Privacy Policy

Unfumble is built to be private by default. Your keystrokes are read only on your own Mac, to fix the word you're typing — and nothing about what you type ever leaves your computer. This policy explains exactly what the app and this website do and don't handle.

1. Who we are

Unfumble (“Unfumble”, “we”, “us”, or “our”) is a macOS application created and maintained by Alon Moradov. This policy covers the Unfumble app for macOS and this website, unfumble.app. For the purposes of applicable data-protection law, Unfumble is the data controller for the limited information described below.

2. The app — on-device by design

Unfumble is a keyboard utility: it watches the word you're currently typing so it can fix wrong-keyboard-layout mistakes in real time. All of that analysis happens locally, on your Mac, using bundled word-frequency lists. Unfumble has no servers that receive your input, and it does not send your keystrokes, the contents of your messages, or your documents anywhere.

3. The app — what it processes

Keystrokes

To do its job, Unfumble inspects keystrokes through the macOS Accessibility API while you type, and evaluates the word you're writing as soon as it recognizes what you meant to type — often before you finish the word, not only when you press Space or Enter. This processing is ephemeral and entirely local — keystrokes are held only long enough to decide whether to correct the current word, and are never transmitted to us or to any third party.

Text on your screen

To recognize names, jargon, and other words you use that aren't in its built-in dictionaries, Unfumble can learn vocabulary from the text visible in the app you're using — including web pages — read through the same on-device Accessibility API. Password fields are protected by macOS, so Unfumble cannot read passwords or other input you enter into them. It keeps only individual words and how often each was seen — never sentences, the surrounding text, screenshots, or where a word came from. What it learns is encrypted on your Mac with a key held in the macOS Keychain, used only to improve corrections locally, and never transmitted to us or anyone else. It stays off until you turn it on, and you can erase everything it has learned, at any time in Settings ▸ Learning.

Information stored on your Mac

The only data Unfumble keeps is stored locally on your device, under your control:

• Your “leave this alone” list — words you teach Unfumble to ignore in a given app (by undoing a fix and choosing to stop fixing it). This is saved as plain JSON at ~/Library/Application Support/Unfumble/learning.json, which you can inspect or delete at any time.
• What it learns to personalize corrections — to fit your writing, Unfumble keeps a small on-device model of the words and word pairs (short n-grams) you type, the words you read on screen that aren't already in its dictionaries, and which language you tend to use in a given app or website. These are saved as local files in ~/Library/Application Support/Unfumble/ (the website-language list and the vocabulary learned from your screen are encrypted on disk), used only to improve corrections on your Mac, and never uploaded.
• Preferences and counters — your settings and the “Fumbles Fixed” counter shown in the menu, stored in the standard macOS preferences for the app.
• Optional diagnostics — if you enable diagnostics, a local log is written to /tmp/unfumble.log to help you troubleshoot. It stays on your machine and is never sent to us.

Permissions

Unfumble requires the macOS Accessibility permission, which is what lets it read a word and replace it in place — and, when vocabulary learning is on, read the text visible in the app you're using to learn new words (only words are kept, and password fields are never read). It can optionally ask for permission to show Notifications — used only to ask whether to stop fixing a word after you undo a correction, and generated and shown entirely on your Mac. It does not request your contacts, files, camera, microphone, or location.

4. The app — licensing and payments

Unfumble is free for your first 100 fixes. To keep using it after that, you choose either a yearly subscription or a one-time lifetime license. Two limited pieces of processing apply here:

• License verification. When you activate or validate a license, the app sends your license key and a generated device identifier to our licensing provider, Lemon Squeezy, so it can confirm the key is valid — and, for a subscription, still active — and count activations. No keystrokes or typed content are included in these requests.
• Payments. Purchases are processed by Lemon Squeezy, which acts as the merchant of record. When you buy a license, you provide your details (such as name, email address, and payment information) directly to Lemon Squeezy. We do not receive or store your full payment-card details; we may receive order and license information (such as your email and license key) to provide support and manage your license.

