Privacy — in plain English
Your typing patterns belong to you.
SmashKey is built around a simple principle: the things you teach SmashKey are yours, stay on your device, and don't get accumulated anywhere we can see them.
What stays on your device
Your input — every "what you typed → what you meant" example SmashKey learns from — lives entirely in a local file on your computer. We do not upload it. We do not back it up to our servers. We do not have a copy. If you uninstall SmashKey, you can keep that file or delete it; it's yours either way.
What travels off your device
When you ask SmashKey to fix a piece of text, the text you selected and a small, relevant slice of your input are sent to our server, used to make the correction, and then discarded. We log that the request happened (so we can count fixes against your free or paid quota) but we do not retain the contents of what you typed or what came back.
What we know about you
When you sign in via smashkey.app, we create an account with your email address, your tier (free or paid), and a count of how many fixes you've used. That's it. We use your email to send you product-relevant notices (a launch update, a billing receipt if you subscribe). We don't sell it. We don't share it with advertisers.
If you got SmashKey from the Microsoft Store, there's no sign-in at all. We still keep an account record — your tier (free or paid) and your fix count — but we identify it using a one-way hash derived from your Microsoft Store receipt. Microsoft handles your subscription billing. We never see your email, your card details, or anything else identifying — just the receipt hash, your tier, and your fix count. If you ever contact support, that's the only moment we'd see your email.
What we don't do
- We don't accumulate your input on our servers.
- We don't analyse the contents of your typing for patterns to sell.
- We don't share your data with third parties for marketing.
- We don't track you across other websites.
- We don't run ads in the product.
The third parties we do rely on
To make SmashKey work, we route decode requests through a small number of providers. Today that's Anthropic for the language model that does the actual correction work, Cloudflare for hosting and database, and Clerk for sign-in (smashkey.app users only). Each sees only what they need to do their job — the language model sees the text being corrected, Cloudflare sees that a request came through, Clerk sees your sign-in. None of them retain decode contents under our agreement with them.
For payments, smashkey.app subscriptions go through Lemon Squeezy and Microsoft Store subscriptions go through Microsoft. Both payment processors see your card and billing address — we don't. We only see confirmation that a subscription is active.
Where your data lives
Account records sit on Cloudflare's global edge network. Decode requests are processed by Anthropic in the United States. Logs are kept for 30 days for debugging and abuse prevention, then deleted. Your local input file never leaves your device.
Your rights
You can ask us at any time to tell you what account data we hold, correct anything that's wrong, or delete your account and all associated data. Email support@smashkey.app and we'll respond within 30 days. If you stop using SmashKey, we keep your account record for 12 months in case you come back, then anonymise it.
If you have concerns about how we've handled your data and we haven't resolved them, you can complain to the relevant privacy regulator — the OAIC in Australia, the ICO in the UK, or your data protection authority in the EU.
SmashKey isn't for kids under 13
We don't direct SmashKey at children, and we don't knowingly collect data from anyone under 13. If you believe a child has been using SmashKey, email support@smashkey.app and we'll delete the account.
Changes
If we change how we handle your data, we'll update this page and tell you in the app before the change takes effect. We won't quietly broaden what we collect.
Get in touch
Privacy questions go to support@smashkey.app. We aim to reply within a few working days.
This page is the canonical privacy statement for SmashKey on Windows during private beta. When the product expands to other platforms or adds features that change what data is involved, this page updates first and the change is announced in the app.