Privacy

In short

Typoless corrects the text you are writing on your Mac. It has no account, no server and no analytics, and your text never leaves the machine. Three things do reach a network: an update check, which runs about once a day and which you can turn off, a download, and a bug report you submit yourself. Each one is described below.

The app

What it reads

The field you are typing in, at the moment you press the trigger, through the macOS Accessibility permission. Typoless reads nothing while you type, and no other field. It never reads a password field. It excludes terminals and password managers from the start, and you can exclude any other app.

Where the text goes

Into a language model running on your Mac: Apple's on-device model, or a model you chose to download. There is no upload, no API call and no server to receive one. Typoless works with the network switched off.

What is kept

• History. Typoless keeps recent corrections so you can undo them. In memory only, never written to disk, and gone when you quit.
• Settings. Typoless stores your preferences on your Mac, in the usual place for a Mac app, and nowhere else.
• Logs. The local log is off unless you turn it on. It stays on your Mac, in the system log, and is never sent anywhere.

Downloading a model

If you choose a downloadable model, Typoless fetches the weights from Hugging Face. That request goes to their servers and carries what any download carries, including your IP address. It happens only when you pick such a model, and never on your text.

Updates

Typoless checks typoless.app for a new version, about once a day. This is on from the first launch, and you can turn it off in Settings, where you can also check by hand instead.

Finding an update installs nothing. Typoless marks its menu bar icon and waits, and the version, the notes and the install button are all in a window you open yourself. Nothing is ever installed without you.

A check is one request for a file listing the versions. It carries the app's name and version and, like any web request, your IP address. Nothing about your Mac's hardware or software is collected or sent, and downloads come from the same site.

This website

The site is static and served by Cloudflare. It sets no cookies, runs no analytics script and loads nothing from a third party. Even the fonts come from this domain, because a font request would hand your address to someone else on every visit.

Cloudflare processes the ordinary request data it needs to deliver and protect the site, including your IP address, the address of the page and your browser's user agent. I see aggregate traffic counts produced from those logs, and nothing that identifies a visitor. The legal basis is Art. 6 (1) (f) GDPR, the interest being to deliver a working and protected website. Cloudflare acts as a processor under Art. 28 GDPR.

Downloads and update checks

Two things on this site are counted, and only as totals: a download of the app, and an update check by a copy of it. Each one records what happened, which file or version it concerned, the country Cloudflare has already derived from the address, and the number of bytes served. No address is stored, nothing is set in your browser, and nothing links one request to another or to you. It exists to answer how many people took the app and which versions are still in use, and it cannot answer anything else.

Bug reports

From the History window, and from the menu, Typoless can open a prefilled issue on GitHub. Nothing is sent when it opens. The form appears in your browser, filled in, and you decide what to submit. A report about a correction includes the text before and after, so read it and delete anything you would rather not publish, because the tracker is public. What you submit is then covered by GitHub's privacy policy.

Your rights

You can ask what is stored about you, and ask for it to be corrected or erased, under Art. 15 to 21 GDPR. In practice the only thing that ever exists is the server log described above, and the app holds nothing. Write to the address in the legal notice.

You may also complain to a supervisory authority. The one responsible here is the Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg.

Changes

This page changes when the app does. Typoless is open source, so you can read what it does with your text rather than take it on trust, at github.com/zirkelc/typoless.