We don't ask for blind trust — here is how to inspect and verify our app yourself.
KeyXamathi runs exclusively on your local Mac. There are no remote servers, no cloud processing services, and no third-party telemetry APIs.
The app intercepts keystrokes during layout transitions via CGEventTap and corrects mismatched characters before releasing them to the system — entirely in memory within a single local process.
All core switcher functionality performs zero network requests. No background phone-home pings, no advertising trackers, and no third-party crash reporters.
Open Activity Monitor or Little Snitch to monitor outbound network traffic while typing — you will see zero bytes transferred.
You can also follow our independent verification guide for deep packet inspection steps.
macOS isolates password fields with secure input flags. KeyXamathi automatically detects secure text inputs and disables all keystroke interception mechanisms while passwords are being typed.
Your passwords and secure tokens are never inspected, stored, or processed.
Optional community telemetry is disabled by default. If you explicitly choose to enable it in Settings, only high-level aggregate counts are transmitted:
What is NEVER transmitted:
Required — allows CGEventTap to translate transition-delayed keys. This is the only official macOS API for this function.
Not requested — unnecessary for our architecture.
Not requested.
None — except when community telemetry is explicitly opt-in.
We provide a step-by-step independent privacy audit guide spanning Activity Monitor, Little Snitch, and Wireshark tcpdump.
If you ever discover network behavior contradicting this statement, contact us immediately.