Link to Connect Privacy Policy
We don't collect your data — because we have no servers to collect it with. Your key is signed on your own Mac.
1. Core promise
Link to Connect is a developer tool that runs entirely on your Mac. We have no account system and no servers, and we do not collect, store, or transmit any of your business data. The app talks to the developer API endpoint you configure using your own API key; we can neither see nor obtain that traffic.
In one sentence: your key, your projects, your screenshots, your in-app purchase data — all of it stays on your own Mac.
2. What we don't collect
We collect no personal data of any kind, including but not limited to:
- No device identifiers, advertising IDs, or analytics instrumentation;
- No usage-behavior data (no analytics SDK is integrated);
- No location, contacts, calendar, or any other system data unrelated to the app's function;
- Not your API key itself — it is used for local signing only and is never sent to us;
- Not your project files, screenshot assets, CSV files, or export products.
3. Keys & network activity
The app signs API requests locally on your Mac with CryptoKit (ES256) and sends them through the system URLSession. The app's only external network destination is the developer API endpoint you configure — there are no other outbound connections.
The app uses no third-party networking libraries and makes no background requests. The demo mode backend runs entirely in memory and makes no network requests at all.
4. Data processed on your Mac
The following data is processed only on your Mac to implement the corresponding features and never leaves your device (except requests to the API endpoint you configure, sent with your key):
| Data | Purpose | Where it goes |
|---|---|---|
| API key (.p8) | Local ES256 signing for developer API requests | Memory only; cleared on exit |
| IAP / subscription / version metadata | Batch create, edit, submit | To the API endpoint you configured, via your key |
| Project folders (auto screenshots) | Build and capture from the simulator | Local read / write only |
| Screenshot assets and exports | Studio canvas, export, upload | Local read / write only |
| CSV files | Batch IAP import / export | Local read / write only |
| Demo sample data | Full experience without a key | Memory only; discarded on exit |
5. Demo mode
Demo mode uses local, fictional sample data (two sample apps, several in-app purchases and subscriptions, versions and screenshot sets, 71 territories, and one submission draft). The demo backend runs entirely in memory, needs no network and no key; an orange "Demo mode · sample data" badge stays in the toolbar, and exiting discards everything.
6. Permissions and their purpose
The app's sandbox is limited to three entries:
com.apple.security.app-sandbox: the app always runs inside the system sandbox;com.apple.security.network.client: the only outbound target is the developer API endpoint you configure (demo mode makes no requests);com.apple.security.files.user-selected.read-write: every file the app touches — project folders for automatic screenshots, images and export folders for the studio, CSV files, and the .p8 key path — is chosen by you through a system open / save panel.
The app does not access the Downloads folder, contacts, calendars, the photo library, or any location unrelated to its function.
7. Purchases
Any purchase of the app itself (for example a paid download once it ships on the App Store) is handled by Apple App Store; transaction details are held by Apple and are not visible to us. The app has no in-app purchases and no payment system of its own.
8. Third-party services
The app integrates no third-party analytics, advertising, crash-reporting, or tracking SDKs. Multi-language translation in the studio uses the macOS system translation framework and happens on your device. Third-party service names shown in the interface (the developer backend you connect to) only describe the endpoint it talks to.
Non-affiliation notice: Link to Connect is an independent third-party tool with no affiliation, sponsorship, or endorsement by Apple Inc.
9. Children's privacy
The app is a professional tool for developers, is not directed at children, and does not knowingly collect personal information from any age group.
10. Data security
Because data never passes through us, security rests with your Mac: keep your API key file safe, never send it to anyone by email or chat (including us — we never ask for keys), and set a reliable unlock method on your Mac. Keys inside the app are used for local signing only and are never persisted anywhere we could see.
11. Policy changes
If this policy needs to change due to feature updates, we will revise this page and update the "Effective" date. Material changes will be announced in the app's release notes or prominently on this page.
12. Contact
Questions about this privacy policy? Email f544hmrsr@mozmail.com (developer YANGRONG).
Privacy questions?
One email reaches the developer directly; replies usually within 7 business days.