Privacy Policy - Tippa

Last updated: 17 July 2026

Tippa keeps everything on your Mac. There is no account, no sign-in, and the app makes no network connections at all — your data never reaches me or any third party. You can export or delete it at any time in Settings, with immediate effect. Questions? Email me@maxkeppeler.com.

This Privacy Policy explains how the Tippa macOS app (bundle identifier com.mk.tippa, the “app”) handles your data and the rights you have over it. The app is available worldwide through the Mac App Store; this policy is written to help you understand how your data is handled and your rights under the EU/EEA General Data Protection Regulation (GDPR), the UK GDPR, the California Consumer Privacy Act as amended (CCPA/CPRA), and other applicable privacy laws. The short version is unusually simple: I do not collect your personal data at all.

At a glance

  • No account and no sign-in. You open the app and start typing.
  • Everything stays on your Mac. Your progress is stored locally on your device; nothing is transmitted to me or to any third party, and I have no way to see it.
  • No network, no analytics, no tracking, no ads, no third-party SDKs. The app is built entirely on Apple system frameworks and makes no internet connections.
  • What you type is never stored or sent. Keystrokes are read only inside the app’s own training window, and only while it is in front, so the app can check your typing in real time. Only typing statistics — such as speed, accuracy, and per-key counts and timings — are saved; the actual text you type is not.
  • No system permissions. Tippa asks for no access to your microphone, camera, contacts, location, or system-wide input.
  • You can export your progress to a file, and delete all of it, at any time in Settings.

Who is responsible (Data Controller)

The person responsible for the app is Maximilian Keppeler, an individual developer based in Germany. You can reach me at me@maxkeppeler.com. Because the app processes your data only on your own device and sends nothing to me, in practice I never receive or have access to your personal data. As I am established in the EU, no Article 27 representative is required, and I have not appointed a Data Protection Officer because I am not legally required to do so; you can contact me directly about any privacy matter using the email above.

What data the app handles, why, and the legal basis

I do not collect, receive, or store your personal data on any server. The app processes the following entirely on your device to do its job. Where the GDPR applies, the lawful basis for this on-device processing is the performance of the agreement to provide you the app you chose to use (Art. 6(1)(b)).

DataWhyWhere it lives
Typing statistics: words-per-minute, accuracy, consistency, technique scores, per-lesson bests and stars, daily practice time, streaks, experience points, and per-key press/error counts and timingsShow your progress, adapt lessons to your weak keys, and keep your streakOn your Mac only (local database in the app’s sandbox container)
App preferences: theme, on-screen-keyboard visibility, error mode, daily goal, practised layout and keyboard form, practice-word language, sound and accessibility optionsRemember how you like the app set upOn your Mac only (macOS user defaults for the app)
The keys you press during a lessonCompare your typing against the lesson text in real time and score itProcessed in memory during the lesson only — never written to disk or transmitted. Only the aggregate statistics above are saved.

The app contains no analytics, no crash reporting, no advertising, and no third-party software development kits of any kind. It does not read any system-wide input: keystrokes are captured with a local, in-app event monitor that only sees events while the Tippa window is focused, which is why the app needs no Input Monitoring or Accessibility permission. It collects no device identifiers, no IP address, and no diagnostic or log data about you.

Where your data is stored and international transfers

All of your data is stored locally on your Mac. Because nothing is transmitted off your device, there is no cloud storage and no international transfer of your data. A future version of the app may add an optional iCloud sync that you would turn on yourself; if that is introduced, your data would sync through your own private Apple iCloud account so it is available on your other Macs, Apple would act as the provider of that storage, and I would still have no access to your data. Any such feature would be opt-in and this policy would be updated before it ships. Purchasing the app is handled by Apple through the Mac App Store (see “Payments” below).

Health and other sensitive data

Tippa is a typing trainer. It does not collect or infer any health, biometric, location, contact, or other special-category data, and it accesses no health or fitness APIs. The typing statistics it stores are performance metrics about your practice, not information about your health.

