Terrific
整体使用不错，但千万不要暂临时断开codex的链接
Response from developer
你好 目前临时断开是对于整个服务断开的，后续我看看做成单独单个账号的断开。而且应该不会无法恢复，我再排查一下，感谢反馈。
反重力argon模型不能显示
图标可以支持white/dark切换吗？目前只有一种黑色图标
Very well made up, but needs more clarity and transparency regarding handling keys.
Seems to hit every requirement, but this is the most important one, in my opinion. In the paragraph, there needs to be total and absolute transparency on how things are handled. Make it auditable. Respectfully, there's too much security risk, with or without keychain, for someone to hand over all their accounts. I'm not accusing or alleging anything. All I'm saying is there are a lot of companies all over the world and individuals that specialize in getting people to give them their accounts. Perhaps not to do anything nefarious, but to use it to extract data, siphon off tiny bits of usage. There's a million reasons why you wouldn't want to hand over your very valuable subscriptions.
The developer is from China, and I have nothing but tremendous fanfare for what the Chinese companies are doing, the open models. That doesn't really play a factor for anyone who's even thinking that. What does play is we need more transparency. I don't care where the person's located, what government, what private corporation it is. If I'm going to hand them my account login, even just for a moment, and if it's not directly the model provider, then I better well know who the heck it is and how their software works.
Response from developer
Thank you for this thoughtful review. You’re right that people should know exactly where their accounts go, so here is how Nowdex works: • Sign-in happens on the provider’s own page (Apple’s secure sign-in sheet on iPhone, your browser on Mac). Nowdex never sees your password. The provider issues a token, and Nowdex uses it only to read your usage and limits. • Tokens and API keys are stored in the system Keychain on your device. They are sent only to the provider they belong to, for example chatgpt.com and openai.com for Codex, or anthropic.com and claude.ai for Claude. They never pass through a Nowdex server. • There is no analytics, ad or crash-reporting code. Our own server only provides the list of gateways and receives problem reports you choose to send, with credentials removed. Purchases are checked through the App Store and RevenueCat with an anonymous ID. • Gateways such as PackyAPI or a NewAPI site are run by third parties, not by us or the model provider. Their keys go only to that gateway. You don’t have to take our word for it. Turn on App Privacy Report (Settings › Privacy & Security), use Nowdex for a while, and it will list every domain the app contacted. Your feedback also made us realize this wasn’t clear enough in the app itself. The next update adds a page that shows, for each account, exactly which domains its credentials are sent to. Questions are always welcome at hi@taonan.lu.
