Privacy Policy

This policy explains how TokenSmith ("TokenSmith," "we," "us") handles information when you use the TokenSmith mobile app, website, API, and related services.

Information we collect

• Account information: your email address, account identifier, authentication records, security information, and a profile name when supplied through an optional Apple or Google sign-in.
• User content: prompts, conversations, model responses, and feedback you choose to submit.
• Search information: search queries generated from a request when web search is used to answer it.
• Service and purchase records: model selections, token usage, timestamps, credit balance, purchase history, and subscription status. Payment-card details are handled by the payment provider and are not collected by the mobile app.
• Technical information: network and request information needed to operate, secure, and troubleshoot the service.

How we use information

We use this information to authenticate accounts, provide and synchronize conversations, route requests to the selected AI model, perform requested web searches, account for usage, prevent fraud and abuse, provide support, maintain security, and comply with law. We do not sell personal information or use it for cross-company advertising tracking.

Service providers and AI providers

TokenSmith uses service providers to operate the product, including Supabase for authentication and database services, Apple and Google when you choose their sign-in options, Cloudflare for network and API infrastructure, Stripe for web billing, and Brave Search for requested web results.

Before the mobile app sends your first message to an AI provider, it asks for your explicit permission. If you allow it, the message and relevant conversation context are sent to the provider of the model you select so that provider can generate a response. This content may include personal information you choose to enter. Depending on the selected model, the provider may be OpenAI, Anthropic, Google, xAI, Together AI, or another provider identified in the model picker. These parties process information under their own terms and privacy commitments as applicable.

You can withdraw this permission at any time from Settings → AI data sharing. After withdrawal, TokenSmith will not send another message to an AI provider unless you explicitly allow it again.

Retention and deletion

Account information and synchronized conversations are retained while your account is active. You can permanently delete your account from Settings → Delete account in the mobile app. Deletion removes the account and associated conversations, API keys, generated media, remaining TokenSmith credits, and active TokenSmith billing relationship, except records we must retain for legal, tax, fraud-prevention, dispute, or security purposes.

Security and international processing

We use administrative, technical, and organizational safeguards designed to protect information. Information may be processed in countries other than your own, subject to applicable safeguards. No system is completely secure, so we cannot guarantee absolute security.

Children

TokenSmith is not directed to children under 13, and we do not knowingly collect personal information from children under 13. Additional regional age requirements may apply.

Your choices and rights

Depending on your location, you may have rights to access, correct, export, object to processing of, restrict, or delete your personal information. To make a request, delete your account in the app or contact us. We may verify your identity before completing a request.

Changes

We may update this policy as TokenSmith changes. We will post the updated policy here and change the date above. Material changes may also be communicated in the service.