Corrections happen on your Mac. · Last updated: 27 October 2026
This policy explains exactly what Charm touches, the few network requests it makes, what this website stores, and your rights under the UK GDPR. Charm is built so that your writing stays on your own computer: corrections run on-device, with no account and no cloud.
The data controller for any personal data we hold about you is:
TJH/CO LIMITED (trading as THEODORE HQ)
A company registered in England and Wales
Company number: 16589593
Registered office: Fairway House, Links Business, Fortran Rd, St. Mellons, Cardiff, CF3 0LT, United Kingdom
Email: support@theodorehq.com
Given the small scale and low-risk nature of our processing, we are not required to appoint a Data Protection Officer, and have not appointed one. You can raise any data-protection question with us at the email above.
Charm is a macOS app that corrects spelling, fixes grammar, and predicts your next word in real time, across your Mac apps. It reads the text you are typing through the macOS Accessibility and Input Monitoring permissions, and corrects it inline. It does this entirely on your Mac.
All text processing happens locally on your Mac. Nothing you type is ever sent to a server for correction, and what Charm learns stays on your Mac.
On your Mac, Charm keeps your settings, the words you add to your personal dictionary, the corrections it learns from you, and your word-frequency data, so it can get better the more you write, plus a history of your last 100 corrections (the original text and the fix) so you can review them. Your licence key and activation ID are stored in the macOS Keychain, encrypted by the operating system. None of this is sent off your Mac, except Charm's settings inside diagnostics you choose to include with a bug report (see Crash reports and diagnostics), and removing Charm removes its stored data.
Diagnostic log. Settings > Diagnostics keeps a log to help us fix problems. It leaves your Mac only if you press Send, which opens an email to us that you can read before sending.
Charm uses a local AI model (Gemma 2 2B or Qwen3 4B, 4-bit quantised via Apple MLX). There is no cloud correction mode, no API key field, and no external service integration of any kind for text processing.
Only a few, and none of them carry your text or what you type.
The law requires us to name a lawful basis under Article 6 of the UK GDPR for each category.
No cookies, no third-party trackers, no advertising scripts, no fingerprinting. Our web fonts and our analytics are self-hosted, so loading a page makes no third-party requests at all. Polar's checkout script loads only when you press Buy, and we host our own copy of it. The only things this website stores on your device are two small first-party items, both kept in your browser's local storage (not cookies), described below.
Theme preference. If you switch the site between light and dark, we save that choice as a single charm-theme value so the site remembers it next time. Under PECR (as amended by the Data (Use and Access) Act 2025) this is covered by the "appearance" exception for storage that adapts how a site looks to your preference, so no consent banner is needed. Clearing this site's data removes it.
Website visit note. When you first visit, your browser keeps a small note of the page you landed on, the site that sent you and any campaign tags (stored as a few ta_ values). If you buy, this note is passed to Polar, our payment provider, with your order so we can see which pages lead to sales. It is never used for advertising. If you turn analytics off with the button on this page, no note is kept or sent. Storing it for aggregate insight falls under the PECR "statistical purposes" exception; the underlying processing relies on our legitimate interests (Art 6(1)(f)) in understanding how people find Charm.
To understand which pages people find useful, this website uses one cookieless, privacy-friendly analytics tool: Umami, which we self-host on our own server at analytics.theodorehq.com. Charm the app contains no analytics of any kind; this is the website only. Umami records aggregate, non-identifying information such as page URL, referrer, country, and browser or device type. It sets no cookie, does not fingerprint your device, does not follow you across other websites, and cannot identify you.
Under PECR (as amended by the Data (Use and Access) Act 2025), storage or access whose sole purpose is aggregate statistics to improve the service falls under the "statistical purposes" exception, so no cookie banner is required. That exception is conditional on us giving you clear information (this section) and a simple, free way to opt out (the button below). Turning an IP address into a country, briefly, relies on our legitimate interests (Art 6(1)(f)) in understanding aggregate site traffic. Retention: aggregate figures indefinitely; raw event records for twelve months.
Any standard content blocker (uBlock Origin, Ghostery, Brave's shields) also stops analytics automatically.
We keep suppliers to a minimum. Where one is based outside the UK, an approved UK transfer safeguard is in place:
You can ask us for more detail on any of these safeguards at support@theodorehq.com.
We don't track you across other websites and we don't run advertising, so there is nothing for a Do Not Track signal to switch off. If you are in the United States, including California: we do not sell or share your personal information, and you can ask to see or delete what we hold by emailing support@theodorehq.com.
If Charm ever quits unexpectedly, it asks the next time you open it whether to send us a crash report. Nothing is sent unless you choose Send or Always Send, and you can turn Always Send off at any time with Automatic Crash Reports in Settings > Support. A crash report holds only technical details about the crash: the Charm version, your macOS version, your Mac's chip, and where in Charm it happened. It also holds a short record of what Charm was doing just before, such as which app it was working in, a step that failed and the error code it got. It holds nothing about you, your text or your files, and the full crash report macOS keeps on your Mac never leaves it.
If Charm stops responding for a couple of seconds, it notes where in Charm it was stuck. With Always Send on, it sends us that note with how long it lasted, the same technical details and the same short record of what Charm was doing. Otherwise the note is not sent. If you quit Charm while it is not responding, Charm asks the next time you open it, just as it does after a crash.
When you choose Report a Bug, Charm asks whether to include diagnostics. Charm sends them with your report only if you choose Include. They hold the Charm version, your macOS version, your Mac's chip, whether Charm is on and has its permissions, Charm's settings, how each app is set up in Customise, which AI model you chose, your licence status, any recent crashes and freezes, and Charm's own recent log, which names apps and never what you typed. Any website you set up in Customise is taken out first. Diagnostics go privately to our Support Centre and are never shown on it.
Charm keeps its record of recent activity on your Mac for up to two weeks, and its own log to its latest 200 entries. Both leave your Mac only inside a report you chose to send. Reports go to our Support Centre, where your internet address is used only to stop any one address sending too many, and is never stored. If macOS itself shows a "Send to Apple" dialog, that is Apple's standard system, not us, and you control it in System Settings > Privacy & Security > Analytics & Improvements.
To exercise any of these, email support@theodorehq.com. We respond within thirty days, free of charge.
If you are unhappy with how we have handled your personal data, please tell us first so we can put it right. Under section 164A of the Data Protection Act 2018 you can complain to us directly by email at support@theodorehq.com. We will acknowledge your complaint within 30 days, investigate it, and tell you the outcome. Tip to reach us fast: include the words "Privacy complaint" in the subject line; we flag every email containing that phrase so it goes to the front of the queue.
You also have the right to complain to the UK Information Commissioner's Office (ICO): Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. Helpline: 0303 123 1113. ico.org.uk/make-a-complaint. You can contact the ICO at any time, though we would appreciate the chance to resolve things for you first.
Charm is a general-purpose productivity tool and is not directed at children under 13 (the UK age of digital consent under section 9 of the Data Protection Act 2018). We do not knowingly collect any personal data from anyone under 13. If you believe we hold such data in error, email us and we will delete it promptly.
If we change this policy we will update the date at the top, and email anyone on the customer list a plain-English summary of what changed at least fourteen days before it takes effect. We will not start collecting more from existing users without notice.
For any questions or concerns, email support@theodorehq.com. Every message is read by a person on our team. See also our Terms of Service.