1. Introduction

LemonDash ("we", "our", or "us") operates the LemonDash mobile application. This Privacy Policy explains how we collect, use, and protect your information.

2. Information We Collect

API Key: When you connect your Lemon Squeezy store, you provide your API key. This key is encrypted using AES-256-GCM encryption and stored on our servers. We use it solely to fetch your store data from the Lemon Squeezy API.

Device Token: We generate a unique device token to identify your device. This is used for authentication and push notifications.

Push Notification Token: If you enable push notifications, we store your device's push token to send sale alerts.

We do NOT store: Your sales data, customer data, revenue figures, or any data from your Lemon Squeezy store. All store data is fetched in real-time from the Lemon Squeezy API and cached temporarily (max 10 minutes) for performance.

3. How We Use Your Information

To connect to your Lemon Squeezy store and display your metrics
To send push notifications when new sales occur (if enabled)
To manage your subscription status

4. Data Storage & Security

Your API key is encrypted with AES-256-GCM before storage. All communication between the app and our servers uses HTTPS. We use industry-standard security practices including rate limiting, input validation, and HMAC signature verification for webhooks.

5. Third-Party Services

Lemon Squeezy API: To fetch your store data
Expo Push Service: To deliver push notifications
RevenueCat: To manage in-app subscriptions
Apple App Store: For payment processing

6. Data Retention

Your encrypted API key is stored as long as your device is connected. When you disconnect your store, all data associated with your device is permanently deleted from our servers, including the API key, webhook configuration, and push token.

7. Your Rights

You can disconnect your store at any time from the app's Settings screen. This will delete all your data from our servers. You can also revoke the API key from your Lemon Squeezy dashboard at any time.

8. Children's Privacy

LemonDash is not intended for use by children under 13. We do not knowingly collect information from children.

9. Changes to This Policy

We may update this policy from time to time. We will notify you of any material changes by posting the new policy on this page.

10. Contact Us

If you have questions about this Privacy Policy, contact us at support@tale.run