Typeferry Privacy Policy

Effective date: 13 November 2026

This policy explains what information Typeferry for Mac and its online services handle, why, and what choices you have. It covers both editions of the app:

• the Website Edition, downloaded from https://typeferry.com, and
• the App Store Edition, downloaded from the Mac App Store.

Where the two editions differ, this policy says so. A side-by-side summary is in Section 19.

1. Who we are

Typeferry ("we", "us", "our") decides how the personal data described here is used (we are the "controller" under EU and UK data protection law).

• Privacy questions and requests: privacy@typeferry.com
• Support and everything else: support@typeferry.com

2. The short version

• Typeferry works on your Mac. Text recognition on screen and speech recognition run on your Mac. Screenshots, window images and audio are kept in memory only; Typeferry does not save them or upload them.
• Online translation is your choice. When you first open Typeferry, you choose between "Online translation" and "On-device only". Nothing is sent for translation before you choose, and you can switch at any time in Settings.
• With online translation, the text you are translating is sent through our server to an AI model run by Cloudflare. Before sending, the app replaces email addresses, links, @handles, #-tags and file paths that it recognizes with placeholders. We do not store your text or its translation.
• Daily limits and active-device counts use a device ID. Each online request includes a pseudonymous device ID. We use it to apply daily limits and to count how many Macs use online translation each day and month. We keep these per-device records for 35 days; after that, only totals without device IDs remain.
• If you buy Pro, we keep a license record. Website Edition: this includes the email address you used at checkout, which is also how you sign in: we email you a one-time code, and we keep a list of the Macs signed in to your account. App Store Edition: this includes Apple's transaction ID, not your email or Apple Account.
• Usage statistics are up to you. During setup, you choose whether Typeferry sends anonymous usage statistics: daily counts of how often each feature was used, whether it worked and roughly how long it took. They never include your text, screenshots or a device ID, and you can turn them off at any time in Settings (Section 8). Separately, our relay counts the online translation requests it handles each day, without a device ID or IP address, and keeps the per-device records described above (Section 4.5).
• No ads, no tracking, no selling. We do not sell personal data, do not track you across other companies' apps or websites, and the app contains no third-party advertising, analytics or crash-reporting SDKs.
• "On-device only" keeps all of your text on your Mac. A few non-text connections can still happen (see Section 9).

3. What happens on your Mac

3.1 Processing that stays on your Mac

• Input bar. What you type into Typeferry's input bar is processed in the app's memory. When you use "On-device only", when you are offline, or when online translation is unavailable, the text is translated by the translation built into macOS, on your Mac. macOS may download language packs from Apple for this; Apple handles those downloads. In a few apps whose text box Typeferry cannot read, such as WeChat, Typeferry captures the lower part of that window to find where the text box is, if you have allowed Screen & System Audio Recording. The image is kept in memory only.
• Screenshot translation. When you select an area of the screen, Typeferry captures that area with macOS screen capture and recognizes the text on your Mac using Apple's text recognition. The image is kept in memory only. When you start screenshot translation, Typeferry checks whether your clipboard holds an image so that it can offer to translate it; that image is translated only if you choose to.
• Window translation. While you have a window or area selected for translation, Typeferry captures frames of that window (a few frames per second) and recognizes text on your Mac. Images are kept in memory only. The recognized text and translations for that window are kept in memory and cleared when you stop window translation. Capture stops when you stop window translation, when the window closes, or when you quit Typeferry.
• Voice input. Your microphone is used only while you hold the voice key. Speech is recognized on your Mac with Apple's on-device speech recognition. Audio is not saved or sent. The recognized text is then treated like typed text (so it may be sent for online translation if you chose online translation). macOS may download speech recognition models from Apple.
• Clipboard. To put a translation into some apps (in the App Store Edition, into every app), Typeferry briefly places the translation on the clipboard, simulates ⌘V, and about half a second later puts back what was on your clipboard before, unless you copied something new in the meantime. This temporary item is marked so that clipboard managers that follow the common "transient" convention do not keep it. Typeferry's "Copy" buttons put text on your clipboard only when you click them.

3.2 Permissions macOS asks you for

Typeferry does not save your keystrokes or the text you type to disk. You can turn any permission off in System Settings → Privacy & Security; the features that need it will stop working.

