What a Heavy AI Habit Actually Costs

A Claude Max subscription is the cheapest way to rent a frontier model right now. I can prove it with a month of my own usage: $4,932.91 of tokens at Anthropic’s published rates, on a A$160 bill. Seems a great deal, but the hidden cost is the data you hand over, and where it then sits. Everything you type into a closed model lives on servers you don’t control, under data terms the company writes and can rewrite, with no way to verify what’s kept or check what’s done with it.

The compute is subsidised and temporary. Handing your thinking to someone else’s infrastructure is the part that lasts.

Both halves of that are worth putting numbers to. I’ll price it in Australian dollars, since that’s the bill that hits my account, with the US figures in brackets.

The number, and how I got it

The figure comes from ccusage, a tool that reads Claude Code’s local logs and values every token at Anthropic’s own APIAPIApplication Programming Interface. A structured way for one piece of software to talk to another. In DeAI, APIs let applications request inference from a model without running the model themselves.Like a waiter in a restaurant. You don't walk into the kitchen and cook your own meal. You tell the waiter what you want, they tell the kitchen, the kitchen cooks it, and the waiter brings it back. The API is the waiter.Read more → rates. In July 2026 I put 5.45 billion tokens through Claude Code. At Anthropic’s published rates that’s worth $4,932.91. I pay A$160 a month for Claude Max 5x, the GST-inclusive Australian price of the US$100 tier. That’s about 44 times my money back on the cash I actually spend, and roughly 49 times against the US$100 sticker.

$4,932.91 is a floor, not a ceiling: it counts Claude Code only, and the web and desktop apps never expose token counts, so my actual usage is higher. The second caveat has nothing to do with the money. Claude Code was quietly deleting my own transcripts after 30 days until I changed a setting to keep them.

Hold that one. It comes back.

Why it’s this cheap

Anthropic is losing money on me, and it isn’t close. For a heavy user the flat subscription breaks, and the pattern is well documented across coding tools: the top tenth of users burns most of the compute, and a plan that prints money on a casual user runs deep in the red on a power user. TechCrunch flagged the thin margins across AI coding startups in August 2025, and Replit’s chief executive conceded flat-rate pricing was unsustainable before moving to usage-based billing.

The same holds at the company level. Anthropic told investors it expects to burn about $3 billion in 2026, down from roughly $5.6 billion in 2025, and to stop burning cash in 2027 (reported by The Information, carried via Reuters). Revenue is climbing fast. Today’s prices are still funded by investors, not by profit on the inference.

Fact: My July usage was worth $4,932.91 at Anthropic’s rates against a A$160 bill, and the company is burning billions a year while it grows. Take: That gap is the product. Frontier tokens are this cheap because someone else is paying the difference to win the market, which is a fine deal to take and a poor thing to depend on. A subsidised price is a promotion, not a floor.

What the same habit costs on the alternative

Move the habit to Venice and the economics flip in a way most people get wrong. Venice runs two separate surfaces. On its own hosted models, the open-weight ones like Llama, Qwen and DeepSeek, paid tiers give unlimited text in the web app with no per-token meter. On frontier closed models, premium media, and all API use, you pay per token in credits, even inside the chat app.

So Claude through Venice sits outside the unlimited bucket: it’s metered per token, at roughly 20% over Anthropic’s direct rate. Venice lists Claude Opus at $6/$30 per million tokens against Anthropic’s $5/$25. For frontier coding, Venice is the more expensive way to buy the same tokens, and I’m not going to dodge that.

The free-versus-paid line on Venice is precise, and worth getting right:

• Web app plus specific free models: no credit drawn. This is the only unlimited usage.
• Web app plus pay-per-use models (the frontier ones): credits drawn per token.
• The API, any model, open or closed: always metered. There is no free programmatic tier.

Generous as a chat app, metered the moment you build or code on it. That’s the shape of the thing.

