My API is getting leaked.. need advice!

[novaphil]

Yes, you should make your openAI requests and store your key in some backend service, Firebase Cloud Functions is a good example.

API Key Management (unsure of where to start)

I’d probably start with looking at Firebase Functions unless you’re really excited about running your own servers. Example article on OpenAI on Firebase Restrict requests to your app Firebase security checklist