Privacy at Fumes

Fumes is a Mac menu-bar app by Lakpa. It checks your AI subscription quota and estimates whether it will last until your next refill.

Your accounts stay on your Mac

Account names, quota readings, usage history and preferences are stored locally. Fumes uses provider CLIs or direct vendor quota endpoints to retrieve your account’s usage. Those providers process the requests under their own privacy policies.

For Grok, the App Store build reads the existing login file you select and sends its token only to Grok’s fixed billing endpoint. Fumes does not persist or log the token, refresh it, follow redirects with it, or send it to a Fumes server. Subscription keys you enter for Kimi or Z.ai are stored in macOS Keychain and sent only to the selected provider’s quota endpoint.

No prompts or conversations

Fumes does not generate AI responses or read your conversations. It uses quota and account metadata to show remaining usage and pace.

App Store purchases

Apple processes the optional one-time unlock. Fumes uses StoreKit’s verified transaction information to check purchase access and restore it. Fumes does not receive your payment-card details or send purchase information to a Fumes server.

Optional technical reports

When you enable “Share crash and error reports” in a build configured for reporting, Fumes sends technical reports to Sentry. These can include app and operating-system versions, crash stack traces, provider names and a category of refresh failure. Fumes removes account details, CLI output and other sensitive fields before sending. Network requests necessarily expose connection information, such as an IP address, to the receiving service.

You can turn reporting off in Settings. Turning it off stops future reports; it does not automatically erase reports already received.

Your choices

You can disable monitoring or remove an account in Settings. Removing a subscription-key connection also removes its saved key from Fumes’ Keychain service. Removing an account from Fumes does not cancel the provider subscription. Contact us if you need help clearing local app data.

This website

This site has no advertising. It counts visits with Vercel Web Analytics, which uses no cookies, doesn’t follow you to other sites and doesn’t store your IP address. Its hosting provider, Vercel, also processes technical request information to serve and protect the site.

Contact

For privacy questions, email matt@dafacto.com.