Christian Drapatz
OneTwoApps
Kämpenstrasse 42
45147 Essen
Germany
Email: support@onetwoapps.com
App Ratings & Reviews is a free script that runs on your own Mac. There is no registration, no account, no server operated by the provider and no cloud. The program sends no data to the provider and contains no telemetry, tracking, analytics or crash reporting. The provider does not know whether or how you use it.
The report the program creates is a single HTML file on your computer. It loads no fonts, scripts or images from third-party servers and sets no cookies.
With your own credentials, the script calls the official, read-only interfaces of Apple and Google. The connection goes directly from your computer to the respective provider, not through the provider of this program.
api.appstoreconnect.apple.com (App Store Connect API) and itunes.apple.com (public rating summary)oauth2.googleapis.com, androidpublisher.googleapis.com and playdeveloperreporting.googleapis.com (Google Play Developer API)Your credentials (key file or service account) are sent to the respective provider to sign in, and nowhere else. These connections are subject to the privacy policies of Apple Inc. and Google LLC (both USA). The program does not output keys or tokens in the report or in logs.
The program can have reviews analysed by a language model. This feature is off by default. It only becomes active if you enable a provider in your configuration and store your own API key as an environment variable. Without a key the program sends no request.
The recipient is exactly one provider of your choice: OpenAI, L.L.C., Google LLC (Gemini), Anthropic, PBC, Perplexity AI, Inc. or xAI Corp. (all USA). The connection goes directly from your computer to the provider, not through the provider of this program. The privacy policy and API terms of the chosen provider apply; before switching it on, check that inputs are not used for training there. If you choose the local provider (Ollama, LM Studio and others) instead, the language model runs on your own computer (127.0.0.1); then there is no recipient and no transfer to third parties.
Sent per review: title and text (can be disabled), stars, date, app version, language, country, the name of the app and whether a developer reply exists. Not sent: user names (not stored at all), review IDs, credentials, client names, store figures and the crash figures from Apple Analytics. Each review is sent once, changed ones again.
AI crash analysis (optional, only with AI enabled): If you paste a crash report of your app into the report yourself and submit it, the same provider receives: the crash report and your note, after the program has replaced user names in file paths, app container IDs, device and incident identifiers (Incident Identifier, CrashReporter Key, serial number, IMEI, Android ID), e-mail, IP and MAC addresses, long identifiers and phone numbers with placeholders; on request excerpts of your source code (only from folders you allow in the setup, only the files the crash names) and up to ten reviews of the affected app. Before sending, the report shows exactly this text. If the AI requests further files, they leave only after you approve them in the report, unless you switched the confirmation off. A crash analysed before is recognised and not sent again. Redaction works with patterns; freely typed names are not recognised, hence the preview.
The results (sentiment, summary, reply drafts, answers to questions) are stored as files in data/ on your computer. Reply drafts are never published automatically. The optional question service runs exclusively on your computer (127.0.0.1) and only while you have started it. You, as the controller of your app data, are responsible for choosing the provider and for the legal basis of transferring review texts; the report contains its own privacy policy for this.
The script saves the retrieved data as files in your project folder (data/ and reports/):
data/crash-reports.json, data/crash-history.json).All of this data stays with you. The provider has no access to it. The program never deletes anything on its own. You can remove all data at any time with the reset function (with backup and confirmation) or by deleting the folder.
You are responsible for the data you retrieve with the program. Review texts can contain personal details that reviewers published themselves. If you pass the report or the Markdown summaries on to colleagues or customers, that decision and the responsibility for it are yours.
This website uses no cookies, no visitor counters, no analytics tools and no fonts, scripts or videos from third parties. The introduction video is served from the same server. There are no forms and no user accounts.
Your browser remembers your choice between light and dark appearance for the duration of the visit (sessionStorage). This value never leaves your browser.
When you visit this website, technically required data is transmitted to the server of our hosting provider, in particular:
This processing serves to provide the website and to ensure stability and security. The legal basis is Art. 6(1)(f) GDPR.
Hosting provider:
IONOS SE
Elgendorfer Str. 57
56410 Montabaur
Germany
This website contains links to other websites. The respective provider's website is opened only when you click a link. From that point on, its privacy policy applies.
If you contact us by email, we process your details solely to handle your request. The data is deleted once it is no longer needed and no statutory retention obligations apply.
Within the statutory limits, you have in particular the right to:
Last updated: October 2026