Privacy Policy

“AI limits” app (“Limites IA” in French) for iPhone, Mac and Apple Watch. Effective October 4, 2026.

In short. The developer collects no data: no server, no account with us, no analytics, no ads, no tracking. Your credentials stay in your device's keychain. The app only talks to the services you already subscribe to (Claude, Gemini) and, if you wish, to your own iCloud.

1. Who is responsible

The app is published independently by CAPCOD (contact@capcod.eu). It is not affiliated with Anthropic or Google. “Claude” is a trademark of Anthropic; “Gemini” and “Google” are trademarks of Google LLC. They are named only to say which services the app reads usage limits from.

2. What the developer collects

Nothing. The app sends no data to any developer-operated server (there is none), and includes no analytics, audience measurement, crash reporting or advertising tools or SDKs. The developer therefore has no access to your accounts, credentials or usage figures.

In-app purchase. The “Full access” purchase is handled by the App Store: the developer receives no payment method, identity or purchase history, only Apple's aggregated sales reports. To know whether the trial is running or the purchase is made, the app asks Apple (StoreKit) on the device and keeps the result locally.

3. What is stored on your device

Data	Where
Sign-in credentials: claude.ai session cookie, or Claude OAuth token if you pick that advanced option, or the Google token of the experimental “Code Assist” option	Device Keychain, accessible to the app and its extensions. Never displayed, never sent to the Watch, never written to iCloud or to the app's shared container.
Google (Gemini) session	The app's own WebKit web storage, one per account, on the device.
Account list (name you give, provider, sign-in method, claude.ai organization)	Local files in the app's shared container (used by the app, widgets, Watch and Siri/Shortcuts).
Latest readings (usage percentages, reset times) and up to 7 days of history for the chart	Same local files.
Settings (notifications, iCloud, Dynamic Island, etc.)	Local app preferences.

4. Network connections

The app acts on your behalf, directly from your device, with your own credentials, solely to read your usage limits:

Claude: claude.ai (sign-in page and your account's usage); api.anthropic.com if you use a Claude OAuth token.
Gemini: gemini.google.com (the /usage page) and Google's sign-in pages, loaded in a web view inside the app; cloudcode-pa.googleapis.com only if you enable the experimental “Code Assist” option.

These exchanges are governed by Anthropic's and Google's terms and privacy policies. The app calls no other domain and passes your data to no third party. Connections use HTTPS.

Sign-in happens on the official sign-in pages, in a web window inside the app: the app neither sees nor keeps your password. For Claude it detects the session cookie once you are signed in and stores it in the keychain; for Gemini the session stays in the app's web storage.

5. iCloud sync (optional)

By default, if you are signed in to iCloud, the app shares the account list and latest readings between your devices (iPhone, Mac, Watch) through the iCloud key-value store (NSUbiquitousKeyValueStore) tied to your Apple account. Synced: account name, provider, sign-in method, organization, percentages and reset times, a random installation identifier and the device type. Never: cookies, tokens, passwords, keychain items, the Google session, settings, history. This data is stored and encrypted by Apple in your iCloud; the developer has no access to it. You can turn it off in Settings (“Sync via iCloud”). Turning it off does not erase what was already written to iCloud.

Between iPhone and Apple Watch, accounts and readings (no secrets) travel locally through Apple's WatchConnectivity.

6. Notifications, widgets, Live Activity

Notifications (usage thresholds, resume) are local: scheduled by the app on the device, with no notification server. Permission is requested once and can be withdrawn at any time in system settings. Widgets, complications, the Dynamic Island (Live Activity) and Siri shortcuts read the local readings; they send nothing off the device. The pace forecast (“at this pace, limit reached around 4:20 PM”) is computed locally.

7. Retention and deletion

Deleting an account in the app erases its keychain entry (cookie or token), the matching web session, its readings and its history on the device, and propagates the deletion to your other synced devices (which also purge their local secrets).
Uninstalling the app removes local data. On iOS, keychain items can survive an uninstall; delete your accounts in the app first to erase them.
iCloud data can be managed or deleted in Settings > [your name] > iCloud (or System Settings on Mac).
You can also revoke the session on Claude's or Google's side by signing out of your devices on their sites.

Since the developer holds no data about you, there is nothing to ask the developer to delete or export; your rights of access, rectification and erasure (GDPR) are exercised directly on your device as described above.

8. Children

The app collects no data, including from minors. It is aimed at subscribers of AI services whose access is subject to their own age requirements.

9. Changes

Any change will be published on this page with a new effective date. If the app ever collected data, this policy would be updated before the release concerned.

10. Contact

Questions or requests: contact@capcod.eu. Never send credentials or screenshots showing tokens.