Ok, so where are those tokens being minted? In the apps themselves? Who's buying them since they don't seem to be publicly buyable?

Because my concern would be that my journal/calculator/paint app are running CPU intensive mining with or without code injection and connecting to a large amount of foreign peers just for the sake of storing my data in storage I own...