Privacy Policy

Our privacy policy and how we use your data

Last updated: February 7, 2026

1. Introduction

Ström Capital Oy ("we", "us", "our") operates Yeethook. This Privacy Policy explains how we collect, use, and protect your information when you use our Service.

2. Information We Collect

Account Information

When you create an account, we collect your email address and any profile information you provide. If you sign up through a third-party provider, we receive the information you authorize that provider to share.

Webhook Data

We receive webhook payloads from App Store Connect and Apple Server Notifications on your behalf. This data may include app review statuses, subscription events, build information, and TestFlight feedback.

API Keys

If you choose to provide an App Store Connect API key (p8 key), we store it securely and use it exclusively to fetch enriched data from Apple on your behalf, such as crash logs, tester details, and screenshots.

Usage and Analytics Data

We use Vercel Analytics to collect anonymous usage data including page views, referrer URLs, geolocation (country, region, city), device operating system, browser type, and device category. Vercel Analytics does not use cookies. Visitors are identified through a server-side hash of the incoming request, which is automatically discarded after 24 hours. This data cannot be used to identify individual users or track browsing activity across websites.

We use PostHog for product analytics, error tracking, and service improvement. When you are logged in, PostHog receives your user ID, team name, subscription status, and events such as sign-in, sign-up, and checkout actions. PostHog also automatically captures page views and records unhandled errors to help us diagnose issues. PostHog sets cookies on your device to maintain session identity (see our Cookie Policy for details). Analytics data is processed on PostHog's EU servers.

We also collect feature usage and event counts within the Service to monitor plan limits and improve functionality.

3. How We Use Your Information

We use the information we collect to:

  • Provide and maintain the Service
  • Format and deliver webhook events to your Slack channels
  • Fetch enriched data from Apple when you provide a p8 key
  • Process billing and manage your subscription
  • Send you service-related communications
  • Understand usage patterns, diagnose errors, and improve the Service

4. Data Sharing

We do not sell your personal information. We share data only with:

  • Slack — We deliver formatted messages to the Slack channels you configure.
  • Apple — If you provide a p8 key, we make API calls to Apple on your behalf.
  • Payment processors — We share billing information with our payment provider (Lemon Squeezy) to process payments. Lemon Squeezy acts as our Merchant of Record and handles tax compliance and invoicing on our behalf.
  • Infrastructure providers — We use Supabase for database and authentication, and Vercel for hosting and analytics. Vercel Analytics receives anonymous, aggregated page view data (see "Usage Data" above).
  • PostHog — We use PostHog (EU) for product analytics and error tracking. PostHog receives usage events, your user ID, team name, and subscription status when you are logged in.
  • Featurebase — We use Featurebase for in-app support chat, feedback collection, and product updates. When you are logged in, we share your email address, name, team name, and subscription plan with Featurebase to provide personalized support.

5. Data Retention

Webhook event data is retained for 30 days to enable delivery and troubleshooting. Account data is retained for as long as your account is active. Upon account deletion, we remove your data within 30 days.

6. Data Security

We take reasonable measures to protect your information. API keys are encrypted at rest. All data is transmitted over HTTPS. Authentication is handled through Supabase Auth with row-level security policies.

7. Your Rights

You have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your account and data
  • Export your data in a portable format
  • Withdraw consent for optional data processing

To exercise these rights, contact us at hello@yeethook.com.

8. International Data Transfers

Your data may be processed in countries outside your own, including the United States and the European Union, through our infrastructure providers. We ensure appropriate safeguards are in place for such transfers.

9. Children

The Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service. Your continued use of the Service after changes constitutes acceptance.

11. Contact

Questions about this policy? Contact us at hello@yeethook.com.