Your keystrokes stay on your Mac. · Last updated: 27 June 2026
This policy explains exactly what Charm touches, the few network requests it makes, what this website stores, and your rights under the UK GDPR. Charm is built so that your writing stays on your own computer: corrections run on-device, with no account and no cloud.
The data controller for any personal data we hold about you is:
TJH/CO LIMITED (trading as THEODORE HQ)
A company registered in England and Wales
Company number: 16589593
Registered office: Fairway House, Links Business, Fortran Rd, St. Mellons, Cardiff, CF3 0LT, United Kingdom
Email: support@theodorehq.com
Given the small scale and low-risk nature of our processing, we are not required to appoint a Data Protection Officer, and have not appointed one. You can raise any data-protection question with us at the email above.
Charm is a macOS app that corrects spelling, fixes grammar, and predicts your next word in real time, across your Mac apps. It reads the text you are typing through the macOS Accessibility and Input Monitoring permissions, and corrects it inline. It does this entirely on your Mac.
All text processing happens locally on your Mac, and stays there. Charm does not collect, store, or transmit your text to any server. Your keystrokes never leave your computer.
On your Mac, Charm keeps your settings, the words you add to your personal dictionary, the corrections it learns from you, and your word-frequency data, so it can get better the more you write. Your licence key and activation ID are stored in the macOS Keychain, encrypted by the operating system. None of this is ever transmitted off the device, and removing Charm removes its stored data.
Charm uses a local AI model (Gemma 2 2B or Qwen 2.5 3B, 4-bit quantised via Apple MLX). There is no cloud correction mode, no API key field, and no external service integration of any kind for text processing.
Only a few, and none of them carry your text or what you type.
The law requires us to name a lawful basis under Article 6 of the UK GDPR for each category.
No cookies, no third-party trackers, no advertising scripts, no fingerprinting. Our web fonts and our analytics are self-hosted, so loading a page makes no third-party requests at all. The only things this website stores on your device are two small first-party items, both kept in your browser's local storage (not cookies), described below.
Theme preference. If you switch the site between light and dark, we save that choice as a single charm-theme value so the site remembers it next time. Under PECR (as amended by the Data (Use and Access) Act 2025) this is covered by the "appearance" exception for storage that adapts how a site looks to your preference, so no consent banner is needed. Clearing this site's data removes it.
First-touch attribution record. We save a small record of the page you first landed on, the site that referred you, any campaign tags in the link you arrived through, and a first-visit timestamp (stored as a few ta_ values). We use it only to understand which links lead to purchases if you later buy Charm. It is not a cookie, it stays in your own browser, it is never shared with anyone else, and it is never used to track you across other websites. Storing it for aggregate insight falls under the PECR "statistical purposes" exception; the underlying processing relies on our legitimate interests (Art 6(1)(f)) in understanding how people find Charm. You can remove it at any time by clearing this site's data or using any standard content blocker.
To understand which pages people find useful, this website uses one cookieless, privacy-friendly analytics tool: Umami, which we self-host on our own server at analytics.theodorehq.com. Charm the app contains no analytics of any kind; this is the website only. Umami records aggregate, non-identifying information such as page URL, referrer, country, and browser or device type. It sets no cookie, does not fingerprint your device, does not follow you across other websites, and cannot identify you.
Under PECR (as amended by the Data (Use and Access) Act 2025), storage or access whose sole purpose is aggregate statistics to improve the service falls under the "statistical purposes" exception, so no cookie banner is required. That exception is conditional on us giving you clear information (this section) and a simple, free way to opt out (the button below). Turning an IP address into a country, briefly, relies on our legitimate interests (Art 6(1)(f)) in understanding aggregate site traffic. Retention: aggregate figures indefinitely; raw event records for twelve months.
Any standard content blocker (uBlock Origin, Ghostery, Brave's shields) also stops analytics automatically.
We keep suppliers to a minimum. Where one is based outside the UK, an approved UK transfer safeguard is in place:
You can ask us for more detail on any of these safeguards at support@theodorehq.com.
Charm does not send crash reports, diagnostics, or telemetry automatically. Nothing about a crash leaves your Mac unless you choose to send it. If macOS itself shows a "Send to Apple" dialog, that is Apple's standard system, not us, and you control it in System Settings > Privacy & Security > Analytics & Improvements.
To exercise any of these, email support@theodorehq.com. We respond within thirty days, free of charge.
If you are unhappy with how we have handled your personal data, please tell us first so we can put it right. Under section 164A of the Data Protection Act 2018 you can complain to us directly by email at support@theodorehq.com. We will acknowledge your complaint within 30 days, investigate it, and tell you the outcome. Tip to reach us fast: include the words "Privacy complaint" in the subject line; we flag every email containing that phrase so it goes to the front of the queue.
You also have the right to complain to the UK Information Commissioner's Office (ICO): Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. Helpline: 0303 123 1113. ico.org.uk/make-a-complaint. You can contact the ICO at any time, though we would appreciate the chance to resolve things for you first.
Charm is a general-purpose productivity tool and is not directed at children under 13 (the UK age of digital consent under section 9 of the Data Protection Act 2018). We do not knowingly collect any personal data from anyone under 13. If you believe we hold such data in error, email us and we will delete it promptly.
If we change this policy we will update the date at the top, and email anyone on the customer list a plain-English summary of what changed at least fourteen days before it takes effect. We will not start collecting more from existing users without notice.
For any questions or concerns, email support@theodorehq.com. Every message is read by a person on our team. See also our Terms of Service.