3.3 What Typeferry stores on your Mac

Where these are:

• Website Edition: ~/Library/Preferences/com.typeferry.mac.plist, ~/Library/Application Support/Typeferry/, ~/Library/Logs/Typeferry/
• App Store Edition: inside the app's sandbox container, ~/Library/Containers/com.typeferry.mac.appstore/

To remove everything from your Mac: if you are signed in to the Website Edition, first click "Sign Out" in the Typeferry Pro window so the Mac's place is freed; then quit Typeferry, delete the app, and delete the folders and file listed above. Deleting the app alone may leave them behind.

4. Online translation

4.1 When text is sent

Only after you choose "Online translation" (at first launch or in Settings). Before you make a choice, nothing is sent for translation. If you choose "On-device only", none of your text is sent.

4.2 What the app sends with each translation request

• The text to translate: the sentence in the input bar (up to 1,000 characters), or the text recognized from a screenshot or window (up to 3,000 characters per request). Images and audio are never sent.
• Placeholders first. Before sending, the app replaces email addresses, web links (starting with http://, https:// or www.), @handles, #-tags (such as #48213) and file paths that it recognizes with placeholders, and keeps the originals on your Mac. This is automatic pattern matching: it can miss things, and other personal details you write, such as names, phone numbers or street addresses, are sent as written. If a text cannot be masked safely, the app does not send it and translates it on your Mac instead.
• Request details: the source and target languages, whether the request comes from the input bar or the screen, whether a back-translation is wanted, which edition of the app you use (Website or App Store), its version, and the month Typeferry was first opened on this Mac.
• A device ID (see 4.3).
• If you have an active Pro license: a signed license token. It contains a license ID, your plan, where you bought it (Creem, Paddle or the App Store), its status and dates, and the device ID. It does not contain your email address.
• Connection data that every internet request carries: your IP address, and a standard user-agent string identifying the app and the macOS networking components.

4.3 The device ID

The app creates the device ID on your Mac by applying a one-way hash (SHA-256) to your Mac's hardware UUID together with a fixed Typeferry-specific prefix. It stays the same if you reinstall Typeferry. Our servers receive only the hash, never the hardware UUID. We use it to count daily usage, to count how many Macs use online translation, and to limit abuse. Because it stays the same for your Mac, we treat it as personal data. If you use Pro, our license database also records which device IDs are using your license (Section 5), so the device ID can be connected to your license record.

4.4 Who processes your text

Our relay server runs on Cloudflare Workers. It passes your text, with translation instructions, to an AI translation model hosted on Cloudflare Workers AI, and returns the translation to the app. Our relay does not write your text or its translation to any database or log.

Cloudflare states that it does not use customer content processed by Workers AI to train AI models, and that for standard requests it does not retain inputs or outputs after they are no longer needed to process the request (Cloudflare Workers AI privacy). We do not use your text to train AI models.

If we add or switch to another AI provider, we will update this policy and name the provider here.

4.5 What we keep about online translation

• For each device ID (or, for Pro users, each license ID) and each day (UTC): the number of characters translated and their estimated cost. These records are deleted automatically after 35 days.
• For each device ID and each day (UTC) on which it sent an online translation request: that it did, whether it was on the free plan or Pro, the edition and app version, and the month Typeferry was first opened on that Mac. For Pro users, the device ID can be connected to the license record (Section 4.3), so these records can be linked to your license. They are deleted automatically after 35 days. Each day we compute totals from them, such as how many Macs used online translation that day and in the last 7 and 30 days, how many were new, and how many Macs that first opened Typeferry in a given month are still active. These totals contain no device ID and are kept as long as we run the service.
• Service-wide daily totals (characters translated and estimated cost), which contain no device or personal information.
• Daily request statistics: for each day (UTC), how many translation requests our relay handled, by type (input bar, screen or back-translation), result (completed, or the type of error), timing range and AI model used. These counts contain no text, device ID, license ID or IP address. They are kept whether or not you send usage statistics from the app (Section 8), and are deleted after 400 days.

4.6 Abuse prevention

To stop any single source from flooding the service, Cloudflare applies a request-rate limit per IP address (currently 60 requests per minute). Sign-in requests to our license server have a separate, lower limit (currently 10 per minute per IP address).

