Publisher and contact
TokenUsage is operated by Jasper Huang (Jiaqi Huang). Contact hi@jqhuang.com for privacy requests. Updated 21 October 2026, describing the current test version, 0.7.2.
Information on your device
Account names, providers, groups, display preferences, usage snapshots and manual expense records are stored locally. Service keys, access tokens and OAuth credentials are stored in the system Keychain. Some web connections use a separate persistent WebKit data store per account. System-browser sign-in state is managed by the operating system.
Connections to providers
Adding, authorizing or refreshing an account connects directly to the selected provider over HTTPS. Requests include credentials and scope or organization/workspace identifiers when required. Providers receive connection information such as your IP address and handle sign-in and queries under their own policies. Provider websites and system authorization pages also follow those policies. We do not promise that providers retain no logs.
Developer handling
The current app has no developer-operated account backend or data relay, advertising, behavioral analytics or tracking SDK. Credentials and usage history are not uploaded to the developer. If you contact support, we receive the messages and attachments you choose to send for handling your request. Never send passwords, API keys, cookies or full authorization tokens. You may request deletion of messages you sent by contacting the address above, except information still needed to handle your request or meet legal retention requirements.
Widgets and files
Widgets read only display summaries from the shared App Group: account names, services, readings, times and status, without credentials. A file is read only after you select it; the app keeps usage summaries and the file timestamp rather than uploading the full file.
Retention, backup and deletion
Automatically refreshed history is generally limited to 90 days and 2,000 snapshots per account; retention also varies by record source. Metadata and other local files may be included in operating-system backups according to your settings. Keychain credentials use device-only protection available after first unlock; migration to another device is not promised. Deleting an account removes its local credentials, separate web store, history and manual expenses. Retry if deletion reports a failure. Local deletion does not revoke provider authorization or clear system-browser state.
Your choices
Stop refreshing, edit or delete an account, or revoke access in the provider’s settings. TokenUsage has no online account of its own. Contact the address above for privacy or support-message deletion requests. Manage operating-system backups and third-party retention through the relevant platform or provider.
Purchases and changes
Payments and restore use Apple StoreKit 2. The app and widgets verify Apple transactions and keep minimal signed transaction evidence in the local App Group for status coordination. It is not uploaded to the developer; there is no developer payment database. A normal local switch cannot permanently unlock the production app. StoreKit’s on-device transaction cache supports offline verification. Temporary uncertainty is not a refund, and one failed check does not revoke already verified access. Confirmed revocation applies free-tier rules while retaining accounts, history and saved alert overrides. Real sales remain disabled. A dedicated development build can simulate access without a charge or Apple order.
Exports and diagnostic summaries
Settings → Export history as CSV saves existing readings for one or all accounts for free. Files include account names, services, UTC capture times, raw values and units, without credentials. This is not a billing statement or restorable account backup. Support lets you preview, copy or share a diagnostic summary containing only versions, service, connection status and the last data time, without account names, balances or credentials. Nothing is exported or sent automatically. Review the content before sharing.
TokenUsage