Privacy Notice

Last updated: October 12, 2026

This Privacy Notice for Typeside ("we," "us," or "our") describes how and why we might access, collect, store, use, and/or share ("process") your personal information when you use our services ("Services"), including when you use the Typeside desktop application or visit typeside.app.

Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. We are responsible for making decisions about how your personal information is processed. If you do not agree with our policies and practices, please do not use our Services.

SUMMARY OF KEY POINTS

This summary provides key points from our Privacy Notice, but you can find out more details about any of these topics by using our table of contents below to find the section you are looking for.

What personal information do we process? When you visit, use, or navigate our Services, we may process personal information depending on how you interact with us and the Services, the choices you make, and the products and features you use. Learn more about personal information you disclose to us.

Do we process any sensitive personal information? We do not ask for it and do not knowingly collect it. Because the Services process whatever text you choose to submit, such information may be present in what you send; where it is, that text is processed on your device or sent directly from your device to the provider you choose, and Typeside does not receive it. Please use the on-device features for material of that kind. Learn more in WHAT INFORMATION DO WE COLLECT?.

Is my voice recorded or uploaded? No. Speech recognition runs entirely on your own device, using either the operating system's built-in speech engine or, if you choose it, a Whisper model downloaded once to your device. Audio recordings and voice samples never leave your device and are never transmitted to us or to anyone else.

Does my text leave my device? Dictation and autocomplete always run on your device. When you choose a cloud model, the app connects directly to your chosen provider with your own API key (BYOK). Typeside does not proxy, receive, or store that text. "Process on this device only" under Settings › Data keeps generation on the local path. Learn more about text you submit for processing.

Do you send error diagnostics? Yes. Error diagnostics are enabled by default so we can find crashes and serious failures. They contain only the app release and distribution, operating-system kind (not its version), fixed runtime, producer, error category and outcome, and a code location inside Typeside when available. They do not contain your text, AI output, voice, email address, account identifier, file paths, window titles, tokens, screenshots, or the original error message. You can turn this off at any time under Settings › Advanced › Error diagnostics sharing.

Do we collect information from third parties? We receive profile information from your sign-in provider. When you buy a paid plan, Paddle also provides purchase, subscription, refund, and dispute status needed to manage your licence. We do not buy information from data brokers or marketing partners.

How do we process your information, and on what legal basis? We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. Each purpose has a legal basis, which we set out next to it. Learn more about how we process your information.

Does my information go abroad? Account and licence records are held by Supabase in Singapore; error diagnostics are handled by Sentry in the United States. Website analytics, unless you turn it off, are handled by Mixpanel in the United States. Website feedback and order confirmation emails are sent through Resend in the United States. A BYOK provider's location depends on the provider you choose. When you buy a paid plan, what you enter at checkout goes to Paddle in the United Kingdom, or in the United States or Canada if you buy from there. See IS YOUR INFORMATION TRANSFERRED INTERNATIONALLY?.

In what situations and with which parties do we share personal information? We may share information in specific situations and with specific third parties. Learn more about when and with whom we share your personal information.

What are your rights? Depending on where you are located geographically, the applicable privacy law may mean you have certain rights regarding your personal information, including the right to complain to a supervisory authority. Learn more about your privacy rights.

How do you exercise your rights? The easiest way to exercise your rights is by contacting us at typeside001@gmail.com. We will consider and act upon any request in accordance with applicable data protection laws.

TABLE OF CONTENTS

  1. WHAT INFORMATION DO WE COLLECT?
  2. HOW DO WE PROCESS YOUR INFORMATION?
  3. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?
  4. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?
  5. HOW DO WE HANDLE YOUR SOCIAL LOGINS?
  6. IS YOUR INFORMATION TRANSFERRED INTERNATIONALLY?
  7. HOW LONG DO WE KEEP YOUR INFORMATION?
  8. DO WE COLLECT INFORMATION FROM MINORS?
  9. WHAT ARE YOUR PRIVACY RIGHTS?
  10. CONTROLS FOR DO-NOT-TRACK FEATURES
  11. DO WE MAKE UPDATES TO THIS NOTICE?
  12. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?
  13. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

1. WHAT INFORMATION DO WE COLLECT?

Personal information you disclose to us

In Short: We collect personal information that you provide to us.

