Privacy Policy

TokenWatch for macOS · Last updated: March 2026 · Version 1.0

The short version:

TokenWatch does not collect, transmit, or share any personal data with the developer or any third party.
All data stays on your device — in the macOS Keychain and local app storage.
Network requests go directly from your device to Anthropic's services, using your own credentials.
There are no analytics, trackers, advertising SDKs, or crash reporters in the app.

1. Who We Are

TokenWatch is an independent macOS application developed by Gökhan Gökova ("developer", "we", "us"). The app is a menu bar utility that helps you monitor your Claude.ai subscription usage and optional API costs. TokenWatch is not affiliated with or endorsed by Anthropic, PBC.

2. Data Collected and Stored

TokenWatch stores the following data locally on your device only. None of this data is accessible to the developer.

What	Where stored	Why	Shared?
Claude.ai organization ID	macOS Keychain	To fetch your usage data without re-login on every launch	No
Anthropic Admin API key (optional)	macOS Keychain	To retrieve cost reports when you enable cost tracking	No
Claude.ai session cookies	WebKit data store (system)	To maintain your login session across app launches (managed by macOS, same as Safari)	No
App preferences (refresh interval, menu bar color, alert threshold)	UserDefaults (local)	To restore your settings between sessions	No
24-hour usage history snapshots	UserDefaults (local)	To render the sparkline usage chart in the menu bar popover	No

3. Data We Do Not Collect Important

TokenWatch does not collect or have access to:

Your name, email address, or any account credentials
The content of your Claude.ai conversations or prompts
Your IP address or location data
Device identifiers or hardware information
Crash logs or diagnostic reports
Usage analytics or behavioral data

There is no developer-operated backend server. No data is ever sent to a server controlled by the developer.

4. Network Requests

The app makes outbound HTTPS requests directly from your device to the following Anthropic-operated services, using your own credentials:

claude.ai — to read your subscription usage data (session percentage, weekly model limits) via the embedded browser session you establish. All requests are authenticated with your own session cookies.
api.anthropic.com — only if you choose to enable optional cost tracking by providing an Anthropic Admin API key. Requests are read-only (billing cost reports). The key is used solely for this purpose.

No request content, response data, or metadata is routed through or logged by any server operated by the developer.

5. Third-Party Services and SDKs

TokenWatch has zero external dependencies. It is built entirely using Apple-provided frameworks: SwiftUI, WebKit, Foundation, Security, and ServiceManagement. No third-party SDKs, analytics libraries, advertising networks, or crash reporting services are included.

6. Data Retention and Deletion

All locally stored data is deleted when you:

Use the "Log out" option in Settings — removes session data and organization ID from the Keychain
Use the "Remove" option in API Cost Tracking settings — deletes the Admin API key from the Keychain
Uninstall the app — removes all UserDefaults data and the app sandbox container

Keychain items associated with the app can also be removed manually via Keychain Access.app by searching for "com.gokhangokova.TokenWatch".

7. App Sandbox and Security

TokenWatch runs inside the macOS App Sandbox. The only entitlement requested beyond the default sandbox is outbound network access (com.apple.security.network.client), which is required to communicate with claude.ai and api.anthropic.com. The app does not access the file system, microphone, camera, contacts, or any other sensitive resources.

8. Children's Privacy

TokenWatch is not directed at children under 13 and does not knowingly collect information from children. Use of the app requires an active Claude.ai subscription, which itself requires users to comply with Anthropic's Terms of Service.

9. Changes to This Policy

If this Privacy Policy is updated in a material way, the "Last updated" date above will be changed and, where appropriate, users will be notified via the app's release notes.

10. Contact

If you have questions or concerns about this Privacy Policy, please contact:

Gökhan Gökova
support@gozyideas.com

TokenWatch is an independent utility and is not affiliated with, sponsored by, or endorsed by Anthropic, PBC. "Claude" and "Claude.ai" are trademarks of Anthropic, PBC. This app is provided "as is" without warranty of any kind.