The free plan also has a daily limit per source address, so that a single network cannot use up the free service. For this, we record for each day (UTC) how much free online translation came from each address. We store only a keyed hash of the address (for IPv6, of its first 64 bits), which changes every day, and we delete these records after 2 days. We do not store IP addresses themselves in our databases.

4.7 Server logs

Our servers keep only error and status-code records. They do not record request bodies, your text, translations, device IDs, sign-in codes, sign-in tokens or license tokens. Cloudflare keeps these records for up to 7 days.

5. Purchases and licenses

5.1 Website Edition: Creem and Paddle

Typeferry Pro for the Website Edition is sold by Creem (Armitage Labs OÜ) or Paddle acting as merchant of record (the reseller who sells you the subscription and handles payment, sales tax/VAT, invoices and refunds). They collect your payment details, name and billing address under their own privacy policies. We do not receive your card or bank details.

When you subscribe, the payment provider notifies our license server. We receive and store:

• your email address (for Paddle, we fetch it from Paddle using the customer ID in the notification),
• your customer ID and subscription ID at that provider,
• your plan (monthly or yearly), subscription status, the date you have paid through, and when your subscription last changed,
• an internal license ID and key that we generate (never shown to anyone), and when the license was created,
• the Macs signed in to your account, as described below.

Checkout cookie. When you start checkout from our link, our license server sets one cookie in your browser. It lasts 7 days, can only be read by our license server, and is used only so that the sign-in button on the page shown after checkout appears only in the browser you paid with. When Paddle is used, the checkout page loads Paddle's checkout script from Paddle; Paddle's own privacy policy applies to it.

Signing in. Your Pro account is the email address you used at checkout. After you pay, the checkout page offers a button that opens Typeferry and signs you in on that Mac; the link behind it works once, within 10 minutes. To sign in on another Mac, enter the same email address in Typeferry. When you ask for a code, the app sends the email address and the app's interface language (so that the email is in your language). If that address has an active Website Edition license, we email it a 6-digit code through our email provider, Resend (Section 7). The code works once and expires after 10 minutes. To check codes and limit how many emails we send, we store a hash of each email address entered (whether or not it has a license), a hash of the code, and when codes were sent. When you enter the code, the app sends your email address, the code, the device ID (Section 4.3) and your Mac's model identifier (such as "Mac15,3"). Each signed-in Mac receives a sign-in token, which the app keeps in its sign-in file (Section 3.3); we store only a hash of it.

We record which Macs are signed in to your account: the device ID, the model identifier, and when each Mac first signed in and last checked in. A license can be active on up to 3 Macs at a time. Under "Your Macs" in the Typeferry Pro window you can see your signed-in Macs and remove any other Mac; to free the Mac you are using, click "Sign Out". If 3 Macs are already signed in, Typeferry lists them when you sign in on another, so you can remove one. You can remove up to 3 Macs in any 7 days; we keep a record of each removal for 7 days to apply this limit. The app contacts the license server about once a day, with its sign-in token and the device ID, to renew a signed token that lets Pro keep working offline for up to 7 days. A Mac that has not checked in for 14 days is removed from the list the next time any Mac on your account contacts our license server, for example for its daily check. If our sign-in emails don't reach you, contact support@typeferry.com from the email address you used at checkout, and we will help you sign in.

Why: to deliver your license, check that it is valid, apply renewals, cancellations, refunds and chargebacks, let you sign in and manage your Macs, help you if you cannot sign in, answer support requests, and prevent misuse.

5.2 App Store Edition: Apple

Apple handles payment for in-app subscriptions. We do not receive your Apple Account, name, email address or payment details.

While you have an active Pro subscription, the app sends the Apple-signed record of that subscription purchase and your device ID to our license server (about once a day), so that our relay can apply Pro limits to online translation. Our server checks Apple's signature and stores only:

• Apple's original transaction ID for the subscription,
• the plan, expiry date, status (active, canceled or refunded) and when it last changed,
• whether the purchase was made in Apple's production or test (sandbox) environment,
• an internal license ID and key that we generate (never shown to anyone), and
• the device IDs using it and when each was first and last seen (up to 3 Macs at a time; a Mac that has not checked in for 14 days is removed the next time a Mac using the subscription contacts our license server). The App Store Edition has no sign-in.