We collect personal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services, or otherwise when you contact us. This includes your email address, the display name on the account you sign in with, and the answers you give to the optional questions asked during sign-up.

Sensitive information. We do not ask for special categories of personal data — information about health, race or ethnic origin, religious or political beliefs, trade union membership, sexual life or orientation, or genetic or biometric data — and we do not knowingly collect it. If the text you submit contains sensitive information, it is processed on your device or sent directly from your device to the AI provider you connect. Typeside's servers do not receive the text included in your AI requests. Consent at sign-up does not include consent to the processing of sensitive information. Please do not send text containing sensitive information to cloud AI services; use the on-device features instead.

All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information.

Support requests. The desktop app opens your email client. We receive the message, sender details, and any attachments you choose to send in our mailbox. Text you enter in the website feedback form is stored in our database (Supabase) together with your account identifier, browser user-agent, and language setting, and the same content, without the account identifier, is delivered to our mailbox through Resend. We do not automatically attach screenshots, API keys, licence keys, or diagnostics.

Text you submit for processing

Cloud generation sends your request directly from your device to the BYOK provider you configure, using your own API key. Typeside does not proxy the request or receive your key, Input, or Output. Your provider determines its own retention, training, and human-review rules; review them before sending material. An OpenAI-compatible connection does not by itself mean the provider is OpenAI or that a particular privacy policy applies.

Information attached to a request. For each skill you can choose whether to include the name of the application you are writing in, the window title, screen text, and the clipboard. The window title, screen text, and clipboard are included only if you have also allowed them in settings. Screen text and the clipboard may contain material written by someone else. They follow the same local or chosen-provider route as your request. Typeside does not receive them or use them for quality improvement. Use "Process on this device only" under Settings › Data to keep generation on your device.

Screen context uses text extracted on your device. The generation request and local conversation history contain text, not screen images. Do not enable context that you are not permitted to disclose to your selected provider.

Dictation and autocomplete always run on your device. Free text features use local models. Pro enables BYOK and additional desktop features (prompt mode, shorten, expand, and custom skills), and does not include a Typeside-hosted AI service. With local-only processing enabled, generation does not fall back to a cloud provider. Skills configured for a cloud model are unavailable while it is on. Locally configured features depend on the licence and compatible models.

Local history and personalisation. History is enabled by default and stores text from transformations and prompt conversations only on your device. You can turn it off in Settings › Data and delete saved history from the History screen in the sidebar. History older than 90 days, or beyond 10,000 entries, is deleted automatically, oldest first. Optional autocomplete personalisation is off by default; when enabled, recurring short phrases are kept encrypted locally for up to 90 days. Neither is uploaded to Typeside.

Text contribution has ended. We no longer collect Input or Output for model training or quality improvement. Legacy server usage records have all been deleted, and no new generation records are added.

People who are not our users

When you turn on screen or clipboard context, text visible on your screen may include what other people wrote.

The app processes this context locally or sends it directly to the provider chosen by the user. Typeside does not receive it. The person using the app must have an appropriate basis to disclose another person's material; this notice does not grant permission to disclose it.

If you are one of those people and want to know more, write to us using the contact details below. Anyone who would rather their text were not handled this way can ask the person using Typeside to turn on "Process on this device only", which stops it entirely.

Voice input

Speech recognition is performed entirely on your own device, either by the operating system's built-in speech engine or, if you choose it, by a Whisper model downloaded once to your device. Audio recordings and voice samples are never transmitted off your device and are never collected, stored, or processed by us. Only the recognized text is used, and only in the same way as text you type.

Information automatically collected

In Short: Some information — such as your Internet Protocol (IP) address and/or browser and device characteristics — is collected automatically when you visit our Services.

We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity (like your name or contact information) but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, and other technical information, handled in the access logs of our website host (Vercel). This information is primarily needed to maintain the security and operation of our Services.

