Privacy, in plain terms
What data exists, where it goes, and what we can — and can’t — see. Written to match how the software actually works.
LLMMeter shows how much of your AI coding-tool allowance is left and, with the optional desktop companion, your measured token usage and estimated spend. This policy explains exactly what data is involved — no vague reassurances. In it, “we” and “us” mean the developer named under Contact, who is the data controller.
To show your remaining usage, you sign in to each AI coding tool with that provider’s own account. The resulting credentials are held in your device’s secure store (iOS Keychain) and are sent only to the issuing provider to read your quota. They’re destroyed when you disconnect that tool. We never receive them.
The app contains no analytics or advertising SDKs. If that ever changes, this policy and the App Store privacy labels will be updated before release.
If you install the optional desktop companion, it reads your local Claude Code and Codex log files to compute a content-free snapshot: token counts per model and tool, and reset boundaries. The log readers parse only numeric usage and model-ID fields, so prompt text, code, and responses are discarded at read time and never included. You can inspect the exact snapshot yourself by running the companion with -print.
The companion encrypts the snapshot to your phone’s key (NaCl box: X25519 + XSalsa20-Poly1305) before anything leaves your computer, then hands the ciphertext to a small relay. Your phone fetches and decrypts it. The relay is zero-knowledge — it stores and forwards opaque ciphertext and holds no decryption keys.
The relay never sees
The relay only sees
This technical metadata is inherent to running any network service and is used only to operate and protect it (for example, rate-limiting to prevent abuse). For users in the EU, it is processed on the basis of legitimate interest in operating and securing the service. We don’t build profiles from it or share it, except as needed to run the service or comply with law.
On your devices: provider credentials until you disconnect; last-known usage cached for offline display.
On the relay: only the latest encrypted snapshot and pairing record, deleted automatically after 24 hours (or sooner when overwritten).
The relay runs on Google Cloud (Cloud Run + Firestore) in the European Union and stores only the encrypted, content-free data described above. The apps are distributed through Apple’s App Store and TestFlight. Google and Apple act as infrastructure providers under their own data-protection terms; because the relay’s payload is end-to-end encrypted, none of them can read your usage.
You can run your own relay and point the companion at it, in which case no data — not even metadata — reaches our infrastructure. A LAN-only relay keeps everything on your own network.
You’re always in control: disconnect any provider in the app to destroy its stored credentials, stop or uninstall the companion to end all syncing, or self-host to keep everything on infrastructure you control. Given the end-to-end design, there is very little about you for anyone to hold; EU users may contact us about their data at any time.
LLMMeter is a developer tool, rated 4+ because it contains no objectionable content. It is not directed to children.
We’ll post any changes to this policy here and update the date above. Material changes to what data is involved will also be reflected in the App Store privacy labels.
If you’re in the EU/EEA or a region with comparable laws, you have the right to access, correct, delete, or restrict processing of your personal data, to object to processing, and to data portability. Because of the end-to-end, content-free design, we hold almost nothing that identifies you — mostly transient technical metadata that auto-expires within 24 hours — so in practice there is very little to act on. To exercise any of these rights, or to ask a question, use the contact below.
You also have the right to lodge a complaint with a data-protection supervisory authority. In Portugal, that is the Comissão Nacional de Proteção de Dados (CNPD).
Questions about this policy or your data? Get in touch:
Found a security issue? Please report it privately to: