Typist

Policy

Privacy

Effective October 15, 2026

This policy covers the Typist Chrome extension and this website.

For any privacy question, or to ask for your data to be deleted, write to support@trytypist.com. This site is published at https://trytypist.com.

The short version

What stays on your device

The text you are typing
Whatever is in the side panel's text box lives in your browser and is sent to the page you are typing into. It is not transmitted to our server, and it is not sent anywhere else — unless you put it into AI Rewrite's draft box and press Rewrite, which sends it for an AI rewrite as described below.
Your writing sample for AI Rewrite
The writing sample you give AI Rewrite is saved in the browser's local extension storage on this device, so you do not have to paste it again each time. It is not synced to your other devices and is not stored on our server. It leaves your device only when you press Rewrite, as part of that one request. It stays until you clear it in the panel or uninstall the extension; signing out does not remove it. AI Rewrite does not save the draft you are rewriting or the suggested rewrite: they are kept only while the panel is open. If you move a rewrite into the main text box to type it, it is kept there like any other text in that box.
A fingerprint of the text
When you press Start, the panel stores a SHA-256 digest of the text — a one-way fingerprint, a fixed string of hex worked out from the text rather than the text itself. It is there so a reservation you have already been charged for can be matched back to the text it was made for: press Start again on the same text, even after the panel has been closed and reopened, and the server recognises the same run instead of charging your allowance twice. The fingerprint is kept in the browser's local extension storage and is never sent to our server — a reservation carries the word count and the random run id, nothing else. It is replaced when you press Start on different text, and cleared when the run starts, when the reservation turns out to be for no words, when your account becomes Pro, and when you sign out. A fingerprint is not the text and the text cannot be read back out of it, but it is worked out from the text: anyone holding both the fingerprint and a guess at a short text could check one against the other.
The page you are on
Our server never receives the address of the page, its contents, or the fact that you used Typist on it. The extension works on the tab you are looking at only while a run is happening.
Your settings
Words per minute and the other panel settings are stored locally by the browser.
Your clipboard
The panel's paste button reads the clipboard at the moment you click it, and puts what it finds into the text box on your screen. Nothing is transmitted.

What the server receives and stores

Your Google account email and account identifier
When you sign in with Google, we ask for the narrowest sign-in permission there is: enough to learn Google's subject identifier for the account and the verified email address on it. That is all Google sends us. We do not receive your name, your profile photo, or anything else from your Google profile. We do not receive your Google password, and we do not request access to any other Google service. We use the identifier and the email to identify your account, to keep your snippets attached to it, and to know which plan you are on. The use of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.
A word count and a run id
When you press Start, the extension sends the number of words the run needs and a random id it generates for that run. The count is there so the daily allowance can be counted; the id is there so a Start retried after a dropped connection is not charged twice. The words themselves are not sent, and the run id is a fresh random string with nothing in it.
One record per run
A run that is granted words leaves a row on our server: the run id, how many words were granted, the UTC date, which allowance the run counted against, and the time the row was written. So this is a timestamped record of when you pressed Start and how large the run was, not a daily figure alone — the daily total the panel shows is added up from these rows. The row holds no text, no page address, and no page title. A run that is granted no words leaves nothing behind.
Text you send for an AI rewrite
AI Rewrite rewrites a draft so that it sounds like you. When you press Rewrite, the extension sends two pieces of text: the draft, and a sample of your own writing that shows the model your voice. Our server passes both to DeepInfra, which runs the AI model, and sends the rewrite back to the panel for you to review. The draft, the sample, and the rewrite are held in memory only for as long as that request takes. We do not write any of them to our database, and we do not put them in our logs — not on success, and not when a rewrite fails. Nothing is sent unless you press Rewrite.
One record per AI rewrite
Each rewrite you start leaves a row on our server: a random id the extension generates for that rewrite, the UTC date, the time, and who it belongs to. This is what counts the free rewrite and the Pro daily allowance. A Pro rewrite's row names your account. Your free rewrite's row does not: it holds a fingerprint of your Google account identifier instead (see below). If the AI provider fails to return a rewrite, its row is normally removed so it does not count against you, and a count of your account's failed rewrites for that UTC day is kept so the service cannot be overloaded with them. None of these rows holds any text, or any length, word count, or fingerprint of text.
A record that your free rewrite was used
A free account gets one AI rewrite. To stop that free rewrite being claimed again by deleting an account and signing up again, its record is kept even after the account is deleted. That record never contains your account identifier, email, or name. It holds a one-way, keyed fingerprint of your Google account identifier, made with a secret key only our server holds, plus the date and time of the rewrite and its random id. Without that secret key, the fingerprint cannot be turned back into your identifier or matched against a guessed one. It is used for one thing only: to recognise that this Google account has already had its free rewrite.
Snippets you save
If you press save on a snippet, its title and text are stored on our server so the snippet appears on your other signed-in devices. This is the only text we store, and it only happens when you ask for it. Deleting a snippet in the panel deletes it from the server.
Subscription state
If you subscribe, we store the customer and subscription identifiers Stripe gives us, the status of the subscription, and when the current period ends.
A sign-in token
Signing in creates a session token which the extension keeps in Chrome's local extension storage and sends back with each request. It is not a cookie, and this website does not set cookies of any kind.

