Privacy Policy

AIWatch ("we", "us") is operated by Product Design Experts. AIWatch shows you how fast your Anthropic API account is spending money. This policy explains what we collect, why, and what you can do about it. It applies to the AIWatch website at aiwatch.guru and the AIWatch mobile apps.

Two ways to use AIWatch

When you set up AIWatch you choose where your Anthropic Admin key and your usage history are stored:

• Only on your device: the key and all history stay on your phone or computer. Nothing is sent to us. No account is needed and none of the "account data" below applies. The app talks directly to Anthropic's API.
• On our cloud: you create an account, give us your Admin key, and our server polls Anthropic for you around the clock and stores your usage history so it is available on every device you sign in on.

Information we collect (cloud accounts)

• Account details: your email address, the name you enter, your time zone, and a hashed (bcrypt) version of your password. We never store your password in clear text.
• Your mobile number, if you choose to give one (US numbers only for now). We use it to text you verification codes, password-reset links and, if you opt in, alerts. You can remove it at any time.
• Your Anthropic Admin key (and, if you add one, your Grok session): stored encrypted at rest with a server-side master key that is not kept in the database. It is decrypted in memory only while polling or verifying it. We display only a masked hint (first and last few characters).
• Usage history: per-minute cost and token totals from Anthropic's Usage API, broken down by model and by API key id, plus the names and status of your API keys as reported by Anthropic. We do not receive or store the content of your prompts or completions; the Usage API does not expose them.
• Support messages you send us and our replies.
• Security and audit records: sign-in times, IP address, actions such as password changes, and the delivery status of emails we send you.
• Technical data needed to run the service: session cookies and rate-limit counters (IP address and timestamp), kept briefly.

How we use it

• To poll Anthropic on your behalf and show you your spend, gauges, charts and per-key breakdowns.
• To sign you in, verify your email, reset your password and secure your account.
• To tell you when your key stops working, and, if you opt in later, to alert you when spending crosses your thresholds.
• To answer your support requests.
• To detect abuse and keep the service running.

What we do not do

• We do not sell or rent your data. We do not use it for advertising. We do not use analytics or tracking cookies.
• We never use your Admin key for anything other than reading usage data on your behalf. We do not create, modify or delete anything in your Anthropic organization.

Service providers

We use a small number of providers to run AIWatch. Each receives only what it needs:

• Anthropic (api.anthropic.com): we call their Usage Admin API with your key to fetch your usage totals.
• Resend: delivers our emails (verification codes, password resets, support replies, key alerts). They see your email address and the message.
• Esendex: delivers our text messages (verification codes, password resets, alerts) when you have given a mobile number. They see your number and the message.
• Our hosting provider stores the servers and database. Nightly encrypted backups are kept off-site.
• Apple and Google distribute the mobile apps under their own policies.

Retention

• Usage history is kept for 400 days and then deleted automatically.
• Account details and your encrypted key are kept until you delete them or your account.
• Verification codes and reset links expire within an hour and are purged within a day. Rate-limit records are purged within an hour. Sessions end when you sign out or after ten years of inactivity.
• Audit and email-delivery records are kept for up to a year.

Deleting your data

You can remove your Admin key at any time from the Providers page or the app; polling stops immediately. You can delete your whole account from the Account page or in the app under Account → Delete account. Deletion removes your account, keys, usage history, support tickets, sessions and app tokens right away. Backups age out within 30 days. You can also email support@aiwatch.guru and we will do it for you.

Your choices

• Choose "Only on your device" and we never receive anything.
• Replace your Anthropic Admin key with a dedicated, expiring key so you can revoke it independently. We recommend this during setup.
• Change your email, mobile number, name, time zone and password on the Account page, and choose whether codes and alerts come by email, text, or both. You can sign out of every device at once.
• Request a copy of your data by emailing support@aiwatch.guru.

Text messages

If you give a mobile number we send only the messages you trigger or opt into: verification codes, password resets, and alerts you turn on. Message and data rates may apply. Reply STOP to any alert text or remove your number on the Account page to stop texts; codes you request yourself will still be sent when you ask for them.

Cookies

The website uses one session cookie to keep you signed in and small preference cookies for the dashboard window and chart choices. There are no advertising or third-party cookies, so we do not show a cookie banner. The mobile app stores your sign-in token and preferences on your device only.

Security

All traffic is encrypted with HTTPS. Passwords are hashed with bcrypt. Provider secrets are encrypted at rest. The database is not reachable from the internet. Access to production systems is limited to the people who operate AIWatch. No system is perfectly secure; if we learn of a breach affecting your data we will notify you by email.

Children

AIWatch is a tool for people who administer an Anthropic organization and is not directed at children under 16. We do not knowingly collect their data.

International users

Our servers are in the United States. If you use AIWatch from elsewhere, your data is processed there. Where local law grants you rights to access, correct, export or erase your data, you can exercise them through the Account page or by emailing support@aiwatch.guru.

Changes

When we change this policy we update the date above. For material changes we will email account holders before the change takes effect. Continued use after that date means you accept the new policy.

Contact

Questions or requests: support@aiwatch.guru.