Privacy Policy — Pocket Burn

Last updated: July 2026

1. No backend server for your LLM data Pocket Burn does not operate a server that stores or processes your Langfuse data. The app connects directly from your device to the Langfuse API you configure. Your trace, cost, and usage data from Langfuse never passes through, or is stored on, any server we control.

2. API credentials To connect to your Langfuse project, you provide a Project URL, Public Key, and Secret Key. These are stored only in your device's secure local storage (iOS Keychain / Android Keystore) and are used solely to make read (GET) requests to the Langfuse API on your behalf.

• Your keys are never transmitted to us or any third party other than Langfuse.
• You can delete your stored credentials at any time from the app's Settings screen, which immediately disconnects the app.
• Because Langfuse API keys are full-access by design, we recommend connecting a dedicated, monitoring-only Langfuse project to limit exposure.

3. Analytics We use PostHog to collect anonymous, aggregate usage events (app opened, key connected/failed, dashboard or tab viewed, manual refresh triggered). These events do not include your Langfuse credentials, project data, cost figures, or any content from your LLM traces. See PostHog's privacy policy for details.

4. Third-party services The app communicates directly with Langfuse, using the credentials you provide. Your use of Langfuse is governed by Langfuse's own privacy policy and terms.

5. Data you can delete Disconnecting your account from Settings removes your stored credentials and locally cached dashboard data from your device.

6. Changes to this policy If this policy changes, the "Last updated" date above will be revised. Continued use of the app after changes constitutes acceptance of the updated policy.

7. Contact Questions about this policy? Email [email protected].