Typefix

Privacy Policy

Last updated: 2026-07-19

Typefix is a private writing assistant: a Chrome extension that checks spelling and grammar as you type and can rewrite or polish text with AI on demand. This policy explains exactly what happens to your text and the little data we keep. The short version: on-device checks never leave your browser, and our server stores none of the text you write.

On-device checking, by default

Spelling and grammar checking runs entirely on your device. Typefix uses the Harper checker compiled to WebAssembly and running inside the extension, so the underlines you see as you type are produced locally and work offline. No text leaves your browser for these on-device checks.

Optional AI features

When you sign in with your Google account, you can use Typefix’s AI features: rewrites, tone changes, drafting, and a deeper AI grammar pass. For these, the specific text you select or are actively writing is sent to the Typefix server (the /api/check endpoint), which forwards it to Anthropic’s API to produce the check or rewrite and returns the result to your browser.

The server does not store that text; it is processed in memory to generate the response and then discarded. If you prefer, you can limit AI to on-demand rewrites only (turning off the continuous AI grammar pass) in the extension’s options. Any AI results that are cached for reuse are cached locally on your device, never on the server.

The Typefix server stores no text you write. For AI requests it records only metadata; see “What we store” below.

The one exception: suggestion diagnostics

There is a single, deliberately narrow exception, used only to improve suggestion quality. For a small allowlist of development (“dogfood”) accounts (currently the product owner only), short snippets around a flagged suggestion are stored so that bad suggestions can be found and fixed.

For every other account this endpoint is a no-op: the server drops the data and stores nothing. If you are not on this development allowlist, no text you write is ever stored.

What we store (metadata only)

For accounts that use the AI tier, we keep a small amount of metadata, never the text you write:

Usage records (one per AI request): the mode (for example grammar or rewrite), the model used, input and output token counts, the status (ok, error, or rate-limited), how long the request took, and the hostname of the site you were on (for example mail.google.com), never the full URL or page path.
Error records: a technical exception message and a short breadcrumb, used to diagnose failures.
Your account: your Google email and name (for sign-in), your personal API token stored only as a SHA-256 hash (the token itself is shown once and never saved), and per-user rate caps.

Your controls

Disable Typefix on specific sites, or turn off checking entirely, from the extension’s Options page.
Uninstalling the extension removes its local data from your browser (Chrome clears the extension’s chrome.storage).
Deactivated accounts can no longer use the AI tier.

Permissions and scope

Typefix only looks at the text in editable fields on the pages you visit: the box you are typing in. Content elsewhere on the page is not read or collected.

The extension requests broad host access (<all_urls>) for one reason: so that underlines and fixes work in editable fields on every site, rather than a preselected few. It is not used to read or transmit page content beyond the text you write.

What we don’t do

We do not sell your data.
We show no ads.
We use no third-party analytics or tracking.

Subprocessors

Typefix relies on a small set of service providers:

Vercel: hosting for the Typefix server.
Neon: Postgres database (stores the metadata described above; no text).
Anthropic: processes text for AI checks and rewrites, only when you use AI features.
Google: sign-in (authentication).

Data deletion and questions

To request deletion of your account or data, or for any privacy question, contact support@typefix.io.

Typefix, a private writing assistant. This policy is published at https://typefix.io/privacy; the previous address (typely-aigarspavlovics.vercel.app/privacy) remains active as a legacy alias.