Typsaying Privacy Policy
Typsaying (吧唧输入) is a local-network voice input application for phones and computers. This policy explains what the app processes, where that information stays, how it is protected, and the choices you have. It applies to the Typsaying mobile app (Android, HarmonyOS, iOS), the Typsaying receiver for Windows, macOS, Linux and HarmonyOS PC, and this policy page.
At a glance
- No account
- No cloud service
- No ads
- No analytics or telemetry
- No selling of data
- Voice recognition, punctuation and AI correction run on your devices. We do not receive your audio or text.
- Recognized text is sent only to the computer you paired with, over your local network, inside an encrypted connection.
- History, drafts, settings, models and pairing records are stored locally on your devices.
- You can delete history in the app, unpair a computer, reset the security identity, or uninstall the app to remove local data.
1. Who we are and what this policy covers
Typsaying is developed by an independent developer ("we", "us"). For the limited processing described below, we are the data controller. Your device manufacturer, operating system, app store, and any third-party website you download models from may act as separate controllers or processors under their own policies.
The app does not require an account, does not include advertising or analytics SDKs, and does not operate a server that receives your voice, text, history or device identifiers.
2. Information the app processes
| Information | Why it is processed | Where it stays | Retention |
|---|---|---|---|
| Microphone audio | Live speech recognition while you hold or toggle the microphone. | Processed in memory on your phone by the bundled offline speech model. Audio is not sent to us or to a cloud speech service. | Not retained after recognition. Only the resulting text is kept. |
| Recognized text and drafts | Send text to your paired computer, type it into the selected window, keep a local history, restore unsent drafts. | Phone app storage and the paired computer. Transit uses TLS plus application-level AES-256-GCM. | Until you delete the record, clear history, or uninstall the app. |
| AI correction and punctuation input | Improve punctuation or wording with on-device models. | Processed locally by the bundled or imported models. Not sent to model vendors or cloud AI services. | Not retained beyond the current correction, except the resulting text in history. |
| Pairing records | Authenticate a phone and computer, encrypt traffic, reconnect automatically. | Both paired devices: device name, device identifier, shared secret, TLS certificate fingerprint, local addresses and the receiver port. | Until you unpair the device, reset the identity, or uninstall the app. |
| Device name | Show which phone is connected and label history records. | Stored on the phone and sent to the paired computer. | Until changed, unpaired, or uninstalled. |
| Target window information (computer) | Show where text will be typed and display the matching icon in history. | Read locally from the operating system (application name, window title, icon). Never uploaded. | Only while needed for the current session or the local history entry. |
| Remote input events | Keyboard, touchpad, actions and window switching that you perform on the phone. | Sent only to the paired computer over the encrypted channel and injected there. Not stored as a log. | Transient. |
| Clipboard | Paste text into the search box, or deliver text in clipboard mode. | Handled locally by the operating system. Clipboard contents are not sent to us. | Controlled by the operating system and your clipboard settings. |
| Local network information | Discover and connect to your computer, show pairing addresses. | Local network only. During pairing the receiver advertises its name, server id, TLS fingerprint and port over mDNS on the local network. | Not retained by us. The advertisement stops when pairing ends. |
| Model files | Offline speech, punctuation and AI correction. | Stored on your devices. You can import them, download them on the computer, or transfer them from a paired computer to the phone. | Until you delete them. |
| Messages you send us | Respond to questions, requests or complaints. | Our email inbox. | As long as needed to respond and meet legal obligations. |
The pairing QR code contains connection details (local addresses, port, computer name, server id, TLS fingerprint and a one-time pairing secret). Treat it like a password while it is valid, and do not share screenshots of it.
3. Permissions and system access
Phones (Android, HarmonyOS, iOS)
- Microphone — only while you use voice input. You can revoke it in system settings at any time.
- Local network — to reach the paired computer. The app does not use the internet to send your content to us.
- Camera / scanning — only when you scan a pairing QR code or barcode through the system scanning interface. Photos and camera frames are not stored.
- Vibration — haptic feedback for keys and actions.
