Trust & Transparency

Your Privacy is the Core Foundation of Our Design

KeyXamathi was built from day one under an Offline-first architecture. Every keystroke and sentence you type is processed strictly in your Mac's local memory. No blind trust needed—you can independently verify this yourself.

✓ Zero Trust Required. Verify Independently.

You can use system-level network inspection tools like Little Snitch, Lulu, or macOS Network Monitor to inspect and verify that KeyXamathi makes zero network connections during regular usage.

1. What Happens on Your Device (Local Processing)

To switch keyboard layouts and fix mistyped words automatically, the application requires only the macOS Accessibility permission (we do not request separate Input Monitoring permissions pursuant to §13 security guidelines). All processing is restricted to your Mac's temporary memory (RAM):

🔒 100% Local Processing

Every keystroke, word, and sentence typed across any application is analyzed only against local dictionaries stored on your device.

🚫 Zero Keystroke Logging to Disk

We do not maintain any keylogger, persistent typing log, or disk history. Buffers are purged from memory immediately after word boundary evaluation.

2. Diagnostic Stability Reports

When unexpected application states occur or when you wish to report an issue within KeyXamathi, you may open the Stability Report window to submit diagnostic telemetry to the engineering team under strict privacy protections:

🛡️ 100% Voluntary User Opt-In (Manual Submission Only)

There is zero automated background transmission of diagnostic crash dumps. You can inspect every line of JSON payload in the app before submission and choose "Save to File" to retain your own copy.

✓ What is Included (Telemetry)

  • Last 200 operational state transitions (Channel A without text characters)
  • Daily aggregate counters for the past 7 days (e.g. recovery count, uptime)
  • KeyXamathi app version and macOS release build for bug reproduction
  • Optional message and contact email you voluntarily provide

✗ What is NEVER Sent

  • Text, words, passwords, or keystrokes you have typed
  • Full name or personal identity information
  • Hardware UUID, MAC Address, or persistent machine installation IDs
  • Raw IP address (incoming requests use a salted daily hash strictly for rate limiting)

⏱️ Data Retention & Automatic Destruction (90-Day Auto-Purge)

All stability reports are stored for a maximum of 90 days on encrypted cloud infrastructure, after which they are permanently and automatically deleted. Diagnostic data is never transferred or sold to third parties.

Stability Report Inspection & Deletion Tool

If you have submitted a stability report and received a Report ID (e.g. R7K2-9QMX), you can check its status or permanently delete it from our servers immediately.

3. Privacy Support & Data Rights

For questions regarding our privacy practices or to exercise your data subject rights under PDPA / GDPR, please contact our team directly at privacy@xamathi.com or burapa@xamathi.com.