Last Updated: March 08, 2026
1. Introduction
Your privacy is critically important to us. This privacy policy explains how Devuap LLC acting as the personal data controller ("we," "us," or "our"), collects, processes, and protects your personal data when you use the TypingMind application, TypingMind Cloud Services, our website (typingmind.com), and related services (collectively, the "Services").
We recognize trust as a key value of our business practice. We have designed TypingMind to give you maximum control over your data, offering a fully local, privacy-first experience by default, alongside convenient, opt-in cloud features.
If you have any doubts or questions, please contact us at support@typingmind.com.
2. The TypingMind Architecture: Local vs. Cloud
How your data is handled depends entirely on how you choose to use the app:
- A. Local / Static Mode (Default): By default, TypingMind operates as a static web application. All of your data—including API keys, chat history, prompts, and messages—is stored locally on your device's browser using Local Storage and IndexedDB. We do not have a backend server that reads or collects this local data.
- B. TypingMind Cloud Services (Opt-in & SaaS): If you actively opt-in to TypingMind Cloud (for Sync, Backup, or Sharing) or use our multi-tenant SaaS features (TypingMind Team), we must process and store your data on our servers to provide those services.
3. How AI Requests and Proxies Work
By default, requests to AI providers (like OpenAI or Anthropic) are sent directly from your device's browser to the AI provider's server. We do not have any intermediate server to look at the requests or log the responses.
If an AI provider does not accept direct browser requests, you may opt to use our built-in proxy server. This feature is entirely opt-in only. If you use our proxy, we simply pass the request through as-is; we do not look at, read, or log any of your requests or responses.
Data sent to any AI providers is governed by their respective privacy policies. We are not responsible for how third-party AI providers handle your data.
4. What Data We Collect
We only collect personal information when you directly provide it to us (e.g., by purchasing a license or opting into Cloud services) or automatically through necessary website operations. The data we may collect includes:
- Account & Contact Data: Email address, first name, and last name.
- License Data: Your purchased license key(s).
- Cloud Data (Opt-in only): If you use TypingMind Cloud, we store your selected chats, prompts, messages, AI agents, and bookmarks.
- Technical Data: IP address, anonymous crash logs, and aggregated website analytics (visitor counts).
- Payment Data: Processed entirely by our payment processor/merchant of record. We do not collect or store your full credit card information.
5. How and On What Legal Ground We Use Your Data
We use the personal data we collect strictly for the purposes for which we received it. Under the General Data Protection Regulation (GDPR), we process your data on the following legal grounds:
- Performance of a Contract (Art. 6(1)(b) GDPR): To verify your license key, provide access to premium features, sync your data across devices via TypingMind Cloud, and generally provide the Services you requested.
- Your Consent (Art. 6(1)(a) GDPR): To send you newsletters, product updates, or to process specific data when you explicitly opt-in (e.g., generating public share links for your chats). You have the right to withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
- Legitimate Interests (Art. 6(1)(f) GDPR): To monitor application stability via anonymous crash logs, maintain website security, prevent fraud, and handle customer support inquiries or dispute resolution.
6. How We Store and Protect Your Data
We store your data securely using electronic means only. We have adopted reasonable and appropriate physical, technical, and administrative procedures designed to prevent unauthorized access, maintain data accuracy, and ensure appropriate use of the information.
- All communication with our servers is encrypted using HTTPS.
- Data stored on our cloud databases (provided by AWS) is encrypted at rest.
- We store your data only for the period of time needed to realize the purpose for which it was collected. Once that period expires (or upon your deletion request), we delete or securely anonymize the data.
7. Who We Share Data With
Since we operate worldwide, we may transfer collected data outside your country of residence. We transfer data only to countries or entities assuring adequate levels of protection (such as those utilizing EU Standard Contractual Clauses).
We may share your information with:
- Service Providers (Subprocessors): We retain trusted third-party providers for hosting, cloud infrastructure, analytics, crash reporting, and payment processing. They may use the information solely in conjunction with the specific services they provide for us. For a complete, up-to-date list of our providers, please refer to our Subprocessors List.
- For Legal Purposes: We may disclose information to respond to duly authorized requests of police and governmental authorities, comply with any law or court order, investigate fraud or security threats, or protect the rights and safety of Devuap LLC and our users.
8. Cookies
Cookies are small text files placed on your device to collect standard internet log information and visitor behavior.
- How we use them: If you enable TypingMind Cloud for Sync and Backup, we use cookies strictly to store your logged-in state. This provides a seamless sync experience without requiring you to repeatedly log in. Our authentication cookie expires after 30 days of inactivity.
- Managing Cookies: You can set your browser to refuse cookies. However, if you do so, the TypingMind Cloud Sync features will not function properly.
9. Changes to This Privacy Policy
If we modify this Privacy Policy, we will post the revised statement on this page with an updated revision date. If we make significant changes that materially alter our privacy practices, we may also notify you by other means, such as an email or an in-app notice. Your continued use of the Services after changes take effect indicates your acceptance of the updated policy.
10. Contact Us
If you have comments, questions, or concerns regarding our collection and use of your personal data, please email us at support@typingmind.com. We treat your concerns confidentially and will aim to resolve them in a timely and appropriate manner.
Should you wish to report a complaint or feel that we have not addressed your concern in a satisfactory manner, you retain the right to lodge a complaint with your national or local Data Protection Authority (DPA).
Data Subject Requests from EU Data Subjects according to the GDPR
We value your Data Subject Rights under EU GDPR and have therefore appointed Prighter as representative according to Art 27 EU GDPR. We provide you with an easy way to submit a privacy related request like a request to access or erase your personal data by visiting: https://app.prighter.com/portal/18105413056