The permissions the extension asks for

Chrome shows these when you install Typist. Here is what each one is for.

Access to all sites
Chrome words this as reading and changing your data on every website, and it is the broadest thing Typist asks for, so it deserves a plain answer. Typist uses it for one purpose: to enter your text into the field you have chosen, on the page you are looking at, after you press Start. Nothing runs on a page until you press Start, and nothing runs in the background or on pages you are not using. Typist does not read the pages you visit, does not collect their addresses or contents, and sends our server nothing about them. The reason the permission is this broad rather than per-site is that Typist cannot know in advance which page you will want to type into.
Reading the clipboard
Used only when you click the panel's Paste button, and only at that moment. It puts what it finds into the panel's text box on your screen. Typist does not watch the clipboard, and clipboard contents are never transmitted.
Storage
Keeps your settings, your sign-in session, the fingerprint described above, and your AI Rewrite writing sample in the browser's own extension storage, on your device.
Sign-in with Google
Used to sign you in, and for nothing else. Typist requests the narrowest scopes that exist for this: your account's subject identifier and its verified email address.
The side panel and the active tab
Let Typist show its panel and act on the tab you are currently looking at when you press Start.

AI Rewrite and DeepInfra

AI rewrites are processed by DeepInfra, which runs the AI model itself on infrastructure it operates. The model is Google's Gemma, an openly published model that DeepInfra runs itself rather than forwarding to Google, so your text is not sent to Google's AI services. The request is made by our server, not your browser: DeepInfra receives the draft, the writing sample, and our instructions to the model — not your name, your email, your IP address, or anything else about your account. Anything you write into the draft or sample yourself is, of course, part of what it receives.

Under DeepInfra's terms for the models it runs itself, it does not keep the text it is sent or the text it returns once the request has been answered, and it does not use either to train AI models. Its terms allow narrow exceptions, such as records it is required to keep by law or to investigate fraud or abuse, and it keeps non-content records of each request, such as its time and cost. You can read these commitments in section 7(b) of its terms and on its data privacy page. If we ever change the AI provider or the model used for rewrites, this page will be updated to name them before the change takes effect.

Payments

Payments are processed by Stripe. Card numbers, billing details, and anything else you type into Stripe's checkout go to Stripe, not to us — we never see or store card details. Stripe tells our server whether a subscription is active, and that is what grants Pro. Stripe handles that data under its own privacy policy.

What we do not do

How long we keep things

Account details, snippets, subscription state, the per-run records and per-rewrite records described above, the daily count of failed rewrites, and the daily totals derived from them are all kept while your account exists. We do not keep the text of an AI rewrite, and DeepInfra's terms say it does not keep it once the request has been answered. We want to be straight about this rather than quote a number we do not yet keep to: Typist runs no automatic clean-up job, so these records are not deleted on a schedule. They are removed when the account is deleted.

To have your account deleted, write to support@trytypist.com from the email address on the account. This is a request handled by a person, not a button in the product: we aim to remove your account, snippets, daily totals, every per-run record, every per-rewrite record that names your account, and your failed-rewrite counts within 30 days of the request, and we will confirm when it is done. The one thing kept is the fingerprint record described above, which shows only that this Google account has used its free rewrite. Stripe keeps its own payment records for as long as its legal obligations require, and deleting your Typist account does not reach into those.

Your choices

You can delete any snippet from the side panel, sign out to remove the session from that browser, uninstall the extension at any time, and email us to delete the account altogether. If your local law gives you rights to access, correct, export, or erase your data, write to the address above and we will act on it.

Changes

If this policy changes, the effective date at the top changes with it, and material changes will be noted on this page.

October 15, 2026: added that AI Rewrite saves your writing sample on your device, and that it does not save the draft or the suggested rewrite. Previous version effective October 14, 2026.

October 14, 2026: added AI Rewrite — what is sent when you press Rewrite, the records kept for each rewrite and for the free rewrite, and DeepInfra as the AI provider. Previous version effective September 18, 2026.

Contact

Typist · support@trytypist.com

Write to us at that address for any privacy question, to ask for a copy of your data, or to have your account deleted.