How we handle your credentials

The core posture is simple: we never hold your provider secret. On the API path it is supplied per request (an API key header, or an OAuth bearer you already hold) and forwarded to the provider, never written to our storage. On the subscription paths your Claude sign-in never leaves your device: Tidbit routes traffic, it does not log in as you.

What we do keep#

• Metering records: the token counts used to compute your savings.
• Your API keys: hashed, so we can authenticate your client to the gateway.
• Device pairings: the record linking an installed device to your account, so you can see and unpair devices.
• Account and tenant metadata: who you are and which tenant you belong to.