The mistake almost everyone makes.
The quickest way to put an AI assistant in a mobile app is to embed the credential in the app and let the phone call the AI provider directly. It works on the first try, it ships in an afternoon, and it means the key is now sitting inside an artefact that anyone can download and take apart. Keys extracted this way get abused at someone else’s expense, usually for weeks before anyone notices.
The design CHiiRO built does not do this: your phone talks to CHiiRO, and CHiiRO talks to the assistant, so the credential stays on our side.