- Clipboard paste — reading the clipboard only after you tap the system paste control.
Computers (Windows, macOS, Linux, HarmonyOS PC)
- Accessibility / input monitoring — to type text, send remote keyboard and pointer events, list windows and read the focused window title and icon. This is used only for the features you invoke.
- Clipboard — when you choose clipboard delivery or automatic typing falls back to it.
- Local network and firewall — to accept phone connections. On Windows the app may ask for administrator approval (UAC) to add a firewall rule for its listening port. It changes only its own rule.
- Autostart — only if you enable it in settings.
- USB debugging (optional) — if you choose USB pairing, the computer runs
adborhdcto create a reverse port tunnel to the phone. This requires USB debugging/HDC on the phone and should only be used with a trusted computer. The tunnel is removed when pairing is cancelled or the receiver exits.
4. On-device AI and model files
Speech recognition, punctuation restoration and AI correction run on your devices using open models (for example sherpa-onnx speech models, ONNX punctuation models and GGUF correction models). Your audio and text are not sent to us, to model vendors, or to a cloud AI service.
Models can be imported from your own files, downloaded on the computer from a third-party model host such as ModelScope, or transferred from a paired computer to the phone over the local network. Model downloads make ordinary HTTPS requests to the host, which may see standard request information such as your IP address and user agent under its own privacy policy. Model files are stored locally and are not uploaded by the app.
5. Pairing and local network
Phones and computers must be on the same local network and must be paired before they can exchange content. Pairing uses a QR code or a six-digit code, a shared secret and a pinned TLS certificate. Pairing codes expire and are rate limited; repeated wrong attempts lock the current pairing.
While the pairing page is open, the computer advertises its presence over mDNS on the local network so the phone can find it. The advertisement contains the computer name you configured, a random server id, the TLS fingerprint and the port. It stops when pairing ends. We do not receive this information.
6. What we never collect
- No account, name, phone number or email is required to use the app.
- No audio, recognized text, drafts or history are uploaded to us.
- No analytics, advertising identifiers, crash reports or usage telemetry are sent to us.
- No location, contacts, photos, browsing history or installed-app lists are collected.
- We do not sell personal information or share it with data brokers.
7. When information leaves your devices
- To your paired computer — only the content you send (text, input events, model files or history you choose to transfer), over the encrypted local connection.
- To a model host — when the computer downloads a model from ModelScope or another site you choose. The request does not include your history or text.
- To this policy's hosting provider — when you open this page, the hosting provider may process standard request data (IP address, user agent, time) to deliver the page and protect the service.
- To us by email — only if you contact us.
- When required by law — or when necessary to protect rights, safety and security.
8. Security
- Phone-to-computer traffic uses TLS with a pinned self-signed certificate whose fingerprint is part of the pairing data.
- Application messages are encrypted with AES-256-GCM using a key derived from the pairing secret with HKDF-SHA256, with sequence numbers that reject replayed messages.
- The desktop history database is encrypted at rest. The phone keeps its history in the application sandbox. Private keys are stored in the platform secret store (DPAPI, Keychain, Secret Service or the platform keystore).
- Pairing codes expire and are rate limited. Resetting the security identity invalidates existing pairings and requires pairing again.
- No method of transmission or storage is completely secure. You are responsible for keeping your devices, pairing QR codes, accounts and local network secure, and for using the app only where you have the right to record and process speech.
9. Retention
Local data stays until you delete it: individual history records, all history, saved drafts, paired devices, imported models, and settings. Uninstalling the app removes its local data, except data the operating system keeps in backups or in the keychain/secret store until you remove it there. Emails you send us are kept only as long as needed to respond and meet legal obligations. The policy page host may keep standard server logs for a limited period under its own policy.
10. Your rights and choices
Depending on where you live, you may have the right to access, correct, delete, restrict or object to processing, to receive a copy of your information, to withdraw consent, and to lodge a complaint with your local data protection authority. Because the app stores data locally, you can exercise most of these rights directly:
- delete individual history records or clear all history in Settings;
- unpair a computer or reset the security identity;
- delete models you imported or downloaded;
- revoke microphone, camera, accessibility or clipboard permissions in system settings;
- uninstall the app and, if desired, remove its data directories and keychain entries.
