Privacy policy

Effective 28 October 2026. This policy covers the AI Limits apps for Mac, iPhone, iPad and Windows.

Signing in to your AIs

You sign in to each AI you choose (Claude, ChatGPT, Gemini, Cursor, Perplexity, Augment or Grok) inside AI Limits, on that AI's own sign-in page, shown in a built-in browser window. Your password goes only to that AI's provider; AI Limits never sees or stores it.

On iPhone, iPad and the Mac App Store version you can instead sign in in Safari and let the included AI Limits Safari extension hand the sign-in to the app. The extension runs only on the AIs' own websites (claude.ai, chatgpt.com, gemini.google.com, cursor.com, perplexity.ai, app.augmentcode.com and grok.com), and only after you turn it on and allow it there. When you're signed in to one of them in Safari, it copies that site's cookies to the AI Limits app on the same device, through Safari's extension messaging; they're saved in the device's Keychain (iPhone and iPad) or the app's private storage (Mac) and moved into the app's browser storage. It doesn't read or change those pages' content or anything on other websites, and it sends nothing anywhere else.

The sign-in is kept in the app's own browser storage on your device, separate from your normal browser. To refresh, the app opens the AI's usage page in a hidden built-in browser and reads only your usage figures there. Your sign-in never leaves that page. Signing out in Settings deletes that AI's sign-in and website data from the app.

What stays on your device

• Your settings, such as which AIs and stats to show and the theme.
• Your latest usage numbers, cached so the widget can show them straight away.
• Your sign-ins, in the app's own browser storage, as described above. On iPhone and iPad, a copy of your Claude, ChatGPT and Cursor sign-ins is also kept in the device's Keychain, on this device only and shared only with AI Limits' widgets, so they can update by themselves. Signing out deletes it.
• A claude.ai session key, only if you choose to paste one instead of signing in. It's stored in your Mac's Keychain (Windows: Credential Manager).
• A refresh log on Mac and Windows (~/Library/Logs/AI Limits.log, %LOCALAPPDATA%\AILimits\AI Limits.log) recording each refresh's percentages and any error. It never holds sign-ins.

Sign-ins the app can read from other apps

These are optional extras for people who use those apps. The app uses them only for an AI you haven't signed in to inside AI Limits, reads them where the other apps keep them, and doesn't copy or change them.

• Codex: the Codex app's sign-in and usage logs, in the .codex folder in your home folder. The Mac App Store version reads it only after you choose that folder in Settings. The Mac direct download and the Windows app read it automatically.
• Claude Code (Mac direct download and Windows only): Claude Code's login, if you've signed in to it. On a Mac it's in your Keychain; on Windows it's .claude\.credentials.json in your user folder. It's sent only to api.anthropic.com, to fetch your usage.
• The Claude desktop app (Mac direct download and Windows only): the usage-limit entries Claude records in its own logs during Cowork sessions. The app uses them only when it can't get live numbers from Anthropic, and reads nothing else from those logs.

None of this is sent to us. Deleting the app deletes its own data (a Windows copy run from a folder rather than installed from the Microsoft Store leaves %LOCALAPPDATA%\AILimits behind; delete that too), apart from a saved session key (Mac: Keychain item; Windows: Credential Manager entry), which you can remove first in Settings. The other apps' sign-ins and logs belong to those apps and stay as they are.

Who the app talks to

To show your usage, the app connects to each AI provider's own website with your own sign-in, plus any sign-in service you choose on its sign-in page (such as "Continue with Google, Apple or Microsoft", or your company's single sign-on). Those pages may load their own content from other servers, as they do in your browser.

• Anthropic (claude.ai, api.anthropic.com) for Claude
• OpenAI (chatgpt.com, and auth.openai.com when you sign in) for ChatGPT and Codex
• Google (gemini.google.com, and accounts.google.com when you sign in) for Gemini
• Cursor (cursor.com, and authenticator.cursor.sh when you sign in) for Cursor
• Perplexity (perplexity.ai) for Perplexity
• Augment Code (app.augmentcode.com, and its sign-in pages) for Augment
• xAI (grok.com, and accounts.x.ai when you sign in) for Grok

The built-in browser is the one your system provides: WebKit on Apple devices, Android System WebView on Android, and Microsoft Edge WebView2 on Windows, which is covered by Microsoft's privacy statement. On Windows, Microsoft Defender SmartScreen checks page addresses in the sign-in window, as it does in Edge.

The app reads only your usage figures, never your conversations. Those websites are covered by each provider's own privacy policy, and while a page is loaded the provider may set its usual cookies in the app's browser storage. These providers don't officially support third-party apps reading usage, so connecting an AI is at your own risk.

iCloud (Apple devices)

The Mac App Store version can also share your usage numbers with the AI Limits iPhone and iPad app through your private iCloud storage, for any AI you haven't signed in to on the phone. Only the numbers are shared, never sign-ins or session keys. The data is held by Apple under Apple's privacy policy, and we can't see it. You can turn this off in Settings → General → Show usage on iPhone.

Children

AI Limits isn't directed at children and collects no personal information from anyone.

Changes and contact

If this policy changes, the new version will be posted on this page with a new effective date. Questions? See the support page.