Website analytics. Unless you turn it off, our website records page views (the page path, without query strings), clicks on the download button, sign-up, and new-device licence activation. Mixpanel attaches browser, operating system, device type, screen size, the campaign tags (utm values) and ad click identifiers (such as gclid) of the current address, and the domain of the site that first referred you. These events are linked to a random identifier stored in a cookie in your browser and, once you sign up, to your pseudonymous account identifier — never your email address or name. Mixpanel estimates an approximate location (country, region, city) from your IP address. Visitors from the European Economic Area, the United Kingdom, and Switzerland are asked before anything is stored. You can turn analytics off at any time with "Cookie settings" at the bottom of the home page. Vercel Web Analytics separately counts page views in aggregate without cookies, with query strings removed.

Usage metadata. Local usage statistics record time, feature, processing location, outcome, input/output character counts, and, for a skill run, that skill's identifier (not its name or instructions) on your device for 90 days. Running totals shown on the home screen are kept beyond 90 days and are removed only by clearing all statistics. This record does not include the text you submitted, AI output, app names, or window titles, and is not uploaded. Typeside no longer records server AI request usage or enforces a cloud token allowance.

Billing and activation records. For paid access we store a pseudonymous billing-owner identifier; Paddle customer, transaction, subscription, refund, and dispute identifiers and status; price, currency, tax and period evidence; accepted purchase terms and document hashes; licence-key hash and key version; and a device identifier derived by hashing your Mac's hardware identifier (it stays the same if you reinstall), the Mac model name the app reads and sends, activation status, and timestamps. Licence keys are shown on request in My Account, not emailed. When a purchase completes, we send an order confirmation to your account email address through Resend and keep its delivery reference and time as proof of delivery; the confirmation does not contain your licence key. Raw keys, full payment-card numbers, AI requests, and API keys are not stored in the billing ledger.

Consent records. When you accept the required terms at sign-up, we store — alongside your account — which version you accepted, when, the language version that was shown to you, a cryptographic hash of that document's text, and your browser's user-agent string. We keep this to be able to show later exactly what you agreed to, which is our burden to prove. We do not store your IP address with this record. These records are kept for as long as required by the applicable statute of limitations for contract claims.

Error diagnostics. The desktop application sends a narrowly defined diagnostic event when it encounters a crash or selected serious failure. This sharing is enabled by default. The event contains the Typeside release and distribution, operating-system kind (not its version), fixed runtime, a producer derived by the desktop application from its trusted window identity, area, event, outcome and error-code categories, and — when it passes our allow-list — the module, line, and column of code inside the Typeside application. We do not include your text or AI output, voice data, email address, account or device identifier, tokens, file paths, window titles, screenshots, attachments, browsing or network history, the original error message, or a raw stack trace. This is error monitoring, not advertising analytics or behavioural profiling.

Sentry, our error-monitoring processor, necessarily receives the source IP address while accepting the network request. We configure Sentry's organization-level IP scrubbing so that this address is discarded rather than stored, and enable server-side data scrubbing as a second safeguard.

2. HOW DO WE PROCESS YOUR INFORMATION?

In Short: We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. Each purpose below states the legal basis we rely on.

We process your personal information for the following purposes, on the legal bases stated:

Where we rely on a legitimate interest, you may object to the processing; see WHAT ARE YOUR PRIVACY RIGHTS?.

3. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

In Short: We name every company that receives your information and say what each one gets.

We do not sell your personal information, and we do not share it with advertisers or data brokers.

4. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?

In Short: We use cookies to keep you signed in and, unless you turn it off, for website analytics. We do not use advertising trackers.

Our website sets authentication cookies so that you stay signed in as you move between pages. These cookies are strictly necessary, and clearing them signs you out.

Unless you turn it off, Mixpanel analytics stores a random identifier in a cookie (mp_…) to recognize repeat visits (see "Website analytics" above). Two small cookies remember your analytics choice (ts_analytics) and whether your region requires asking first (ts_region). Visitors from the European Economic Area, the United Kingdom, and Switzerland are asked before the analytics cookie is stored. You can change your choice at any time with "Cookie settings" at the bottom of the home page.

Typeside does not use advertising trackers. Paddle's embedded checkout may use technologies required for payment, fraud prevention, and its own service; its privacy and cookie notices apply.

