Privacy Policy

Last Updated: 2025-07-29

Effective Date: 2025-07-29

1. Introduction

This Privacy Policy describes how LlamaPen API (‘we’, ‘us’, or ‘our’) collects, uses, and shares your personal information when you use the hosted service available at https://api.llamapen.app/ (the "Service"). This Service is only accessible via the official hosted instance of LlamaPen at https://llamapen.app/, and this policy applies specifically to that hosted API service, not to any self-hosted deployments or the open-source LlamaPen project.

LlamaPen is an open-source project with the source code available on GitHub. The official site at https://llamapen.app/ hosts one instance of the app which integrates the optional LlamaPen API. By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. You must be at least 13 years old to use this service.

2. What information we collect

During usage, we store/collect:

• Account info: Information provided by Google about your Google account, including your name, email address, and profile picture. We do not store your Google password or any other sensitive authentication data.
• Usage data: This includes remaining daily chat tokens and date of last chat message sent.
• Stripe billing: In the event you purchase a subscription, we may store metadata about your subscription, such as your customer ID, subscription ID, subscription status, subscription start date, current billing period start/end date, and type of payment method used. We do not store card/any other sensitive information on our own servers as this is handled by Stripe.
• Chat content: When you interact with the Service by sending messages or generating chat titles, the full content of your messages is included in API requests to generate a response. We do not store the contents of your messages on our servers. All chats are stored locally in your browser storage.

3. How we use this information

• Account info: Google sign-in integration is used to handle user accounts, and information about your account is used to personalise your experience on the app (e.g. displaying your profile information in the UI). Your email may also be used in case we need to contact you over matters regarding your account.
• Usage data: This is used to ensure each user stays within the usage limits for their tier. The date of your last message is used to reset your token allowance each day.
• Stripe billing: Your Stripe billing information is used to keep track of user subscription state. Additionally this information may be used to resolve issues with billing.

4. Third-Party Services and Data Sharing

Your information may be shared with third-party services essential to the operation of LlamaPen API.

We use:

• Supabase: Handles authentication and stores app-related user data (e.g. usage limits).
• Stripe: Manages subscriptions and billing. Stripe may collect and retain additional data per their own privacy policy.
• Fly.io: Provides cloud hosting and runtime for the LlamaPen API server.
• OpenRouter: We use OpenRouter to process and generate AI responses. The content of your chat messages is sent to OpenRouter to enable this functionality. Please review their privacy policy to understand how they handle this data.

We do not sell your personal information to other third parties.

5. Your rights

You may delete your account with us at any time. When you do, we will promptly delete any personal information stored on our servers. Please note that third-party services we use such as Stripe may retain certain billing information for a period of time in accordance with their legal obligations. While we do not control the data retention policies of these third parties, we make reasonable efforts to ensure that any data we are able to remove is deleted.

You may also contact us at any time to request access to or correction of the personal data we have stored about you.

If you are located in the European Economic Area (EEA), you may have additional rights under the General Data Protection Regulation (GDPR), including the right to access, correct, or request deletion of your personal data.

6. Children's Privacy

LlamaPen API is not intended for use by individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will take steps to delete such information. If you believe that a child under 13 has used the service or provided us with personal data, please contact us at support@llamapen.app

7. Cookies

We use cookies to maintain persistent authentication across sessions on your browser. These cookies are strictly necessary for the operation of the Service and are not used for tracking or analytics. Preferences such as theme are browser-specific and we do not track them.

8. Changes to Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page. By continuing to use the Service after changes take effect, you agree to the updated Privacy Policy.

9. Contact

If you have any questions about this Privacy Policy, contact us at support@llamapen.app