Effective August 13, 2026 · Overnight Success AI, Inc.
IPAScope is built to keep your data on your Mac. Overnight Success AI, Inc. does not operate any backend servers for IPAScope, and does not collect, store, or have access to the apps you scan, your findings, or your API keys.
Scanning an .ipa or .app file runs entirely on your
device. No network connection is made, and nothing about the app you scan or the
findings produced is transmitted anywhere.
If you choose to generate an AI pentest report, redacted scan evidence is sent directly from your Mac to the third-party AI provider you configure (for example, Anthropic), using an API key you supply. This is a direct connection between your device and your chosen provider — it does not pass through, or get stored by, Overnight Success AI, Inc.. Your provider's own privacy policy governs how they handle that request. Your API key is stored only in the macOS Keychain on your device.
The App Store version of IPAScope is a one-time paid download, processed entirely by Apple at the time you download it. Overnight Success AI, Inc. never receives your payment information. See Apple's own privacy policy for how they handle purchase data.
The direct-download version is sold through Lemon Squeezy, our merchant of record, which handles checkout, payment processing, and tax collection. Overnight Success AI, Inc. never receives or stores your payment card details. Lemon Squeezy shares your order email with us so we can email you your license key; see Lemon Squeezy's privacy policy for how they handle purchase data.
The direct-download build is unlocked with an offline, cryptographically signed license key that is verified entirely on your device. No network request is made to activate or check a license. The key is stored in the macOS Keychain.
If you use the optional dynamic-analysis feature, your Mac connects directly to your own Corellium account and a locally-run Docker container to instrument a scanned app on a device you control. That traffic flows between your Mac, your Corellium instance, and your Corellium account credentials — not through any Overnight Success AI, Inc. server.
IPAScope contains no analytics, tracking, or advertising SDKs, and does not track you across apps or websites owned by other companies.
IPAScope is a developer/security tool not directed at children, and we do not knowingly collect information from children.
If this policy changes, the updated version will be posted on this page with a new effective date.
Questions about this policy: kevin@overnightsuccess.ai