Privacy Policy
Your usage data
stays yours.
Effective October 15, 2026. This policy explains what Usages accesses, what stays on your device, the little that leaves it and why, and how you can remove it.
- Keychain protectedCredentials never leave your device
- No accountNothing is tied to who you are
- No trackingNo ads, nothing sold
01Operator and contact
Usages is operated by Zixi Yang.
For privacy questions, use the Usages support page. Do not include passwords, OAuth tokens, or API keys.
02Information handled by the app
- OAuth access and refresh tokens, or Admin API keys, for providers you choose to connect.
- Provider account information returned by that provider, such as an account email, plan name, quota status, reset times, banked limit resets, usage by model, token totals, and cost summaries.
- Usage history and preferences generated while you use the app.
- Usage log files you explicitly select for import.
03How information is used
Usages uses this information only to authenticate requests you initiate, retrieve usage information from the selected provider, display dashboards and widgets, calculate summaries, and send the alerts you switch on.
Usages does not send prompts, run code, spend a banked limit reset, change a provider plan, or make purchases on your behalf.
04On your devices
OAuth tokens and Admin API keys are stored in the iOS Keychain using this-device-only protection. They are not copied into widget data, not synced, and never sent anywhere except to the provider they belong to.
Usage history, settings, alert preferences, and imported summaries are stored on your device. Imported files are reduced to timestamps, model names, token totals, and calculated cost summaries; prompt and response content is not retained by Usages.
If you turn on iCloud sync, daily usage summaries and the latest quota readings travel between your own devices through your private iCloud database, which the operator cannot read. Credentials are never synced.
When you connect or refresh a provider, your device communicates directly with that provider over encrypted connections. No Usages server sits in between.
05What leaves your device
Usages has no accounts and never asks who you are. A few features need a server; each is described here with what it sends.
- Server alerts (Privacy & connections, on by default, and only used while a daily reminder, quota, forecast, or goal alert is on): so these alerts arrive on time when the app is closed, your device uploads a random install identifier, its push notification token, the app version, your time zone, your alert settings, and for each quota window the provider and window name, percent used, reset time, and run-out estimate, plus today's token total. Never credentials, account emails or names, prompts, or model names. Turning server alerts off, or turning those alerts off, deletes this record from the server.
- Crash reports and anonymous usage events (Privacy & connections, both on by default): crash reports and performance traces through Sentry, and events that name what was done, such as a screen opened or a plan chosen, through PostHog under a random install identifier with no profile. Neither includes credentials, account emails, usage figures, log contents, screenshots, or the text of your notifications.
- Feedback you send from Settings: your message, the app version, and the device model. No account or contact detail is attached; if you would like a reply, write through the support page instead.
- Share links: when you choose Copy Link on a share card, that card's image is uploaded and anyone with the link can view it for 30 days.
- Purchases are handled by Apple. Usages verifies them on your device and does not receive your payment details.
06Tracking and advertising
Usages contains no advertising and no cross-app tracking. Nothing above is linked to your identity, and the operator does not sell or share personal information.
07Third-party services
A provider you connect processes authentication and usage requests under its own terms and privacy policy.
Usages relies on these services to run the features above: Supabase (server alerts, feedback, and share links, hosted in the United States), Apple (push notifications, iCloud, and purchases), Sentry (crash reports), and PostHog (anonymous usage events, United States).
Usages is independent and is not affiliated with, endorsed by, or sponsored by Anthropic, OpenAI, Anysphere, Google, xAI, Zhipu AI, Moonshot AI, or other providers.
08Notifications
Alerts you switch on are scheduled on your device. With server alerts on, the daily reminder, quota thresholds, run-out forecasts, and the daily goal are sent from the Usages server through Apple's push notification service instead, and the server may send a silent notification asking the app to refresh its numbers. Notification text is written by the app and the server; it is not shared with anyone else.
09Retention and deletion
Information on your device remains until you disconnect a provider, use Settings → Clear local data, or remove the app. Provider-side account information must be managed with the provider.
On the server, a server-alerts record is deleted when you turn server alerts off, or automatically after 45 days without an update; the record of which alerts were sent is kept for 14 days. Share links expire after 30 days. Feedback is kept while it helps improve the app; since it is not tied to you, ask through the support page and quote your message if you want it removed.
10Children
Usages is a developer utility and is not directed to children.
11Changes
This policy may be updated when the app's data practices change. The effective date above will be updated with any revision.