Security
What Plask can and can't see
Plask reads your numbers and never changes anything. Here is exactly what each connection asks for.
Can it change anything in my accounts?
No. Stripe takes a restricted key with read-only scopes, RevenueCat a read-only key, App Store Connect a Team API key with the Sales and Reports role (it can view sales and trends but can't edit apps, prices or promo codes), Google Play a service account key you create with read access to reports, and GA4 read-only access through Google sign-in. Ad spend is the one place a key is involved, and it stays read-only and spend only: on Pro, Apple Search Ads spend syncs with a key pair we generate that has read-only roles, and Meta Ads spend with a system-user token that has only ads_read. Google Ads cost is read through GA4. Other ad spend and fixed costs are typed in, or written by your AI agent over MCP.
It asks for
- Stripe: a restricted key, read-only
- RevenueCat: a read-only v2 key
- App Store Connect: a Team API key with the Sales and Reports role
- Google Play: a service account key you create, with access to financial reports
- GA4: Viewer access
- Costs: typed in, ad spend can sync
Apple has no narrower key: a Team key covers all your apps. Plask can't check a key's role, so use the Sales and Reports role, never an Admin key. Play's report permissions also open app information, orders and survey responses. Plask only reads sales reports.
It never needs
- Write access to any source
- Passwords to any of your accounts
- Customer names, emails or cards
- Individual visitors or IP addresses
Stored, and how to leave
- Daily totals per product, your markers and costs
- Stored in the EU (Germany)
- Revoke a key and it reads nothing more. Deleting your account deletes the data.
Get all your numbers in one place
Free for one product. Founding Pro $36/yr for the first 50.