You can also contact us at the address below. We will respond within the time required by applicable law.
11. Children
The app is not directed to children under 13, or under the minimum age required by local law (for example, under 14 where Chinese law applies). Do not use the app to record or process another person's voice without their consent. If you believe a child has provided personal information to us, contact us and we will take appropriate steps.
12. International transfers
We do not transfer your audio, text, history or window information to our servers. Core functions operate on your devices and local network. If you choose a third-party model host, that host may process requests in other countries under its own policy. This policy page is served by a hosting provider that may process requests in various locations.
13. Third-party services
The app may interact with your operating system (speech, notifications, accessibility, clipboard, scanning and paste controls), the app store that distributes it, model hosts you choose (such as ModelScope), and the hosting provider for this page. These services are governed by their own privacy policies. We do not control them.
14. Changes to this policy
We may update this policy to reflect changes in the app or legal requirements. We will update the version and effective date. For material changes, the app will ask you to review and agree again before you continue using it. The latest version is always available at this page and from the app's Settings.
15. Language
This policy is written in English and translated into Simplified Chinese. If there is any inconsistency between the two versions, the English version prevails.
16. Contact us
For questions, requests or complaints about this policy or the app's privacy practices, contact:
makemaking@126.com
吧唧输入隐私政策
吧唧输入（Typsaying）是一款用于手机和电脑的局域网语音输入应用。本政策说明应用会处理哪些信息、信息保存在哪里、如何受到保护，以及你可以做出的选择。本政策适用于吧唧输入手机端（Android、鸿蒙、iOS）、面向 Windows、macOS、Linux 与鸿蒙电脑的接收端，以及本政策页面。
一句话概括
