Klavadabra reads your typing in order to fix wrong-layout typos. That's it. No keystroke, word, statistic, or correction example is sent to any server we control. Two thin allowed network calls (update check, license-revocation check) are documented below — both opt-out.
System Settings → Privacy & Security. Used to detect word boundaries and your fix hotkeys.Path: ~/Library/Preferences/com.klavadabra.menubar.plist
Settings → Privacy.Klavadabra never writes raw typing history to disk. Counters live on disk; your words don't.
Klavadabra never sends typed text, correction examples, learned words, usage analytics, or account identifiers from the app. It may use the narrow network calls below.
| When | To where | What's sent | What's received |
|---|---|---|---|
| Update check, ≤1×/day, when network is available | klavadabra.com/appcast.xml | Standard HTTP request. No body. No cookies. No identifier. | The list of available versions. |
| License-revocation check, ≤1×/day, paid users only | license-issuer.klavadabra.com/revoked/<id> | Your license id (a 26-char ULID). No email, no machine identifier. | { "revoked": true | false }. If revoked (e.g. after a refund), the app drops the token and downgrades to Free. |
| Crash diagnostics, only when the app crashes | sentry.io | Crash diagnostics and stack traces. No typed text; default PII is disabled. | Symbolicated error reports for debugging. |
These calls are made by the standard macOS networking stack and are subject to your firewall, VPN, and "Block all incoming connections" settings.
We use Sentry only for crash diagnostics. We do not use analytics SDKs, account systems, push notifications, or remote dictionaries.
| Permission | Why |
|---|---|
| Accessibility | Read selected text and replace it with a corrected version. |
| Input Monitoring | Detect hotkeys and word boundaries while you type. |
Both can be revoked at any time in System Settings → Privacy & Security.
When macOS reports IsSecureEventInputEnabled() as true (e.g. you're typing into a password field), Klavadabra:
If you buy Klavadabra Pro, Creem collects your payment details under its own privacy policy as the merchant of record. Our license-issuer Worker stores only the license id, your email, the provider's order/subscription id, plan, expiry/status timestamps, and issue/revoke timestamps in a Cloudflare D1 database. We use this exclusively to email you the license, fulfill refunds, process subscription lifecycle events, and answer support. We never join purchase data with app-side behaviour because the app sends us no behaviour data.
License delivery, license recovery, refund/subscription notices, and support replies are transactional emails. Buying Klavadabra does not subscribe you to a marketing list.
If we add a newsletter or launch-update list, it will use a separate opt-in form, store consent separately from purchase records, include an unsubscribe link in every marketing email, and be documented here before it goes live.
Klavadabra is not designed for or directed to children under 13. If a parent or guardian believes that a child has provided personal information, contact us and we will delete it.
If we add a networked feature beyond the two listed above, this page is updated before the new version ships. The change shows up in CHANGELOG.md with the same release.
Email support@klavadabra.com. We reply within one business day.