Privacy Policy

Last updated: July 18, 2026

The Short Version

SpellType suggestions run locally on your Mac. SpellType does not ask for Screen Recording permission, does not send your writing to us for autocomplete, and can share an opt-out daily aggregate app-health signal.

What SpellType Does

SpellType is a macOS app that provides private autocomplete suggestions while you write in supported apps without watching your screen.

Permissions

SpellType uses macOS Accessibility permission for autocomplete support in supported apps. SpellType does not ask for Screen Recording permission and does not take screenshots.

Data We Do Not Collect

Daily App-Health Analytics

SpellType maintains one cumulative aggregate app-health record per install and UTC day when analytics is enabled in Privacy settings. A slow operation that began before the UTC boundary can send a higher revision of that same daily record; repeated or stale revisions do not count twice. The aggregate contains coarse counters and dimensions such as suggestion counts, quota state, app version, app build, release channel, macOS major version, processor architecture, license tier, update setting, launch-at-login setting, end-of-day pause state, and autocomplete latency buckets.

Daily app-health analytics does not include writing, prompts, suggestion text, suggestion history, nearby text, app names, bundle IDs, URLs, window titles, file names, exact location, timezone, emails, license keys, model names, or implementation details. Turning analytics off stops future sends and clears unsent local analytics payloads.

After authenticating an analytics request, SpellType derives a pseudonymous analytics subject with a dedicated analytics-only keyed HMAC; the raw app install ID is not stored in the analytics tables. A separate install-and-day HMAC receipt and monotonic revision make repeated or stale delivery idempotent. A higher cumulative revision replaces that install-day record and changes aggregate totals only by the new delta. Receipt keys are retained for 30 days, pseudonymous install-day detail for 90 days, and an inactive pseudonymous subject and its milestone dates for 180 days after its last report. Aggregate app-health totals are retained for longer-term product trends.

Website Marketing Analytics

The website keeps aggregate counts for page visits, pricing views, selected plans, launch-offer and checkout steps, completed purchases, and actual download handoffs. These events use fixed categories such as plan, offer type, page group, campaign ID, call-to-action source, and coarse remaining-offer ranges. They do not store raw URLs, referrers, IP addresses, user agents, writing, keystrokes, screen content, clipboard content, or app window content.

For daily unique visitor counts, the website uses a first-party random browser token and stores only a per-day irreversible hash. The hashes are deleted after 30 days and are not used to build a cross-day visitor profile. The website does not store the raw token in analytics records. Browser Do Not Track and Global Privacy Control signals disable anonymous visit, pricing-view, and plan-selection analytics, prevent a new analytics cookie, and expire an existing one; necessary commerce state and actual download handoff totals still operate without a visitor hash.

Checkout and launch-offer totals are derived from the business records needed to create and reconcile those transactions, so provider retries do not create extra completed-purchase or redemption counts. Expired launch checkouts keep their spot during a short reconciliation window; a spot is released only after the checkout provider confirms there was no redemption and the one-use discount is retired. Provider uncertainty keeps the spot reserved. A download is counted only when the website hands the configured app file to the browser. Marketing counter failures do not prevent pricing, checkout, or download delivery.

Launch Offer Email Claims

If you claim a launch offer, SpellType stores the email address you submit so we can hold your offer spot, create a one-use Lemon Squeezy checkout coupon, connect completed checkout webhooks back to the claimed offer, and help with licensing support. This email claim data is separate from website visit and app download counters.

Free Plan and Licensing

Free-plan limits and Pro access require lightweight checks for anonymous install status, accepted-suggestion counts, checkout status, and license status. These checks do not include typed text, autocomplete suggestions, prompts, nearby text, screen content, clipboard content, or personal writing.

When you activate, validate, or deactivate a license, SpellType sends the license key you enter to SpellType's backend and Lemon Squeezy for license processing. The SpellType app stores the raw license key locally on your Mac so it can revalidate your license. SpellType's backend stores a hash of the license key plus Lemon Squeezy license, order, product, variant, and subscription identifiers for entitlement and activation support; it does not store the raw license key.

Network Connections

SpellType suggestions keep running locally. Network access is limited to practical product needs such as:

Third-Party Services

SpellType uses third-party services only for product delivery, website hosting, checkout, licensing, updates, and aggregate app-health analytics. These services are not used to generate autocomplete suggestions from your writing.

Children's Privacy

SpellType is not directed to children under 13.

Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated date.

Contact

Questions about this policy? Reach out at .