FlashTheSloth LLM Gateway Privacy Policy

Last updated: July 1, 2026

FlashTheSloth LLM Gateway is an administrative mobile application for managing an LLM Gateway deployment. This Privacy Policy explains what information the app processes and how that information is used.

Information We Collect

The app is intended for authorized administrators. When you use the app, the backend service may process information needed to authenticate your account and operate the management features, including:

• Account information such as your management user email address, name, role, and permissions.
• Authentication tokens issued by the backend after login.
• Operational management data displayed by the app, such as customers, API key metadata, provider status, usage summaries, and request logs.
• Technical request information needed to secure and operate the service, such as timestamps, request identifiers, status codes, and backend audit records.

Information Stored On Your Device

The app stores access and refresh tokens in the iOS Keychain so you can stay signed in securely. The app does not store provider API keys, backend secret keys, customer password hashes, or raw customer API keys. Raw customer API keys may be shown once when created and are not saved by the app after that display.

How We Use Information

Information is used to authenticate administrators, enforce permissions, display management data, operate customer and provider workflows, show usage and request-log information, and protect the backend service from unauthorized access.

Data Sharing

The app communicates with the configured LLM Gateway backend. We do not sell personal information. Data may be processed by infrastructure and service providers used to host, secure, monitor, or operate the backend. Data may also be disclosed if required by law or to protect the service, users, or the public.

Analytics And Tracking

The app does not include third-party advertising SDKs and does not track users across apps or websites. If backend monitoring or logging is used, it is used for security, reliability, debugging, and operational support.

Data Retention

Backend data is retained for as long as needed to provide the service, meet security and audit requirements, resolve issues, and comply with legal obligations. Keychain tokens remain on the device until logout, token expiry, app removal, or manual clearing according to iOS behavior.

Security

The app is designed to use HTTPS for backend communication and iOS Keychain for token storage. Access to management features is controlled by backend authentication and authorization. No method of transmission or storage is completely secure, but we use reasonable technical and organizational measures to protect the service.

Your Choices

You can sign out of the app to clear local authentication tokens. If you need account changes, access changes, or deletion of management account information, contact the service administrator for your LLM Gateway deployment.

Children's Privacy

The app is intended for business and administrative use and is not directed to children.

Changes To This Policy

We may update this Privacy Policy from time to time. The updated version will be identified by the "Last updated" date above.

Contact

For questions about this Privacy Policy, contact: yupenglyu@gmail.com.