Privacy notice
Who we are (data controller)
The Knowledge Formula FZCO (trading as Typo), Premises 38871-001, IFZA Business Park, DDP, Dubai Silicon Oasis, Dubai, United Arab Emirates. Registration DSO-FZCO-36765, trade licence 38871, TRN 104248952400001. Email: me@karllillrud.com. We are the controller for the personal data described here.
In short
Typo corrects on your computer. We never receive what you write: no sentences, messages or documents. Our service receives what it needs for licences, payments, sign-in and updates, daily usage counts that you can switch off, while learning mode is on, fixes as pairs of single words, and, only if you switch recording mode on, single words Typo did not recognise.
What stays on your computer
Typo watches what you type only to notice when a word is finished. It keeps at most the last 120 typed characters in memory and never sends them anywhere.
It writes typed text to disk only if you turn on one of two optional features: recording mode, which keeps what you type so Typo can learn your own fixes and words (for 7, 30 or 90 days, never in password, code or blocked fields, with long numbers and email addresses masked), and token language safe mode, which keeps the originals of text that token language shortened (30 days). Both are off until you switch them on, are encrypted, stay on your computer and can be viewed and deleted in Settings. The recording and the saved originals are never sent to us. With recording mode on, only the single unrecognised words described under "Learning mode and recording mode" leave your computer.
Corrections, your personal word list, your settings, the record of which terms and privacy notice version you accepted and when, and optional diagnostics are stored on your computer, encrypted with Windows DPAPI or a key in your macOS Keychain. Typo never acts in password fields.
What our service receives
- A random device ID and a hash of a device secret, to bind a licence to your computer.
- The app version and platform, when the app checks for rule and app updates.
- The version of the terms and privacy notice you accepted and the time, stored with your device record.
- Anonymous usage statistics, learning data while learning mode is on, and unrecognised single words while recording mode is on, as described below.
- Your IP address, for abuse protection (kept up to 2 days).
Never the sentences, messages or documents you write.
Anonymous usage statistics
Unless you switch it off, the app sends daily counts tied to its random device ID: the number of fixes and undos per language, token language edits and estimated tokens saved per AI platform and per level, the number of words learned by recording mode, achievements unlocked and share-button clicks per platform, and the app version and operating system. The statistics never contain any typed text, words or sentences.
We use them to improve Typo and to publish aggregate figures, for example "Typo users have saved N tokens". Published figures are aggregates only.
Legal basis: our legitimate interest in improving Typo and reporting how it is used. You can switch the statistics off at any time in Settings with "Share anonymous usage statistics". We keep them for 25 months and then delete them.
Learning mode and recording mode
Learning mode helps improve corrections for everyone. While it is on, the app sends about once a day the fixes Typo made and the fixes you undid as pairs of single words, words you reported as missed, short fingerprints (hashes) of fields you blocked, the names of apps where Typo helped, and counters. It never sends sentences or other text you type. Learning mode is on by default and can be switched off in Settings. On the free plan, Typo first asks for a free email registration. Legal basis: our legitimate interest in improving corrections.
Recording mode is off by default. If you switch it on, the app also sends, with the daily upload, single words that Typo did not recognise: each word on its own, how often it was seen, its language (English or Swedish, if known) and the word you corrected it to, if you made a correction. It never sends the sentence or any other text around the word, and words with digits or symbols such as @ are not accepted. These words are linked to the app's anonymous, random device ID, kept for at most 180 days and used to improve corrections for everyone, for example by adding a common misspelling and its fix, or by no longer treating a real word that many people use as a possible typo. The legal basis is your consent: you give it by switching recording mode and "Help Typo learn new words" on, and you withdraw it by switching either off.
Sharing and invitations
Share buttons open the social network you choose (LinkedIn, X, Facebook, WhatsApp, Instagram, TikTok or Snapchat) with a prepared post that you can edit. Typo never posts on your behalf. We receive nothing from those networks, except the referral code if a friend signs up through your link. When the network opens, its own privacy policy applies. We count share-button clicks per platform as part of the usage statistics.
Ratings and support
If you rate Typo in the app, we receive your stars and any comment you write, linked to your device ID and, if you registered, your email address. Low ratings are handled as support requests. We publish a comment on our website only if you agreed to it, and only after we have approved it.
When you buy, register or sign in
Your email address, Stripe customer and subscription identifiers, subscription status and gift details. Payments are processed by Stripe; we never see your card. Sign-in links expire after 15 minutes and sessions after 14 days.
We send activation codes, gift codes, sign-in links, messages about your plan and, only if you confirm, product news. Emails are sent through messagesender.rest, our own sending platform. You can unsubscribe from news at any time; receipts and security emails are still sent.
The website
The website uses one cookie, __Host-typo, which is strictly necessary to keep you signed in on the account page. It is set only when you sign in and lasts up to 14 days. We count page views anonymously, without cookies. The website also keeps two small notes in your browser: the invite code from a link you followed (until you close the tab) and when an offer was last shown, so it is not shown again for 3 days. There are no advertising or third-party tracking scripts.
Where data is stored and how long we keep it (retention)
Our servers are operated by netcup GmbH in Germany (EU). Payments are handled by Stripe.
- IP addresses: up to 2 days.
- Sign-in links: 15 minutes. Sessions: 14 days. Expired ones are deleted automatically.
- Usage statistics: 25 months, then deleted. Published figures are aggregates only.
- Unrecognised words from recording mode: at most 180 days, then deleted.
- Unconfirmed newsletter sign-ups: 30 days.
- Billing records: as long as accounting law requires.
- Acceptance records: with the device record, so we can show which version you accepted.
Your rights
You can ask for access, correction, deletion, restriction or a copy of your data, and object to processing, by emailing me@karllillrud.com. You can switch off usage statistics, learning mode and recording mode in Settings, and unsubscribe from news at any time. EU and UK residents may also complain to their data protection authority (in Sweden, Integritetsskyddsmyndigheten, IMY).
Legal basis: performance of contract (licences, payments, sign-in), consent (newsletter, unrecognised words from recording mode) and legitimate interest (security, keeping a record of the terms you accepted, usage statistics and learning mode).
Children
Typo is not meant for anyone under 16, or under the higher age of digital consent where they live.
Changes to this notice
If we make material changes to this notice, we tell you in advance in the app or by email. The current version is shown at the top of this page.