Last updated: February 7, 2026
Ström Capital Oy ("we", "us", "our") operates Yeethook. This Privacy Policy explains how we collect, use, and protect your information when you use our Service.
When you create an account, we collect your email address and any profile information you provide. If you sign up through a third-party provider, we receive the information you authorize that provider to share.
We receive webhook payloads from App Store Connect and Apple Server Notifications on your behalf. This data may include app review statuses, subscription events, build information, and TestFlight feedback.
If you choose to provide an App Store Connect API key (p8 key), we store it securely and use it exclusively to fetch enriched data from Apple on your behalf, such as crash logs, tester details, and screenshots.
We use Vercel Analytics to collect anonymous usage data including page views, referrer URLs, geolocation (country, region, city), device operating system, browser type, and device category. Vercel Analytics does not use cookies. Visitors are identified through a server-side hash of the incoming request, which is automatically discarded after 24 hours. This data cannot be used to identify individual users or track browsing activity across websites.
We use PostHog for product analytics, error tracking, and service improvement. When you are logged in, PostHog receives your user ID, team name, subscription status, and events such as sign-in, sign-up, and checkout actions. PostHog also automatically captures page views and records unhandled errors to help us diagnose issues. PostHog sets cookies on your device to maintain session identity (see our Cookie Policy for details). Analytics data is processed on PostHog's EU servers.
We also collect feature usage and event counts within the Service to monitor plan limits and improve functionality.
We use the information we collect to:
We do not sell your personal information. We share data only with:
Webhook event data is retained for 30 days to enable delivery and troubleshooting. Account data is retained for as long as your account is active. Upon account deletion, we remove your data within 30 days.
We take reasonable measures to protect your information. API keys are encrypted at rest. All data is transmitted over HTTPS. Authentication is handled through Supabase Auth with row-level security policies.
You have the right to:
To exercise these rights, contact us at hello@yeethook.com.
Your data may be processed in countries outside your own, including the United States and the European Union, through our infrastructure providers. We ensure appropriate safeguards are in place for such transfers.
The Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children.
We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service. Your continued use of the Service after changes constitutes acceptance.
Questions about this policy? Contact us at hello@yeethook.com.