Keys are stored on your machine only (engine data/, never in the repo) and used read-only to fetch balances. Revoke any time — here, or at the provider.