Privacy policy

The short version

SpendBar runs on your Mac and is sandboxed by macOS, so it has no access to your local files or personal data. It has no server, no account system, and no analytics. API keys stay in macOS Keychain, spend figures stay in local storage, and the app only connects to Anthropic and OpenAI to read billing data.

What SpendBar stores, and where

• API keys — stored in the macOS Keychain, the system's encrypted credential store. They never leave your machine except in the requests SpendBar makes directly to your provider.
• Spend snapshots — the most recent cost totals and the budgets you set are cached locally in the app's preferences so the bar can show a value the moment you log in. This stays on your device.
• Settings — your budgets, billing periods, alert preferences, and which accounts you've added are saved locally.

What SpendBar sends, and to whom

SpendBar makes network requests to exactly two destinations:

• api.anthropic.com — to read your Anthropic organization's cost report.
• api.openai.com — to read your OpenAI organization's costs.

These requests carry your admin API key for authentication, exactly as if you called the provider yourself. They are read-only: SpendBar never creates, changes, or deletes anything in your provider account. No request is sent to us or to any third party.

What we collect

Nothing. There is no SpendBar backend to collect it. We don't run analytics or crash reporting, we don't use cookies in the app, and we have no way to identify you or see your usage. We couldn't hand over your data if we were asked to, because we don't have it.

This website

This site is static. It does not set tracking cookies, load advertising, or run analytics scripts.

App distribution

SpendBar is developer signed and notarized by Apple. We also plan to make it available on the Mac App Store after Apple's review process.

Third-party services

When you use SpendBar, you're interacting with Anthropic and OpenAI under their own terms and privacy policies. Your relationship with those providers, and the data they hold about your account, is governed by them. SpendBar is just a local reader of the data you already have access to.

Your control

• Remove an account in SpendBar and its key is deleted from the Keychain and its cached spend is cleared.
• Revoke a key any time from your Anthropic or OpenAI console — SpendBar will simply stop being able to read that org's spend.
• Delete the app and its local preferences and Keychain entries go with it.

Changes to this policy

If this policy ever changes, we'll update the date at the top. Since the app collects nothing, we don't expect the substance to change much.

Contact

Questions about privacy or support? Email support@minilabs.cc.