5. HOW DO WE HANDLE YOUR SOCIAL LOGINS?

In Short: If you register or sign in using a third-party account, we receive limited profile information from that provider.

Our Services offer you the ability to register and log in using your third-party account details (currently, your Google account). Where you choose to do this, we will receive certain profile information about you from that provider. The profile information we receive is your email address, the display name on that account, and a link to your profile picture. Of these we keep only the first two in your account record — what is needed to identify your account and to address you by name. The link to your picture remains only in your login session, and we never display the picture — the Services show no profile image at all.

We will use the information we receive only for the purposes that are described in this Privacy Notice or that are otherwise made clear to you on the relevant Services. Please note that we do not control, and are not responsible for, other uses of your personal information by your third-party provider. We recommend that you review their privacy notice to understand how they collect, use, and share your personal information, and how you can set your privacy preferences on their sites and apps.

6. IS YOUR INFORMATION TRANSFERRED INTERNATIONALLY?

In Short: Yes. Below we set out, for each recipient, what is transferred, where to, why, for how long, and how to refuse.

Account, consent, billing, licence, and activation records are held on infrastructure operated for us by Supabase in Singapore. The following describes transfers outside the Republic of Korea:

International-transfer safeguards. Safeguards depend on the recipient, destination, and applicable law. A service contract alone is not proof of a valid transfer mechanism. You may request the applicable recipient-specific information from us. This notice does not certify legal compliance.

7. HOW LONG DO WE KEEP YOUR INFORMATION?

In Short: We keep your information for as long as necessary to fulfill the purposes outlined in this Privacy Notice unless otherwise required by law.

We will only keep your personal information for as long as it is necessary for the purposes set out in this Privacy Notice, unless a longer retention period is required or permitted by law.

Typeside does not receive your BYOK requests or results. Local usage metadata and optional personalisation are kept for no more than 90 days on your device. Local text history is deleted automatically after 90 days or beyond 10,000 entries, and you can delete it sooner; deleting a website account does not erase files on your device. Legacy server generation records have been deleted. Website feedback is deleted when you delete your account. A provider you select applies its own retention policy.

Error diagnostic events in Sentry are retained for no more than 30 days. Turning off error diagnostics stops new events immediately; it does not retroactively change the lawful processing or fixed retention of events already received.

Website analytics events in Mixpanel are kept for up to 2 years. When you request account deletion we ask Mixpanel to delete the events linked to your account, which it completes within 30 days of the request. Turning analytics off stops new events; it does not delete events already received.

Billing retention and deletion holds. An account-deletion request stops renewal first. A pending payment, conversion, refund, or dispute may hold deletion until resolved. After account deletion, the account link is removed and minimal pseudonymised billing evidence is retained until 5 years from the deletion request for transaction reconciliation, refunds, disputes, and record obligations, subject to the exceptions below. It is not anonymous while provider identifiers can still be linked elsewhere. Existing paid-device access is preserved for the paid subscription period, or for a valid lifetime activation; account deletion prevents adding devices.

Records we are required to keep. A specific legal obligation or unresolved claim may require records to be retained longer; those records are restricted to that purpose and deleted when the need ends. The 5-year period is our billing-retention policy, not a claim that one statutory period applies in every country.

How we delete it. Records that reach the end of the periods above are deleted automatically by a scheduled job; account information is deleted when you close your account. Where deletion is not immediately possible — for example because the information is in a backup archive — we store it securely and isolate it from any further processing until deletion is possible.

How we keep it safe. Our service connections are encrypted and account access is restricted at the database level. Website sign-in uses protected session cookies; the desktop app has no account sign-in session. Its signed activation record can be checked offline. A permanent offline record cannot be remotely withdrawn before the device reconnects, including after a chargeback. Personalisation is encrypted locally, and Sentry is configured to discard source IP addresses.

8. DO WE COLLECT INFORMATION FROM MINORS?

In Short: We do not knowingly collect data from or market to children under 14 years of age.

We do not knowingly collect, solicit data from, or market to children under 14 years of age, nor do we knowingly sell such personal information. By using the Services, you represent that you are at least 14, or that you are the parent or legal guardian consenting to the use of the Services by a minor who is at least 14. If we learn that personal information from users less than 14 years of age has been collected, we will deactivate the account and take reasonable measures to promptly delete such data from our records. If you become aware of any data we may have collected from children under age 14, please contact us at typeside001@gmail.com.