Apple also sends our server notifications when such a subscription renews, is canceled, refunded or revoked; we use them only to update the status above.

6. Updates (Website Edition)

The Website Edition checks our update feed from time to time, using the open-source Sparkle framework. The request includes the app version, the month Typeferry was first opened on this Mac, and the connection data described in 4.2. It is configured not to send your system profile (such as your Mac model or macOS version details beyond the user-agent string). Each time the update feed is requested, and each time an update is downloaded, we add one to a daily count for that app version (and, for update checks, that month). These counts contain no IP address, device ID, cookie or other identifier. The App Store Edition is updated by the Mac App Store.

7. Emails

• Support. If you email us, we receive your email address and what you write, and use them to reply. Emails sent to our support and privacy addresses are forwarded by Cloudflare to a Gmail mailbox, where we read and answer them.
• Sign-in codes (Website Edition). When you sign in, we send a one-time code to the email address on your license through Resend, an email delivery service based in the United States. Resend receives that address and the message, which contains only the code and a short note, and currently keeps a copy of the message and its delivery records for 30 days. If an email to that address bounces permanently or is reported as spam, Resend adds the address to our list of addresses it will not send to, where it stays until we remove it. The email is plain text, with no links or images, and we do not turn on Resend's open or click tracking.
• Receipts and billing emails come from Creem, Paddle or Apple, not from us.

8. Anonymous usage statistics

Anonymous usage statistics help us see which features people use and where they fail. Typeferry sends them only if you choose "Send" when it asks during setup, or turn on "Send anonymous usage stats" in Settings. Until then, and whenever the setting is off, the app neither records nor sends them.

• What is counted: for each day, how many times each feature was used (such as inserting a translation, online translation, screenshot translation, window translation and voice input), whether it worked, and how long it took, in broad ranges such as "0.3–1 second".
• What is sent with the counts: the Typeferry version, the edition (Website or App Store), the macOS major version (such as 26), and a random ID created for that day alone. The random ID is used only so that our server does not count the same day twice if the app has to send it again. A new one is created each day, so different days cannot be linked to each other.
• What is never included: the text you type, translations, screenshots, audio, your device ID, your license, the apps you use Typeferry in, window titles or your languages.
• When it is sent: after a day is over, the app sends that day's counts to our relay server (Section 4.4) in a single request and then deletes them from your Mac. If sending fails, it tries again later; counts older than 30 days are deleted without being sent.
• What we keep: we add the counts to daily totals for each app version, edition and macOS version, along with how many Macs sent statistics that day. These totals do not include the random ID and are deleted after 400 days. We keep the random IDs for 35 days, only to recognize repeat uploads, and then delete them. Like any internet request, the upload carries your IP address; we use it only for rate limiting and do not store it. Because the statistics are not linked to you, we cannot pick out, show or delete the ones that came from your Mac.
• Turning it off: turn off "Send anonymous usage stats" in Settings at any time. Counts on your Mac that have not been sent yet are deleted immediately.

Separately from this setting, our relay server keeps daily counts of the online translation requests it handles (Section 4.5). These counts contain no text, device ID or IP address, and the setting in the app does not affect them. The relay also records, for 35 days, which device IDs used online translation each day (Section 4.5); this is part of online translation and is not affected by this setting either.

9. What still connects in "On-device only" mode

In "On-device only" mode none of your text is sent anywhere. The following can still happen:

• Website Edition, signed in: the daily license check described in 5.1 (sign-in token and device ID).
• App Store Edition with a Pro subscription: the daily check described in 5.2 (Apple's signed purchase record and device ID).
• Website Edition: update checks (Section 6).
• If you chose to send usage statistics: the daily upload described in Section 8. It contains no text.
• macOS may download translation language packs or speech models from Apple; Apple's privacy policy applies.

If you are not signed in (Website Edition) or have no active Pro subscription (App Store Edition), the app contacts our servers in this mode only for update checks (Website Edition) and, if you chose to send them, usage statistics.

