Privacy Policy
Last updated: March 17, 2026
Keel Analytics ("we", "our", "the app") is operated by Yousef Sahli. This policy explains what data we collect, how we use it, and your rights regarding that data.
1. Data We Collect
Keel Analytics connects to third-party platforms on your behalf to display analytics data. We collect and process the following:
- Shopify: Order data including revenue totals, order counts, and currency. We do not access customer personal information, payment details, or individual order line items.
- Meta Ads: Ad account spend, conversion values, and campaign performance metrics via the Marketing API.
- Google Ads: Ad spend (cost), conversion values, and campaign-level performance data via the Google Ads API.
- TikTok Ads: Advertiser-level spend and purchase ROAS via the TikTok Business API.
- Snapchat Ads: Ad account spend and conversion purchase values via the Snapchat Marketing API.
- Account information: Your email address and a hashed password for authentication purposes.
2. How We Store Your Data
Your data is stored securely using industry-standard practices:
- Authentication tokens (OAuth access tokens and refresh tokens) are stored in a secure, encrypted database hosted on Supabase with row-level security policies. Tokens are never stored on-device beyond the encrypted iOS Keychain.
- Passwords are hashed using bcrypt and never stored in plaintext.
- API communication between the app and our servers uses HTTPS/TLS encryption exclusively.
- On-device storage uses the iOS Keychain for sensitive credentials and encrypted UserDefaults for cached display data.
3. How We Use Your Data
We use your data solely to provide the Keel Analytics service:
- Display your revenue, ad spend, ROAS, and other analytics metrics in the app and widgets.
- Calculate derived metrics such as MER (Marketing Efficiency Ratio) and estimated profit.
- Send optional notifications about spend anomalies or daily briefings, if you enable them.
We do not use your data for advertising, profiling, or any purpose beyond delivering the app's functionality.
4. Data Sharing
We never sell your data to third parties.
We do not share your data with advertisers, data brokers, or analytics companies. Your data is only transmitted to:
- The third-party platforms you explicitly connect (Shopify, Meta, Google, TikTok, Snapchat) to authenticate and fetch your data.
- Supabase, our infrastructure provider, which hosts the database and serverless functions under strict data processing agreements.
5. Data Retention
We retain your data only as long as your account is active. Cached analytics data is refreshed on each app session and is not stored long-term. OAuth tokens are retained until you disconnect a platform or delete your account.
6. Your Rights
You have the right to:
- Access your data by viewing it within the app.
- Disconnect any platform at any time from Settings, which immediately revokes our access and deletes the stored tokens.
- Delete your account and all associated data at any time from the app's Settings screen. This permanently removes your account, all stored tokens, and all cached data from our servers.
- Export your data by contacting us at the email below.
7. GDPR Compliance (EU Users)
If you are located in the European Economic Area, you have additional rights under the General Data Protection Regulation:
- Legal basis: We process your data based on your explicit consent (connecting platforms) and legitimate interest (providing the service).
- Right to rectification: You can update your account information at any time.
- Right to erasure: You can delete your account and all data from the app.
- Right to data portability: Contact us to receive your data in a machine-readable format.
- Right to object: You can disconnect platforms or delete your account at any time.
- Data transfers: Your data may be processed in the United States where our infrastructure is hosted. We rely on Supabase's data processing agreements and standard contractual clauses for lawful transfer.
8. CCPA Compliance (California Users)
If you are a California resident, you have additional rights under the California Consumer Privacy Act:
- Right to know: You can request details about what personal information we collect, as described in this policy.
- Right to delete: You can delete your account and data from the app's Settings.
- Right to opt-out of sale: We do not sell personal information. There is nothing to opt out of.
- Non-discrimination: We will not discriminate against you for exercising your privacy rights.
9. Tracking and Analytics
Keel Analytics does not use any third-party analytics SDKs, advertising identifiers (IDFA), or tracking pixels. We do not track you across apps or websites. We do not collect device fingerprints.
10. Children's Privacy
Keel Analytics is not directed at children under 13. We do not knowingly collect data from children. If you believe a child has provided us with personal information, please contact us and we will delete it.
11. Changes to This Policy
We may update this privacy policy from time to time. We will notify you of material changes by updating the "Last updated" date at the top of this page. Continued use of the app after changes constitutes acceptance of the updated policy.
12. Contact
If you have questions about this privacy policy or your data, contact us at: