Privacy Policy
DropRoost is an App Store wishlist and price tracker developed by Peter Dongo (“we,” “us”). This policy explains exactly what data the app handles and why. The short version: there are no accounts and we never ask who you are. We store only what is technically required to check prices and send you the alerts you asked for.
What we do not collect
DropRoost has no user accounts and no sign-in. We do not ask for — and never receive — your name, email address, phone number, password, or payment details. There is no analytics SDK, no advertising, no cross-app tracking, and no third-party trackers of any kind. We do not build a profile of you and we never sell or share your data.
What stays on your device and in your iCloud
Your wishlist itself — the apps you save, your categories, notes, ordering, and settings — lives on your device and syncs across your Apple devices through your own private iCloud account (Apple’s CloudKit). This data is stored under your Apple ID, is not visible to us, and is governed by Apple’s privacy policy.
What our server stores, and why
To check prices around the clock and push you a notification the moment something drops, our server needs to know a few things. It stores only:
- The items you choose to watch — the public App Store identifiers of the apps, in-app purchases, and subscriptions you added, plus the storefront (region) and the alert rule you set. This is public catalogue data, not personal information.
- A push notification token — an anonymous identifier issued by Apple that lets us deliver alerts to your device. It is not your phone number, Apple ID, or any personal identifier, and it is not linked to your name.
- Your storefront preference — a two-letter region code (for example,
us) so we fetch prices from the right App Store. - Subscription entitlement (only if you buy IAP Tracking) — the Apple-signed transaction identifier for your purchase, used solely to confirm your subscription is active and to enforce a reasonable device limit. We never see your Apple ID or payment method.
We do not store price history against you as an individual — price history belongs to an item, not to a person, and is shared across everyone watching the same item.
Notifications
Push notifications are delivered through Apple’s Push Notification service (APNs). We send Apple the alert and your push token; Apple delivers it to your device. You can turn notifications off at any time in iOS Settings, and you can mute or remove any individual alert inside the app.
In-app purchases
All purchases are processed by Apple through StoreKit. When you buy IAP Tracking, your device sends our server an Apple-signed receipt so we can verify the purchase is genuine and active. This verification happens between your device, our server, and Apple — we never handle your card, and we never see your Apple ID.
Deleting your data
You are in control. Removing an item stops it being tracked for you. To erase everything our server holds for your device, use Delete my data in the app’s settings (or simply delete the app) — this removes your device record, your push token, and all of your watches from our server. Because we hold no account, there is nothing else tied to you to delete.
Data retention
We keep your watches and push token only while your device is actively using the app. If a push token becomes permanently invalid (for example, you delete the app), Apple tells us, and we remove the associated records. Item price history is retained as anonymous catalogue data to power the history charts.
Third parties
DropRoost relies on a small number of infrastructure providers and no trackers: Apple (App Store price data, StoreKit purchases, APNs notifications, iCloud sync) and our hosting provider, which runs our server. None of them receive personal information about you from us, because we do not hold any.
Children’s privacy
DropRoost is not directed at children under 13. Because we collect no personal information from anyone, we collect none from children.
International users
DropRoost works the same everywhere. Because we store no personal identity data, there is no personal data to transfer across borders. The item and region data we store is public App Store catalogue information.
Changes to this policy
If we update this policy, the new version will be posted at this URL with a revised “Last updated” date. Material changes will be noted in the release notes of the next app update.
Contact
Questions about this policy or about DropRoost in general:
info@droproost.app