer applications; this ASOFlow policy describes the app’s data flow.

4. Service identity, usage and security records

The service processes native session and account identifiers, device-signing/public-key information, app/platform/build information, request IDs, request outcomes and usage counters. These support authentication, authorization, allowance accounting, replay protection, troubleshooting and abuse prevention. Network infrastructure also processes connection information such as IP addresses.

The backend is hosted on Cloudflare infrastructure. Requests to this website and backend pass through that infrastructure. See Cloudflare’s Privacy Policy.

Service tokens and signing material are protected using the app’s credential-storage mechanisms. ASOFlow’s application diagnostics are designed to record fixed error categories rather than raw metadata, model responses or credentials. This does not establish a zero-logging promise for hosting or model providers.

5. Purchases and support messages

Pro is offered through monthly and yearly auto-renewable App Store subscriptions where available. The app’s paywall shows the current offer before purchase. Apple-signed transaction information, product and original transaction identifiers, subscription status and service account identifiers are used to verify purchases, bind delivery to the correct service identity, handle restores and prevent duplicate assignment. Service usage records are used to administer the included allowance. Apple handles App Store payment details; ASOFlow does not ask for your card information in the Mac app.

If you email support, the email address, message and any attachments you choose to send are used to respond and investigate the issue. Share only the information needed for the request.

6. Retention and deletion

Local workspace information stays on your Mac until you remove it using the app’s data controls or otherwise remove the local data. Settings → Data provides local project and local-data deletion controls. Local deletion does not erase App Store Connect metadata, copies you exported or backed up, or information already sent to external services.

Service identity, authorization, usage and security records are retained for service operation, accounting and handling abuse or disputes. A fixed automatic deletion period for all server records is not currently offered. Provider-side storage, caching and backups may follow separate retention rules; ASOFlow does not promise that deleting local data erases those copies.

To request access, correction or deletion of service information, email support@hip958.com with the subject “ASOFlow privacy request.” We may need limited information to verify that the request relates to your data. Do not send a .p8 key, JWT or password. The current app does not provide a completed, verified self-service server-account deletion flow. Information required for legal, security or accounting purposes may need to be retained; the response to a request should explain any applicable limits.

Deleting data does not cancel an Apple subscription. Subscription management, where relevant, is handled separately through Apple.

7. International processing and your choices

Apple, Cloudflare and DeepSeek may process information outside your country. ASOFlow does not offer a selectable processing region or guarantee that AI content remains in the country where you use the app. Avoid AI features if you cannot authorize this external processing.

Depending on where you live, you may have rights to access, correct, delete or obtain a copy of personal information, or to object to certain processing. Contact the privacy email above to make a request. Applicable mandatory privacy rights remain unaffected.

8. Children and policy changes

ASOFlow is a developer tool and is not directed at children. Do not submit children’s personal information through AI features or support attachments. If you believe such information has been submitted, contact us.

We may update this policy when the app or its services change. The date above identifies the latest version. Review the policy and in-app processing notice before using optional AI features.