Privacy notice
Last updated 5 November 2026
Who we are
The Knowledge Formula FZCO (trading as Typo), Premises 38871-001, IFZA Business Park, DDP, Dubai Silicon Oasis, Dubai, United Arab Emirates. Registration DSO-FZCO-36765, trade licence 38871, TRN 104248952400001. Email: me@karllillrud.com. We are the controller for the personal data described here.
What stays on your computer
Typo watches what you type only to notice when a word is finished. It keeps at most the last 120 typed characters in memory, never writes them to disk and never sends them anywhere. Corrections, your personal word list and optional diagnostics are stored on your computer, encrypted with Windows DPAPI or a key in your macOS Keychain. Typo never acts in password fields.
What our service receives
A random device ID and a hash of a device secret (to bind a licence to your computer), the app version and platform when the app checks for rule and app updates, and your IP address for abuse protection (kept up to 2 days). Never any text you type.
When you buy or sign in
Your email address, Stripe customer and subscription identifiers, subscription status and gift details. Payments are processed by Stripe; we never see your card. Sign-in links expire after 15 minutes and sessions after 14 days.
We send activation codes, gift codes, sign-in links and, only if you confirm, product news. Emails are sent through messagesender.rest, our own sending platform. You can unsubscribe from news at any time; receipts and security emails are still sent.
Where data is stored and for how long
Our servers are operated by netcup GmbH in Germany (EU). Billing records are kept as long as accounting law requires; unconfirmed newsletter sign-ups are deleted after 30 days; expired sessions and links are deleted automatically.
Your rights
You can ask for access, correction, deletion, restriction or a copy of your data, and object to processing, by emailing me@karllillrud.com. EU and UK residents may also complain to their data protection authority. Legal basis: performance of contract (licences, payments, sign-in), consent (newsletter) and legitimate interest (security).