Privacy Policy

This policy explains how Token Burn, operated by Chaos Realms (“Token Burn,” “we,” or “us”), handles information when you use our desktop, iPhone, iPad, website, account, and remote-connectivity services.

Information we handle

Account and identity information

We process your email address, sign-in challenges, account and session identifiers, account status, the product entry point you used, and security events needed to authenticate you and protect your account. We do not store your one-time code in readable form.

Devices and remote connectivity

When you connect devices, we process device identifiers and labels, device role and trust state, public cryptographic keys, key generation, connection and revocation state, channel identifiers, and bounded technical diagnostics. Remote relay infrastructure handles encrypted message envelopes and routing metadata needed to deliver them. Token Burn’s relay is designed not to read the plaintext content exchanged between trusted endpoints.

Membership and purchases

If you use a paid membership, we process your plan, entitlement, purchase and renewal state, provider transaction references, reconciliation status, and limited billing diagnostics. Apple processes App Store purchases under Apple’s own privacy policy. Dodo Payments may process direct desktop or web purchases under its own policy. We do not receive your full payment-card number.

Support and technical data

We process information you choose to send to support. Our infrastructure may also process IP address, request time, app version, device platform, response status, and privacy-bounded operational logs for security, reliability, abuse prevention, and troubleshooting. Product logs are designed to avoid message bodies, source files, passwords, tokens, and private keys.

How we use information

• Provide sign-in, trusted-device, remote-connection, membership, restore, and support functions.
• Protect accounts, enforce limits, prevent fraud and abuse, and investigate service failures.
• Operate, debug, and improve reliability and performance.
• Meet accounting, legal, tax, and platform obligations where applicable.

We do not sell personal information, run behavioral advertising, or use your private workspace content to train advertising models.

Service providers

We use infrastructure and payment providers only as needed to operate Token Burn. These currently include Cloudflare for network and relay infrastructure, Supabase for account data, an email-delivery provider for sign-in and support mail, Apple for App Store distribution and in-app purchases, and Dodo Payments for eligible direct purchases. Your own AI or developer-tool providers remain governed by the accounts and settings you configure with those providers.

Retention and deletion

Sign-in challenges and sessions are short-lived or revoked. Account and trusted-device data is kept while your account is active. You can permanently delete your Token Burn account inside the app; deletion removes the account and associated product data and revokes its sessions. Limited transaction, security, or reconciliation records may be retained in de-identified form where reasonably necessary for legal, fraud-prevention, or accounting purposes.

Deleting a Token Burn account does not itself cancel an Apple or other store subscription. You may cancel the subscription separately through the store. See our account deletion guide.

Your choices and rights

Depending on where you live, you may ask to access, correct, delete, or receive a copy of personal information, or object to or restrict certain processing. You can also revoke devices and sign out sessions in the product. Contact privacy@token-burn.com. We may need to verify your identity.

Security and international processing

We use access controls, environment separation, encryption in transit, endpoint cryptography, scoped credentials, and bounded logging. No system is perfectly secure. Our providers may process information in countries other than your own, subject to their safeguards and applicable law.

Children

Token Burn is not directed to children under 13, and we do not knowingly collect personal information from them.

Changes and contact

We may update this policy as the product changes. We will post the current version here and revise its effective date. Questions may be sent to privacy@token-burn.com.