Third parties

The running app shares your data with no one — there are no third-party services, processors, or SDKs inside it. The only third party involved at all is Apple, which distributes the app through the Mac App Store and processes your purchase; any data you provide to Apple in that transaction is handled under Apple’s Privacy Policy. If the optional iCloud sync described above is added in future, Apple would also provide that storage under the same policy.

Advertising, selling, and sharing

The app shows no advertising, and none is planned. Because I never receive your personal data, I do not and cannot sell or share it — there is nothing to sell or share. I do not sell personal data for money and do not share it for cross-context behavioral advertising as those terms are used under U.S. state privacy laws. If any of this were ever to change, this policy would be updated first.

Retention and deletion

Your data stays on your Mac for as long as you keep it. You are in full control: in Settings → Data you can Reset all progress, which permanently deletes your sessions, lesson stars, and statistics immediately. Removing the app from your Mac also removes its local data store. Any file you create with the Export progress feature is saved to a location you choose and is then yours to keep or delete; it is outside the app and is not removed when you reset progress or delete the app.

Security

Your data never leaves your device, which removes an entire class of risk: there is no server to breach and no transmission to intercept. On your Mac the data is protected by the operating system’s protections and the app’s sandbox. No system is ever perfectly secure, so I cannot promise absolute security, but keeping your data local is the strongest privacy posture the app can take.

Your rights (EU/EEA and UK)

If you are in the EU/EEA or the UK, the GDPR gives you rights to be informed, and to access, rectify, erase, restrict, object to, and port your personal data. Because your data lives only on your device, you exercise most of these directly and instantly: you can view your statistics in the app, edit your preferences, export everything as a structured, machine-readable JSON file, and delete all of it in Settings. There is no request to me needed for any of that, and I hold no copy of your data to act on. You also have the right to lodge a complaint with a supervisory authority — in Germany, your competent State Data Protection Authority, or otherwise the authority in your country of residence. The app carries out no automated decision-making producing legal or similarly significant effects (GDPR Art. 22); the statistics, streaks, and adaptive drills are descriptive features, not automated decisions about you. If you have any question, contact me at me@maxkeppeler.com.

Data you import and export

The app lets you export your progress as a JSON file and import it back later or onto another Mac. Exported files leave the app and become your responsibility to store safely. You are responsible for any file you choose to import.

Your California privacy rights (CCPA/CPRA)

If you are a California resident: I do not collect, sell, or share your personal information. The app keeps your typing statistics and preferences on your own device and transmits nothing to me, so there is no collection by me to itemize, no sale, and no “sharing” for cross-context behavioral advertising. You nonetheless have the rights to know, access, delete, and correct personal information, to limit the use of sensitive personal information, and not to be discriminated against for exercising your rights — and because everything is on your device, you can access, correct, and delete it yourself at any time. I do not use sensitive personal information to infer characteristics, and I do not use your data for advertising. To the extent any opt-out preference signal (such as Global Privacy Control) were ever technically applicable, it would be treated as a valid opt-out.

Other U.S. state privacy rights

If you live in a U.S. state with a comprehensive privacy law (such as Virginia, Colorado, Connecticut, Texas, Oregon, and others), you have rights to access, correct, delete, and obtain a portable copy of personal data, and to opt out of targeted advertising, the sale of personal data, and certain profiling — none of which the app engages in. I do not sell personal data, do not serve targeted advertising, and carry out no profiling that produces legal or similarly significant effects. Because your data stays on your device, you can exercise access, correction, portability (export), and deletion yourself in the app. Some states (for example Maryland) further restrict the sale of sensitive data and require data minimization; the app sells no data and collects only what you enter to run your own practice.

Children’s privacy

The app is not directed to children and collects no personal data from anyone. I do not knowingly collect personal data from children under 16 in the EU/EEA, or under 13 in the United States. If you are a parent or guardian and have any question, contact me at me@maxkeppeler.com.

Changes to this policy

I may update this Privacy Policy from time to time — for example, if the optional iCloud sync is introduced. Material changes will be reflected by an updated “Last updated” date at the top of this page, and I encourage you to review it periodically.

Contact

If you have any question about this Privacy Policy or your data, contact me at me@maxkeppeler.com.

This Privacy Policy is effective as of 17 July 2026.