Type legal

Privacy Policy

Effective upon publication · Version 2026-09-09.2

This Privacy Policy explains how Tonic Studios LLC handles information in Type. Tonic Studios is the company's brand and registered fictitious name.

On macOS, a Premium user may explicitly enable Background keyboard sounds and grant Type the system's Input Monitoring permission. While Type is not active, the native app then observes only that a key went down and whether it was a Return key, solely to play the locally configured sound. Type does not read the character or text, identify the other app, store or log the event, or send it anywhere. This opt-in is device-local, is excluded from account settings, backups, and exports, and stops when the user disables it or quits Type. Closing Type's window hides it only while this feature is active so the user can reopen it from the Dock.

After a material policy release, Type keeps any locally cached profile details readable and keeps profile deletion available even without a cached Type profile, but rejects profile edits, new device activation, server-backed settings writes, and new Premium checkout until the current Type Terms and Privacy Policy are accepted. Billing management and purchase restoration remain available for existing obligations without renewed acceptance.

Optional performance and reliability reports help us understand slow page loads, rendering and interactions, and recurring technical failures. They contain coarse performance ranges, fixed error categories and counts, and limited release, initial page-category and platform information. They do not contain writing, document names or paths, account or visitor identifiers, page URLs, credentials, raw error messages or stack traces. We do not use them for advertising, identify individual visitors, reconstruct browsing histories, or join them to account or billing records. This is a bounded sample of an app run, not a complete record of activity or an upload of local console logs.

These summaries are sent to Type's first-party reporting endpoint and processed by Cloudflare Analytics Engine in a separate dataset, not the account database or cloud backups. Ordinary connection metadata reaches Cloudflare when a request is delivered and is separate from the fields in this dataset. We use the dataset for aggregate statistical analysis; no persistent visitor, account or installation identifier is added.

For a web purchase, Paddle processes the payment details you provide directly to its checkout under its own buyer terms and privacy notice. Type and Tonic ID do not store your full card details, payment method, or billing address. Tonic ID stores the minimum provider references, selected plan, price and currency, billing status, paid-through dates, verified event summaries, and entitlement needed to bind the purchase to the authenticated Tonic ID and reconcile changes. It does not send your manuscript, Type profile picture, or editor preferences to Paddle. The checkout-policy receipt contains only the public policy version and a server-assigned acceptance time linked to that operation. It is separate from optional marketing or payment-method-saving consent, neither of which is implied by using Type.

Tonic ID and optional Apple, Google, Dropbox, Microsoft, iCloud, OneDrive, or other enabled integrations have their own privacy terms. CarpeDiction and the lexical providers it exposes for a source you request, which may include Merriam-Webster, Words API, Datamuse, Free Dictionary API, or Twinword, have their own privacy terms. Type does not request Urban Dictionary or Translation sources. Lexical results may be incomplete, inaccurate, or offensive. Store privacy disclosures must match every production provider and data flow before release.

Current paid entitlement information is retained for the account lifetime. Minimal billing audit records are retained for seven full years after the calendar year of the final related event, adjustment, or relationship end, then deleted or irreversibly anonymized. A checkout-policy receipt associated with a retained billing transaction follows that record's retention. Unlinked terminal checkout and portal operations are retained for 90 days. Tonic ID does not retain raw webhook bodies, full card details, payment-method data, or billing addresses in this billing ledger. Account deletion removes direct identity links where appropriate; minimal retained billing records do not promise license restoration or transfer. The protected Tonic ID account export includes bounded paid-billing summaries and associated policy version/time.

Timestamped reporting contributions are retained in Cloudflare Analytics Engine for three months. Sampling and delivery failures can make statistical counts approximate. Turning reporting off drops unsent summaries and stops future collection in that page; it does not undo processing already completed. Reports carry no account or visitor identifier that Type can use to locate an individual's contributions. We do not retain exports to bypass this retention period.

Use Reporting at the bottom of Type to allow or turn off these optional summaries, independently of sign-in, purchases and Terms acceptance. Type shows a notice before collection. For this release, reporting defaults on with an off control only for the United States; all other or unknown regional dispositions require an affirmative choice first. A saved refusal or browser Global Privacy Control signal keeps reporting off. Only a coarse policy disposition is returned to the app; country and IP address are not added to summaries. Your preference is stored locally without an identifier and is not synchronized to your account. Withdrawal takes effect immediately for unsent and future reports; re-enabling applies on the next page load and does not trigger a retry. Writing, sign-in, existing Premium and billing management do not depend on this choice.