- 无需账号
- 无云端服务
- 无广告
- 无统计与遥测
- 不出售数据
- 语音识别、标点和 AI 纠错都在你的设备上完成。我们不会收到你的音频或文字。
- 识别文字只会通过加密连接发送给你已配对的电脑，走局域网。
- 历史、草稿、设置、模型和配对记录都保存在你的设备本地。
- 你可以在应用内删除历史、解除配对、重置安全身份，或卸载应用以移除本地数据。
一、我们是谁，本政策覆盖什么
吧唧输入由独立开发者开发和维护（下称“我们”）。就本政策所述的有限处理而言，我们是个人信息处理者。你的设备厂商、操作系统、应用商店，以及你下载模型的第三方网站，可能依据其各自的政策独立处理信息。
应用不需要账号，不包含广告或统计 SDK，也不运营接收你的语音、文字、历史或设备标识的服务器。
二、应用会处理的信息
| 信息 | 处理目的 | 保存在哪里 | 保存期限 |
|---|---|---|---|
| 麦克风音频 | 在你按住或开启麦克风时进行实时语音识别。 | 由手机内置的离线语音模型在内存中处理，不发送给我们，也不发送给云端语音服务。 | 识别完成后不保留，只保留生成的文字。 |
| 识别文字与草稿 | 发送给已配对电脑、输入到所选窗口、保存本地历史、恢复未发送草稿。 | 手机应用存储和已配对电脑。传输使用 TLS 与应用层 AES-256-GCM 加密。 | 直到你删除记录、清除历史或卸载应用。 |
| AI 纠错与标点输入 | 使用设备上的模型改善标点或措辞。 | 由内置或你导入的模型在本机处理，不发送给模型厂商或云端 AI 服务。 | 除结果文字进入历史外，不额外保留。 |
| 配对记录 | 验证手机与电脑、加密通信、自动重连。 | 两台已配对设备：设备名称、设备标识、共享密钥、TLS 证书指纹、局域网地址与接收端口。 | 直到你解除配对、重置安全身份或卸载应用。 |
| 设备名称 | 显示当前连接的手机，并标记历史记录。 | 保存在手机并发送给已配对电脑。 | 直到你修改名称、解除配对或卸载应用。 |
| 目标窗口信息（电脑） | 显示文字将输入到哪里，并在历史中显示对应图标。 | 从操作系统本地读取（应用名称、窗口标题、图标），不会上传。 | 仅在当前会话或对应本地历史记录需要时保留。 |
| 远程输入事件 | 你在手机上使用的键盘、触摸板、快捷动作与窗口切换。 | 仅通过加密通道发送给已配对电脑并在本机注入，不保存输入日志。 | 即时处理，不保留。 |
| 剪贴板 | 在搜索框粘贴文字，或以剪贴板方式交付文字。 | 由操作系统在本机处理，剪贴板内容不会发送给我们。 | 由操作系统和你对剪贴板的设置决定。 |
| 局域网信息 | 发现并连接你的电脑，显示配对地址。 | 仅在局域网内使用。配对期间接收端通过 mDNS 广播名称、服务器 id、TLS 指纹与端口。 | 我们不会保存。配对结束后停止广播。 |
| 模型文件 | 离线语音、标点与 AI 纠错。 | 保存在你的设备。你可以导入、在电脑端下载，或从已配对电脑传输到手机。 | 直到你删除。 |
| 你主动发送给我们的信息 | 回复问题、请求或投诉。 | 我们的电子邮箱。 | 完成回复和满足法律义务所需的时间。 |
配对二维码包含连接信息（局域网地址、端口、电脑名称、服务器 id、TLS 指纹和一次性配对密钥）。在有效期内请把它当作密码对待，不要截图分享。
三、权限与系统访问
手机端（Android、鸿蒙、iOS）
- 麦克风：仅在你使用语音输入时访问，可随时在系统设置中撤销。
- 局域网：用于连接已配对电脑。应用不会把你的内容通过互联网发送给我们。
- 相机 / 扫码：仅在你通过系统扫码界面扫描配对二维码或条码时使用，不保存照片或相机画面。
- 振动：用于按键与操作的触感反馈。
- 剪贴板粘贴：只有你点按系统粘贴控件后才读取剪贴板。
电脑端（Windows、macOS、Linux、鸿蒙电脑）
- 辅助功能 / 输入监控：用于键入文字、发送远程键盘与指针事件、列出窗口、读取焦点窗口标题与图标。仅在你使用相应功能时生效。
- 剪贴板：在你选择剪贴板交付方式，或自动键入回退到剪贴板时使用。
- 局域网与防火墙：用于接受手机连接。Windows 上可能请求管理员确认（UAC）为监听端口添加防火墙规则，只会修改应用自身的规则。
- 开机自启：仅在你于设置中开启时使用。
- USB 调试（可选）：如果你选择 USB 配对，电脑会执行
adb或hdc建立到手机的反向端口隧道。这需要手机开启 USB 调试/HDC，只应在信任的电脑上使用。取消配对或退出接收端时会移除隧道。
四、设备端 AI 与模型文件