9. WHAT ARE YOUR PRIVACY RIGHTS?

In Short: You can see, correct, export, and delete your information, withdraw consent, and complain to a supervisory authority.

Depending on where you live, you have some or all of the following rights in relation to your personal information: access to it and to information about how we process it; correction of information that is inaccurate; deletion; restriction of processing; portability — a copy in a structured, commonly used, machine-readable format; and the right to object to processing we carry out on the basis of a legitimate interest. To exercise any of them, write to us at typeside001@gmail.com. We do not charge for this and we will respond within the period the law allows.

Complaints. If you believe we have not handled your personal information properly, you may complain to your data protection supervisory authority. In the European Economic Area that is the authority of the country where you live, work, or where the issue arose; in the United Kingdom it is the Information Commissioner's Office.

In the Republic of Korea you may apply to any of the following: the Personal Information Dispute Mediation Committee (1833-6972, kopico.go.kr), the Privacy Infringement Report Centre (118, privacy.kisa.or.kr), the Cybercrime Investigation Division of the Supreme Prosecutors' Office (1301), or the National Police Agency's Cyber Bureau (182). You can also raise the matter with us first, and we would prefer that you did.

Withdrawing your consent: Where we rely on your consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before it, nor processing we carry out on another lawful basis.

You can disable local history under Settings › Data and delete it from the History screen in the sidebar; optional personalisation can be disabled and deleted under Settings › Data. The former server text-contribution programme is no longer available.

You can stop new remote error diagnostics at any time under Settings › Advanced › Error diagnostics sharing. The limited local diagnostic record remains on your device. You may deliberately attach a diagnostic file to an email, but the app does not automatically send it.

You can stop your text being sent for cloud processing at all by turning on "Process on this device only" under Settings › Data.

Account Information

If you would at any time like to review or change the information in your account or terminate your account, you can do so from My Account on our website, or by contacting us.

Upon your request to terminate your account, we will deactivate or delete your account and information from our active databases. However, we may retain some information in our files to prevent fraud, troubleshoot problems, assist with any investigations, enforce our legal terms and/or comply with applicable legal requirements, as described under HOW LONG DO WE KEEP YOUR INFORMATION? above.

10. CONTROLS FOR DO-NOT-TRACK FEATURES

Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track ("DNT") feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage, no uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online. We do not perform the cross-site tracking that DNT is intended to prevent. If a standard for online tracking is adopted that we must follow in the future, we will inform you about that practice in a revised version of this Privacy Notice.

11. DO WE MAKE UPDATES TO THIS NOTICE?

In Short: Yes, and we will tell you before a material change takes effect.

We may update this Privacy Notice from time to time. The updated version is marked by the "Last updated" date at the top. Where a change is material — for example a new purpose, a new recipient, or a new country — we will tell registered users before it takes effect and, where the law requires your consent, ask for it rather than assume it.

12. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

If you have questions or comments about this notice, or wish to exercise any of the rights described above, contact us by email at typeside001@gmail.com. We are:

Typeside (타입사이드)
Representative: Eunhyeok Lee
Address: 2, Ssukgogae-ro 2da-gil, Gwanak-gu, Seoul, Republic of Korea
Telephone: +82-10-6396-7078
Business registration number: 118-04-31573
Email: typeside001@gmail.com

Email is our main contact channel and we answer at that address.

Privacy contact (개인정보 보호책임자, the person responsible for personal information under Article 31 of the Korean Personal Information Protection Act; this is not the appointment of a data protection officer under Article 37 of the GDPR). Where no separate officer is designated, the Enforcement Decree makes the proprietor the person responsible. That person is Eunhyeok Lee, reachable at typeside001@gmail.com. You may address any question, request, or complaint about your personal information to them.

13. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

You may review the information in your account, and delete your account together with the information associated with it, from My Account on our website. For anything that page does not cover — a copy of your data, correction of something that is wrong, or a question about how we processed it — write to us at typeside001@gmail.com and we will act on it in accordance with applicable data protection law.