Privacy

Privacy Policy

Last updated: 2026-06-11

Who we are

Tokenkarma is operated by Jean-Rémi Larcelet-Prost, an independent French developer (Auto-Entrepreneur, France). Contact: [email protected].

What we collect

Always (anonymous, aggregated)

  • Distribution of providers connected by our user base (e.g., "30% of users connect Claude")
  • App open frequency (anonymous count)
  • Which features are used vs ignored (anonymous count)
  • Crash reports with stack trace (no user content)
  • App version, macOS version, system language

AI analysis (paid tiers, with explicit consent)

  • LLM usage history: timestamps, token counts, model identifiers, provider names
  • This data feeds the AI analysis available on paid tiers

Never collected

  • Content of your prompts or AI responses
  • Cookies or auth tokens to LLM providers (these stay on your machine, encrypted in macOS Keychain)
  • Email addresses or identifiers from your AI provider accounts
  • Personally identifiable information beyond your Tokenkarma account email

Where data is stored

Tokenkarma's backend runs on Cloudflare infrastructure in the EU (West Europe region). Data is encrypted at rest and in transit. No data leaves the EU.

Your rights (GDPR)

You can:

  • Export all data we hold about you: GET https://api.tokenkarma.app/api/me/data
  • Delete all data we hold about you: DELETE https://api.tokenkarma.app/api/me/data
  • Withdraw consent for stats collection at any time via Settings → Privacy in the app
  • Contact us at [email protected] for any GDPR request

Emails we send

We use your account email for service messages: sign-in codes, billing receipts, and important changes to your account or this policy. These are required to operate the service.

If you create an account or join the waitlist, we may also send you occasional emails about tokenkarma itself: early access, new features, and tips. Every such email includes an unsubscribe link, and opting out never affects your account or the service emails above. We never sell your address or share it with third parties for their own marketing.

Subprocessors

  • Cloudflare (infrastructure, EU)
  • Stripe (payment processing, EU)
  • Anthropic (Claude API, used only for AI analysis on paid tiers, with consent)

Analytics cookies

We use Meta Pixel to understand which pages of this site perform well and to reach similar visitors with relevant ads. The pixel is loaded only after you accept via the cookie banner. You can opt out at any time by clicking the cookie icon at the bottom of any page.

Cookies set by Meta Pixel: _fbp, _fbc, fr. We do not store personally identifiable information beyond what Meta itself collects through their script.

Read more about Meta's data practices: facebook.com/privacy/policy .

Changes to this policy

We will notify you in-app and by email at least 30 days before any change that reduces your privacy.