Skip to main content
Security and privacy

Your words stay with you

Klaavi predicts locally, on your own computer. What you type in other apps is not sent to a server so that suggestions can be made from it.

Below we describe the main protections in plain language. No scare tactics, and no promises bigger than what Klaavi actually does.

First principle

Suggestions are made on your machine

Klaavi learns the way you write, and it does that on your computer. Predictions run locally, your personalisation history sits locally, your personal dictionary lives locally. We do not send your sentences to the cloud to be analysed or turned into suggestions there.

The numbers you see in the app, such as how many clicks you have saved, are calculated on your side. We do not run continuous reporting on what you click, how long you write or which words you use. It simply would not be of any use to us.

What you type in other apps powers Klaavi locally. It does not build a profile of you on our server.

Internet only when it is needed

Every connection has one stated purpose

Klaavi does not need the internet in order to type. It reaches out to the network in a few clearly defined situations, and only in those.

When Klaavi uses the internet Closed list

Account, trial and licence

Signing in with an emailed code, starting your trial and periodically confirming your PRO entitlement. What you type and your local dictionary are not part of these requests.

klaavi.app

Updates and language packs

Checking whether a new signed version of the app exists, and downloading the language you chose.

assets.klaavi.app

Feedback you send yourself

An answer or a comment reaches us only after you press the send button.

klaavi.app

Payments

Checkout and the subscription portal open in your browser and are handled by Paddle.

Paddle
Four situations. Each with one stated purpose.

Between licence checks, Klaavi PRO works offline. Today it keeps PRO features for seven days after the last successful verification. Travel somewhere with no signal and you keep typing. After that window the FREE features carry on working, and PRO returns with the next connection.

Local data

Your dictionary lives on your disk. Encrypted.

Klaavi protects local data with AES-256-GCM encryption, the same standard used by online banking. The key is guarded by Windows and tied to your system account.

Phrases, panels, settings and personalisation stay local. We do not sync them to the cloud automatically.

When you want to move your data to another computer, you export it into a single file locked with a password you choose. We do not store that password and we cannot recover it. There is no "forgot password" button here, because there is nothing to remind you of.

Control stays with you

Private Mode is one switch

Sometimes you simply do not want the keyboard remembering anything. Turn on Private Mode in settings, or assign it to your own panel. Klaavi stops learning new material straight away and hides suggestions drawn from your history.

The mode stays on after you restart the app, until you switch it off yourself. It does not delete your earlier history: it keeps it encrypted and hands it back once you turn the mode off.

Protecting secrets

Klaavi also knows what not to learn

Password fields. Klaavi uses the information Windows makes available. When it recognises a protected field, it shows no suggestions and records nothing in your personalisation history. You type your password, Klaavi stares at the ceiling.

Sensitive data filter. Before any new text enters your local dictionary, Klaavi rejects the usual patterns of a secret: email addresses, web addresses, card numbers, IBANs, national identification numbers such as the Polish PESEL, access keys, one-time codes and random strings that look like keys.

And now the honest part: the filter is an extra layer of protection, not a promise to recognise every secret in the world. When something calls for complete discretion, use Private Mode.

Integrity

Signed and checked before anything installs

Installer and updates. Klaavi verifies the digital signature of the installer and compares the fingerprint of the downloaded file against the one it expects. If anything fails to match, the update does not run.

Language packs. Each pack has its own signature and fingerprint. A new version only switches on once the download and the checks complete successfully, so an interrupted download will not leave you with half a dictionary.

Additional components. Klaavi only starts the ones that fit a closed set of rules and carry a recognised signature. Anything outside that list simply will not load.

How the app is built

Built defensively

The part of the program that draws the keyboard on your screen runs in a sandbox: it has no direct access to the system or to your files. It can request a narrow, predefined set of operations and nothing beyond them. If someone ever found a flaw in it, that flaw would still be locked inside the box.

Klaavi does not open arbitrary links. Every external address has to match an allowed operation, host, path and set of expected parameters. Nothing else gets through.

Before every release we run automated tests of these protections. We also check the third party libraries we build on, because somebody else's flaw becomes ours the day we install it.

Account and device

An account with no password. A password that does not exist cannot leak.

You sign in to your Klaavi account with a one-time code sent to your email. On our side that code is kept only as an irreversible digest, a string of characters that cannot be turned back into the original. It expires quickly and the number of attempts is capped, so guessing is pointless.

The key that lets the app stay connected to your account is also stored on our side only as a digest.

Your installation gets a random identifier. Separately, to stop the same computer from starting the free trial over and over, Klaavi computes a one-way digest of a Windows identifier locally. The Windows identifier itself never leaves your computer.

Our servers and infrastructure providers may record IP addresses in standard security logs, as every website on the internet does. We do not use them to analyse what you write or to build a language profile of you. The details are set out in our privacy policy.

Payments

We never see your full card number. Which is exactly right.

Checkout, payment, invoices and the subscription portal are handled by Paddle. You enter your card details on Paddle's pages. Klaavi receives only what it needs in order to assign and manage your subscription. A full card number does not fit into that.

Your call

Feedback goes out only after you press send

Klaavi may occasionally ask for your opinion. Until you press the send button, your answers sit in an open form and never reach us.

If delivery does not succeed straight away, the answer you approved may wait in an encrypted queue on your disk and go out later. One request: please do not put passwords, health information or other particularly sensitive details into the comment box.

The app and the website are two different layers

What happens on klaavi.app

This page is mainly about the desktop app. The klaavi.app website itself uses Plausible to count page views and selected events, without building a profile of what you write. The support chat loads only once you click the chat button, not before.

The exact scope, legal bases, recipients and retention periods are described in our privacy policy and cookie policy.

Working together

Found a problem? Tell us.

We write this software carefully and we do not assume we are infallible. If you find a vulnerability in Klaavi, write to [email protected]. We take good faith reports seriously and reply as quickly as we can.

Questions and answers

Frequently asked questions

Does Klaavi send what I type to the cloud?

It does not send your typing anywhere for suggestions to be generated remotely. Prediction and personalisation run locally on your computer.

Can I use Klaavi without an internet connection?

Yes. Typing and the FREE features work locally. PRO stays active for seven days after the last successful licence check and returns with the next connection.

What happens to my dictionary when Klaavi returns to FREE?

It does not disappear. It stays encrypted on your disk. The features that rely on full personalisation come back when you activate PRO again.

Can I stop the learning without deleting my history?

Yes, that is what Private Mode is for. Klaavi stops recording new material and hides suggestions based on your history, while keeping your earlier personalisation in encrypted form.

Is Klaavi designed in line with the GDPR?

Yes. We follow data minimisation and privacy by design, meaning privacy built into the product from the first line of code rather than bolted on at the end. The full description of processing and of your rights is in our privacy policy.

Last updated: 6 August 2026