Privacy policy

What we read

The TokenFlexing CLI reads files on your machine where AI tools (Claude Code, Codex, Cursor, OpenCode, etc.) record token usage and model names. We never read your prompts or completions. The CLI parses only the structured usage blocks each tool writes.

What we store

If you pair your machine with an account, we store on Supabase:

• · Your email address and (if you set one) a password hash
• · Aggregated stats per source: token counts, model names, dollar estimates, sync timestamps
• · Optional metadata you set: handle, display name, bio, privacy level

We do not store individual prompts, responses, file paths, or anything that would identify what you're working on.

Public vs private

New accounts default to public. You can switch to aggregate-only (totals only, no per-model breakdown) or private (profile hidden) from your settings page at any time.

Subprocessors

• · Supabase — auth + Postgres database
• · Vercel — hosting + CDN
• · Resend — transactional email (magic links, password resets)

Your rights

Delete your account from /settings at any time — all rows referencing your user_id cascade-delete automatically. Email questions to khadinakbaronline@gmail.com.