← Back

Privacy Policy

Last updated: 25 May 2026

TKN ("we", "us") is operated by Random Shenanigans. This policy explains what we collect, what we don't, and how your API keys are handled. We built TKN to protect your wallet — protecting your data is part of the same job.

▌ What this actually means

By default, your provider API keys never leave your device. They live in the iOS Keychain behind Face ID, and TKN calls OpenAI, Anthropic, xAI and Google directly from your phone. We are not a proxy — your model calls do not pass through us, so we cannot see your prompts or your responses. There is exactly one exception, and it is opt-in: if you turn on Pro background alerts, we need your keys server-side (encrypted) to poll your spend while the app is closed — that is spelled out in §4, and you can turn it off and delete them at any time. Beyond that we hold an account email and your subscription status, only if you create an account.

1. The short version

Your provider API keys are stored on your device (iOS Keychain), encrypted and behind Face ID. By default they are never sent to our servers — the only exception is if you turn on Pro background alerts (see §4).
We do not sell your data, and we do not use your keys to generate content or incur charges.
If you create an account we collect your email; if you subscribe we receive your purchase status. That's it.

2. Data you provide

API keys. Stored encrypted in your device's secure storage (iOS Keychain). Used to read billing/usage data from your providers and, if you trigger it, to disconnect or revoke a key. Not transmitted to us unless you enable Pro background alerts (§4).
Account information (if you create an account): your email address and authentication identifier, used to sign you in and sync settings.
Spend rules and preferences, stored to run your alerts.

3. Data collected automatically

In the app: nothing. TKN contains no analytics or advertising SDKs. We do not track you across other apps or websites, and we do not use advertising identifiers. Apple and our backend provider may generate standard, non-identifying operational logs (such as crash diagnostics) outside of our control.

On this website: we run privacy-focused analytics on our own infrastructure (analytics.youforgot.marketing) to count page views and see which pages people find useful. It is self-hosted, so the data is not shared with an ad network or a third-party analytics vendor, and there is no cross-site tracking or advertising profile. This applies to gettkn.app only — not to the app.

4. Push monitoring (Pro)

If you enable background spend monitoring, TKN may store your encrypted keys on our infrastructure so it can poll your providers and alert you while the app is closed. In that case the keys are encrypted at rest, scoped to billing where the provider allows it, and used solely to compute your spend and fire your alerts. You can disable monitoring and delete stored keys at any time.

5. Third parties

Your AI providers (OpenAI, Anthropic, Google) — TKN talks to their APIs on your behalf using the keys you provide.
Apple — app distribution and in-app purchases.
RevenueCat — manages your Pro subscription; receives an app-specific user id and your purchase history.
Supabase — our backend and auth provider, used for accounts (email + sign-in identifier) and, if you enable it, push monitoring.

TKN is not affiliated with, endorsed by, or sponsored by OpenAI, Anthropic, or Google.

6. Retention & deletion

Local data is removed when you delete a key or uninstall the app. If you have an account, you can delete it and all associated data from in-app Settings, or by emailing us. See Support for step-by-step deletion instructions.

7. Children

TKN is a developer tool not directed to children under 13, and we do not knowingly collect their data.

8. Changes

We'll update this page and the "last updated" date when our practices change. Material changes will be surfaced in the app.

9. Contact

Questions? support@gettkn.app.