Lemon Squeezy processes this information under its own terms and privacy policy. Please review the Lemon Squeezy Privacy Policy for details on how it handles your purchase data.

5. The website

The website at unfumble.app is a marketing site, and we aim to keep it nearly as quiet as the app:

• Privacy-friendly, cookieless analytics. To understand how the site is doing — how many people visit, which pages they read, and where they arrive from — we use Cloudflare Web Analytics together with our own first-party event counts. Both are cookieless: no cookies, no cross-site tracking, and no advertising profiles. Our first-party events include a random per-visit id, kept only in your browser tab and cleared when you close it, so we can see how a single visit flows through the site; it never identifies you and is never shared. We don't run third-party advertising trackers.
• Windows waitlist. If you choose to join, we collect the email address you provide so we can send a confirmation email and one email when Unfumble for Windows is ready. EmailOctopus stores the address and sends those emails on our behalf. The form uses double opt-in, so the address is not subscribed until you confirm it, and Google reCAPTCHA may process limited device and network information to prevent automated abuse. We do not use the address for unrelated marketing. You can unsubscribe at any time or ask us to delete it. See the EmailOctopus Privacy Policy and Google Privacy Policy for details.
• Theme preference. Your light/dark choice is stored locally in your browser (localStorage) and never leaves your device.
• Hosting and fonts. The site is hosted on Cloudflare, which may process standard server logs (including IP addresses) to deliver and secure the site. It also loads web fonts from Fontshare and Google Fonts; when your browser fetches those fonts, your IP address is visible to those providers under their respective privacy policies.

6. What we don't collect

Other than information you choose to provide for the Windows waitlist, a purchase, licensing, or support, we do not collect or sell your personal information. In particular, we do not collect your keystrokes, the text you type, your browsing history, your location, or any advertising profile.

7. Sharing your information

We don't sell or rent personal information. We share purchase and license data with Lemon Squeezy to process payments and manage licenses, and a Windows waitlist email address with EmailOctopus to manage the list and send the promised emails. Google may process limited technical information when reCAPTCHA protects the signup form. We may also disclose information if required to comply with the law or to protect our rights.

8. Data retention

On-device data stays on your Mac until you delete it or uninstall the app. Purchase and license records held by Lemon Squeezy (and any order data we access for support) are retained for as long as needed to provide the license, support you, and meet legal and accounting obligations. A Windows waitlist email address is kept until the launch notice has been sent and is no longer needed, unless you unsubscribe or ask us to delete it sooner. Limited suppression records may be retained to ensure that an unsubscribe request remains honored.

9. International transfers

Because payments and license checks are handled by Lemon Squeezy, waitlist emails by EmailOctopus, signup abuse prevention by Google reCAPTCHA, and web fonts by third parties, some limited data (such as your email or IP address) may be processed in countries other than your own. Those providers maintain their own safeguards for such transfers.

10. Your rights

Depending on where you live, you may have rights to access, correct, delete, or restrict the use of your personal information. Most of the data Unfumble touches lives on your own device and can be removed by deleting the files above or uninstalling the app. For waitlist data, use the unsubscribe link in an email or contact us to request access or deletion. For purchase-related data, contact us using the details below and we'll help, or coordinate with Lemon Squeezy as appropriate. You won't be discriminated against for exercising these rights.

11. Children's privacy

Unfumble is not directed to children, and we do not knowingly collect personal information from children under 13 (or the minimum age required in your jurisdiction).

12. Security

Because Unfumble keeps your data on your own machine and transmits as little as possible, the most important safeguards are the ones macOS already gives you. For the limited data handled by our payment, licensing, and waitlist providers, we rely on their security practices. No method of storage or transmission is ever 100% secure, but we design Unfumble to minimize what's at risk in the first place.

13. Changes to this policy

We may update this policy from time to time. When we do, we'll revise the “Last updated” date above, and significant changes will be reflected on this page.

14. Contact

Questions about privacy? Reach us at privacy@unfumble.app.

This Privacy Policy is provided for general information and isn't legal advice. Your use of Unfumble is also governed by our Terms & Conditions.