Tokenly

Privacy Policy

Last updated: 24 June 2026

Tokenly is local-first. It tracks your AI subscription and API usage on your own device. Your provider keys, tokens, prompts, and usage content never reach us. We don't run servers that see your AI activity.

Canonical URL: this policy is canonical at https://macsiem.dev/tokenly/privacy/. Older GitHub Pages mirrors, if present, should be treated as deprecated and redirected here.

Who we are

Tokenly is developed and published by Maciej Siemiński for the App Store, macOS distribution and public website. If Tokenly is distributed through Google Play, the data controller for that Android version is LICENCEPRO POLSKA Sp. z o.o., ul. Huculska 6, 00-730 Warsaw, Poland. Contact for both variants: [email protected].

What stays on your device

Provider credentials you add (API keys, OAuth tokens, session cookies) are stored only in your operating system's secure store (Apple Keychain). They are never transmitted to us.
Your usage and spend figures are computed locally from the provider APIs you connect (e.g. OpenAI, Anthropic). Prompt content is never read or stored.
Budgets, settings, and widget preferences are stored locally.
The Free tier requires no account and works fully offline.

Optional cross-device sync

If you pair the iOS app with the macOS app, a usage snapshot can be mirrored between your own devices:

On your local Wi‑Fi, the snapshot is fetched directly from your Mac — it does not leave your network.
Off‑network, an encrypted snapshot may be placed in your own iCloud account, and/or relayed through an encrypted endpoint. The snapshot is encrypted on your Mac with a key only your paired devices hold; the relay only ever sees opaque, non‑identifying identifiers and ciphertext — never your keys or usage content.

Premium licensing

Premium is sold through Polar (our Merchant of Record), which handles payment, invoicing, and tax. License activation is validated by a Cloudflare Worker that sees only an opaque account identifier and your license key — no name, email, or usage data. Payment details are handled by Polar/Stripe and are never seen by Tokenly. Depending on the distribution or payment path, LICENCEPRO POLSKA Sp. z o.o. may be the merchant/account entity for Polar or Google Play operations.

Diagnostics

To keep the app stable we use crash and error diagnostics (Sentry). These reports contain technical information about a crash (e.g. app version, device model, stack trace). They do not contain your provider keys, prompts, or AI usage content.

What we do not do

We do not sell or share your data.
We do not use third‑party advertising or tracking SDKs.
We do not read your prompts, chats, or generated content.
We do not require an account to use the core app.

Your choices & rights

You can remove any connected provider (which deletes its stored credential), turn on Privacy Mode (which blanks values on widgets and the lock screen), delete the app (which removes all local data), and disable optional sync. For any request regarding your data, contact [email protected].

Children

Tokenly is a developer/productivity tool and is not directed at children under 13.

Changes

We may update this policy as the app evolves. Material changes will be reflected here with a new "Last updated" date.