AppGravy

Last updated October 22, 2026

Privacy policy

AppGravy is a marketing workspace for teams that build and grow apps. This page explains what we collect, why, who we share it with, and how to have it deleted.

What we collect

  • Your account: your name, email, a hashed password, and the studio and apps you add.
  • Public data about apps and accounts you track: App Store listings, ranks and reviews, and public social posts and profiles (TikTok, Instagram, YouTube, X) and public Meta Ad Library ads for your apps and the competitors you choose.
  • Accounts you connect: when you connect a service (for example TikTok, Meta, App Store Connect, RevenueCat or PostHog), we store the access token that service gives us, encrypted, plus the reporting data you asked us to read, such as spend, installs or revenue.
  • What you make in AppGravy: hooks, ideas, scripts, slideshows, videos, notes, creator records and messages to our AI agent.

TikTok

If you connect a TikTok account for posting, we use TikTok's Login Kit and Content Posting API with the user.info.basic, user.info.profile and video.upload permissions. We read your display name, username and avatar to show which account is connected, and we upload only the posts you approve to that account's TikTok drafts, where you finish and publish them. We don't read your messages, followers or other content, and we never post publicly on your behalf.

How we use it

  • To run the features you use: dashboards, competitor tracking, the content calendar, creator management and the AI agent.
  • To keep the service secure and working.

We don't sell your data and we don't use it for advertising.

Who processes it

We use service providers to run AppGravy: Vercel (hosting), Supabase (database), Anthropic (the AI agent and writing features), Apify (reading public social and ad data), LTX and fal.ai (video, image and voiceover generation, when you ask for it) and Resend (email you choose to send). Each receives only what its job needs.

Keeping and deleting data

We keep your data while your studio is active. You can disconnect any connected account at any time (for TikTok: Calendar → Disconnect), which deletes its stored token. You can also revoke access from the service itself, for example in TikTok's settings under Security → Manage app permissions. To delete your studio and everything in it, contact the studio owner through Settings; we delete it within 30 days.

Security

Connected-account tokens are encrypted at rest, traffic is encrypted in transit, and only members of your studio can see its data.

Contact

Questions about this policy: the studio owner through Settings.