my understanding is that terms of service would be helpful but not needed if someone trued to sue because you blocked access to the site. I would not expect ToS for a site like you are explaining, but if it did it would say "the web admin will ban you if you are naughty, you have been warned"

For privacy policy i think what you wrote to give us context is near perfect. Explain how your app stores data, be specific about encryption at rest and in motion. If your app is designed to hold name, email address, billing info you should highlight that in your policy. including a (monitored) contact email for questions would be nice, but not needed imo unless you are storing PII

This may not be the best advice, but it is what I did for a project that was required to have these statements. There are online templates and services that will create and host your terms and data privacy policy for free, with upgrades of you want more customized wording. The format is clunky and in my case allowed for more data collection than the app would ever actually do because I did not pay to customize it, but it serves the purpose. Termsfeed.com privacypolicygenerator.com You could just generate one to see the general idea and then customize it yourself if you don't need the hosting.

I guess LLMs are OK at this as most ToS and Privacy Policies have quite fixed formats.