What we store
The wallet you sign in with. API keys as salted hashes, with name, spend and dates. The $KEYFO balance we read for your allowance. Per call: time, key, model or tool, tokens, cost and status. An unfinished sign-in leaves its request on file.
What we don’t store
Prompts, replies and private keys.
Trial keys
For a trial key we keep your IP address to limit trial keys to 3 per visitor in 24 hours. The key itself stays in your browser tab until you close the tab or it expires.
Cookies and analytics
One cookie, kf_session, keeps you signed in for 30 days. It is HttpOnly. There is no analytics, no ad cookies and no tracking.
$KEYFO balance
Once $KEYFO launches, we read the $KEYFO balance of the wallet you sign in with once a day, at your first call or visit to the app, and keep it with that day’s allowance.
Server logs
Our server logs each request’s IP address as the server sees it, with the path and time. A path can include tool inputs such as a wallet address. API keys sent in a URL are removed before the log is written.
How long we keep data
We keep call records and trial key IP addresses to run keyfo, bill model calls and limit trial keys. Once a day we delete call records, trial keys with their IP addresses and allowance records older than 90 days. Other account data stays until we delete it. Server logs are kept by our hosting provider under its terms.
Onchain data
Trades, funding and $KEYFO purchases are public on Robinhood Chain, like any transaction.
Where requests go
Model requests pass through a model routing service to the provider of the model you pick, and each handles them under its own policies. Trade, funding and $KEYFO purchase requests, with the wallet addresses in them, go to LI.FI and Relay. Wallet balances are read from Robinhood Chain nodes.
Where data is stored
The server, database and logs run on a cloud hosting provider.
Your choices
Revoke any key you created in the app, and calls with it stop. Sign out to end your session in this browser. A trial key can’t be revoked: closing the tab removes it from this browser, and it expires within 24 hours.
Questions or data deletion requests: message @keyfomcp on X or write to support@keyfo.xyz.