语音识别、标点恢复和 AI 纠错都使用开放模型在你的设备上运行（例如 sherpa-onnx 语音模型、ONNX 标点模型和 GGUF 纠错模型）。你的音频和文字不会发送给我们、模型厂商或云端 AI 服务。
模型可以从你自己的文件导入、在电脑端从 ModelScope 等第三方模型站点下载，或从已配对电脑通过局域网传输到手机。下载模型会向站点发出普通 HTTPS 请求，站点可能依据其隐私政策看到 IP 地址、浏览器标识等标准请求信息。模型文件保存在本地，应用不会上传它们。
五、配对与局域网
手机与电脑必须处于同一局域网并完成配对后才能交换内容。配对使用二维码或六位配对码、共享密钥和固定的 TLS 证书。配对码有有效期并受到频率限制，连续输错会锁定当前配对。
配对页打开期间，电脑会通过 mDNS 在局域网内广播自己的存在，方便手机发现。广播包含你设置的电脑名称、随机服务器 id、TLS 指纹和端口，配对结束后停止。我们不会收到这些信息。
六、我们不会收集的信息
- 使用应用不需要账号、姓名、手机号或邮箱。
- 不会向我们上传音频、识别文字、草稿或历史。
- 不会向我们发送统计、广告标识、崩溃报告或使用遥测。
- 不收集位置、联系人、照片、浏览记录或已安装应用列表。
- 不出售个人信息，也不向数据经纪商提供。
七、信息何时离开你的设备
- 发送给你已配对的电脑：仅限你主动发送的内容（文字、输入事件、你选择传输的模型或历史），通过加密的局域网连接。
- 发送给模型站点：电脑从 ModelScope 或你选择的其他站点下载模型时，请求不包含你的历史或文字。
- 本政策页面的托管服务商：你打开本页面时，托管方可能处理 IP 地址、浏览器标识、时间等标准请求信息，用于提供页面和保护服务。
- 通过邮件发送给我们：仅当你主动联系我们时。
- 法律要求时：或为保护权利、安全和安保所必需时。
八、安全
- 手机与电脑之间的连接使用 TLS，并固定自签名证书的指纹，指纹包含在配对数据中。
- 应用消息使用 AES-256-GCM 加密，密钥由配对密钥经 HKDF-SHA256 派生，并通过序号拒绝重放消息。
- 电脑端历史数据库在磁盘上加密保存，手机端历史保存在应用沙箱内。私钥保存在系统密钥存储中（DPAPI、钥匙串、Secret Service 或平台密钥库）。
- 配对码有有效期并受频率限制。重置安全身份会使现有配对失效，需要重新配对。
- 任何传输或存储方式都无法做到绝对安全。你有责任妥善保管设备、配对二维码、账号和局域网，并仅在你有权录制和处理语音的场景中使用本应用。
九、保存期限
本地数据会一直保留到你删除：单条历史、全部历史、草稿、已配对设备、导入的模型和设置。卸载应用会移除其本地数据，但操作系统备份、钥匙串或密钥存储中的内容可能需要你在相应位置单独删除。你发送给我们的邮件仅保留到完成回复和满足法律义务所需的时间；政策页面托管方可能依据其政策在有限期限内保存标准服务器日志。
十、你的权利与选择
根据你所在地区的规定，你可能有权访问、更正、删除、限制或反对处理，获取信息副本，撤回同意，并向当地个人信息保护机构投诉。由于数据主要保存在本地，你可以在应用中直接行使大部分权利：
- 在设置中删除单条历史或清除全部历史；
- 解除与电脑的配对，或重置安全身份；
- 删除你导入或下载的模型；
- 在系统设置中撤销麦克风、相机、辅助功能或剪贴板权限；
- 卸载应用，必要时再删除其数据目录和钥匙串条目。
你也可以通过下面的邮箱联系我们，我们会在适用法律要求的期限内回复。
十一、儿童
本应用不面向未满 14 周岁的儿童（或当地法律规定的其他最低年龄，例如适用中国法律时）。请勿在未经他人同意的情况下使用本应用录制或处理他人的声音。如果你认为儿童向我们提供了个人信息，请联系我们，我们会采取适当措施。
十二、跨境传输
我们不会将你的音频、文字、历史或窗口信息传输到我们的服务器。核心功能在你的设备和局域网内运行。如果你选择第三方模型站点，该站点可能依据其政策在其他国家或地区处理请求。本政策页面由托管服务商提供，其基础设施可能位于不同地区。
十三、第三方服务
应用可能使用你的操作系统（语音、通知、辅助功能、剪贴板、扫码与粘贴控件）、分发本应用的应用商店、你选择的模型站点（如 ModelScope），以及本页面的托管服务商。这些服务受其各自的隐私政策约束，我们无法控制它们。
十四、政策变更
我们可能根据应用功能或法律要求更新本政策，并更新版本号和生效日期。如果变更重大，应用会在你继续使用前再次请你阅读并同意。最新版本始终可以在本页面和应用设置中查看。
十五、语言版本
本政策的中文版本仅供参考。如中英文版本存在不一致，以英文版为准。
十六、联系我们
如果你对本政策或应用的隐私处理有疑问、请求或投诉，请联系：
makemaking@126.com