Where the subscription can’t follow

On a closed model, your prompts sit under a policy. Anthropic’s is decent today: as of March 2026 it doesn’t train on consumer chats unless you opt in. But a policy is a promise the company can revise, safety-flagged conversations get reviewed, and you can’t independently check what’s retained or walk out with it. You’re trusting the terms, not verifying them.

Venice sells the opposite: privacy you can check. It runs four modes, and only one of them is the weak one you’d use for frontier tokens.

Private keeps inferenceInferenceRunning a trained AI model to produce an answer. Inference is what happens when you type a prompt into ChatGPT and get a response. The model takes your input, computes a best guess, and returns it.Like asking an expert for their opinion. The training was the decades they spent becoming an expert. The inference is the 30 seconds it takes them to answer your specific question.Read more → on zero-retention infrastructure. TEETEETrusted Execution Environment. A hardware-secured region of a CPU or GPU where code runs in isolation, so even the machine's operator can't read what's happening inside. TEEs give decentralised AI inference privacy guarantees.Like a bank vault inside a bank. The bank owns the building, staffs the lobby, and runs the security cameras. But what's inside the vault is invisible to everyone, including the bank staff, unless the customer opens it.Read more → runs it inside hardware enclaves with remote attestationAttestationA cryptographic proof that a piece of code is running on a specific hardware enclave in an unmodified state. Attestation lets remote users verify that a service is genuinely running what it claims to be running.Like a tamper-evident seal on a medicine bottle. The seal itself doesn't make the medicine safe, but it gives you a way to verify that nobody opened the bottle and swapped the contents before you bought it.Read more → you can check yourself. E2EE encrypts your prompt on your device, so neither Venice nor the GPU provider ever sees it. Anonymous, the mode that reaches Claude and GPT, only proxies you and hides your identity, which is why frontier privacy on Venice is thinner than the marketing implies.

Now remember Claude Code deleting my transcripts. That’s the small version of the same problem: on the closed stack, the terms of what happens to your thinking aren’t yours to set. On the private modes above, they’re enforced by architecture you can inspect rather than a policy page you have to trust.

Owning the access instead of renting it

The second thing you can’t rent is the access itself. With Claude Max you pay monthly for a seat, at a price Anthropic sets and can change. With Venice you can hold the access as an asset. StakeStakingLocking up a cryptocurrency to help secure a blockchain network, usually in exchange for rewards. The locked tokens act as a security deposit that can be taken away if the staker misbehaves.Like putting down a large rental deposit for an apartment. You get the money back if you behave, you earn interest while it's locked, and the landlord takes it if you trash the place.Read more → VVV and you get complimentary Pro for open-model chat, plus a share of DIEM, the platform’s credit. Each DIEM you stake is worth $1 a day of perpetual, renewing inference against any model, and you reclaim your stake when you exit.

That’s a real, if partial, form of owning your inference rather than renting it. You hold the key, it’s portable, and nobody can reprice it out from under you the way a subsidy can vanish.

It isn’t trust-free, and I won’t pretend otherwise. VVV and DIEM carry token-price and emissions risk, the staking yield comes from new supply, and you’re still relying on Venice to run the proxy honestly, since it controls the pipe and can block. So the claim is narrow: you own the access and can walk with it, not that you’ve escaped trusting anyone. On the closed subscription there’s nothing to own in the first place.

So, is Claude Max worth it?

On cash, obviously, and I’m keeping mine. For raw value it’s the best deal in AI right now, and it isn’t close. I’d tell any heavy user to take it while it lasts.

Just be clear about what “while it lasts” means. The price is a promotion funded by investor money, the privacy is a policy you’re trusting rather than checking, and the access is a monthly rental you can’t hold.

The durable bet is the other stack: open models for the unlimited work, private and attested modes when the content matters, and staked access you own and can carry. It costs close to market rate instead of a subsidised discount, and in exchange it’s private, portable, and yours. The cheapest tokens today and the ones you’ll still own tomorrow come from different places, and I know which one I’m building on.