10. Who we share data with

We share personal data only with these service providers, and only for the purposes described:

Our website (https://typeferry.com) does not set cookies and does not use third-party analytics or tracking tools. We count how many times the Typeferry download is requested each day, by version; the count contains no IP address, cookie or other identifier. Cloudflare processes connection data, such as your IP address, to deliver our pages and the download. (The checkout cookie in 5.1 is set by our license server, not by the website.)

We do not sell personal data, and we do not share it for cross-context behavioral advertising. We may disclose data if the law requires it, or where needed to protect the rights, safety or security of users or others. If Typeferry is transferred to another entity (for example, a business we set up to run it), your data would transfer with it under this policy, and we would tell you.

11. Legal bases (EEA, UK and similar laws)

• To provide what you ask for (contract): online translation, license delivery and checks, Pro limits, sign-in and managing your Macs, support replies.
• Legitimate interests: daily limits and abuse prevention, keeping the service secure and working (error logs and daily request counts), counting how many Macs use online translation (Section 4.5), and keeping basic records of purchases, refunds and disputes.
• Consent: your choice of online translation, your choice to send usage statistics, and macOS permissions. You can withdraw consent at any time (Section 14); this does not affect processing before you withdrew it.
• Legal obligations: where we must keep or disclose records by law.

12. How long we keep data

13. International transfers

We are based in China and work from different countries. Cloudflare processes data on its global network, which includes the United States and the European Union. Resend stores email data in the United States. Creem is based in Estonia; Paddle, Apple and Google operate internationally. This means your data may be processed outside your country, including in countries whose data protection laws differ from yours. Personal data from the European Economic Area, Switzerland or the UK is processed by Cloudflare and Resend under their data processing agreements.

14. Your choices and rights

• Turn off online translation: Settings → "On-device only".
• Turn off usage statistics: Settings → "Send anonymous usage stats".
• Turn off permissions: System Settings → Privacy & Security.
• Sign out or remove a Mac: "Sign Out" or "Your Macs" in the Typeferry Pro window (Website Edition).
• Delete data on your Mac: see Section 3.3.
• Cancel a subscription: Website Edition: through the link in your Creem or Paddle receipt. App Store Edition: in your App Store account settings.
• Delete your account (Website Edition): email privacy@typeferry.com from the address on your license. Cancel your subscription first through the link in your Creem or Paddle receipt; we then delete your license record, sign-in records and signed-in Macs, except records the law requires us to keep. If your address is on our list of addresses Resend will not send to (Section 7), we remove it; copies of sign-in emails that Resend holds expire on Resend's schedule (currently 30 days).

Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal data, to object to or restrict certain processing, and to complain to your local data protection authority. To make a request, email privacy@typeferry.com. For a Website Edition license, tell us the email address on the license so we can find the right record. For the App Store Edition we hold no name or email address, so we may not be able to find your record from an email alone; canceling your subscription and deleting the app stops all further processing, and the records then follow the periods in Section 12. Daily usage counts and per-device records of online translation use are tied only to a device ID and are deleted after 35 days; unless you have a license, we generally cannot tell which records are yours. We will reply within one month. Deleting an active license record ends Pro on your Macs, and we may keep records that the law requires us to keep.

We do not sell or share personal information as those terms are defined under California law, and we do not use or disclose sensitive personal information for purposes that would require an opt-out.

15. Children

Typeferry is not directed to children. You must be at least 13 years old to use it, or older if the law where you live sets a higher minimum age. We do not knowingly collect personal data from children below that age. If you believe a child has given us personal data, contact us and we will delete it.

16. Security

All connections between the app and our servers use HTTPS. License tokens are digitally signed, and App Store purchase records are checked against Apple's signature. Our servers store sign-in codes, sign-in tokens and one-time sign-in links only as hashes. The Website Edition's sign-in file can only be read by your macOS user account, and the app's network requests do not use an on-disk cache. No method of storage or transmission is completely secure, but we work to protect your data and limit what we collect.

17. Changes to this policy

When we change this policy, we will update the effective date above. If a change materially affects how we handle your data, we will tell you in the app and on our website before it takes effect, and Website Edition license holders will also be told by email.

18. Contact

Typeferry is run by Yihong He, an individual developer based in China.
Privacy: privacy@typeferry.com
Support: support@typeferry.com
Privacy policy: https://typeferry.com/privacy

19. The two editions at a glance