Privacy policy

Last updated: November 6, 2026

Who we are

SmartyTab ("we", "us") is a macOS app and the website smartytab.app, operated by HashLab.Digital, a business based in Alberta, Canada. We are the controller of the personal data described here, except for payment data, which Stripe handles as described below.

The short version

• What you type stays on your Mac. The app sends no typed text anywhere.
• This website uses no cookies, no analytics and no trackers.
• Our license server sees only your license key, a hashed device ID and the app version.
• Stripe takes payments as merchant of record and has its own privacy policy.

The app: what stays on your Mac

SmartyTab produces suggestions, writing checks, rephrases and synonyms on your computer, using Apple Intelligence where your Mac has it, or a built-in on-device model otherwise. The text you write, the text you select, the apps you use and what is on your screen are processed in memory on your Mac and are not sent to us or to any third party. We run no cloud model on your text.

SmartyTab updates may change, replace or remove on-device models and features, and output quality and behaviour may change between versions. Apple Intelligence availability depends on Apple. These changes do not change our commitment to processing your text on your Mac.

SmartyTab asks for macOS Accessibility permission so it can read the text field you are typing in and show suggestions next to it. It uses this only to provide the features you have turned on. Password fields are not read. Your settings, personal dictionary and per-app choices are stored locally on your Mac. On the Free plan, the count of words you accepted today is also kept only on your Mac.

The app has no advertising or analytics. It also checks for updates, and that request reveals your IP address and the app version to the update server.

The license server

To check that you have a trial or a license, the app contacts our license server (license.smartytab.app). The data involved:

• Trial: a hashed device ID (a one-way hash, not your serial number or any readable identifier) and the time the trial began, so that the trial cannot be restarted.
• Activation and renewal: your license key, the hashed device ID, an instance identifier created for your Mac, and the app version. We store which devices hold a seat on each key, because a license works on up to 3 Macs.
• Purchase records: the email address you gave at checkout, the plan, and the Stripe customer and payment references, so that we can issue and recover your key and process refunds.
• Model download: the built-in model is downloaded once from our server. The request carries your license token. It contains no text from you.
• IP address: your IP address reaches the server with every request, because that is how the internet works. We use it only for rate limiting and abuse prevention, and we do not store it in raw form. Our hosting provider, Cloudflare, processes it to deliver the request and may keep standard network logs.

Your license key is kept encrypted so that we can email it to you again on request.

This website

smartytab.app sets no cookies and loads no analytics, advertising or tracking scripts, and no third-party fonts or embeds: everything is served from our own domain. Our hosting provider, Cloudflare, receives your IP address and request details to serve the pages and may keep standard technical logs for security and operation.

The contact form

If you write to us through the contact form, we receive the name you give (optional), your email address, the topic and your message. We also store a one-way hash of your IP address, which we use only to limit abuse. We use this data only to reply to you and to keep a record of the conversation. The form posts directly to our own server, not to a third party. We store the message in our database and may forward it to our support mailbox. If you email support@smartytab.app instead, we receive what you write and your email address, and our email provider handles the message.

Contact form messages are deleted automatically after 24 months. You can ask us to delete yours sooner.

Payments and Stripe

Payments are processed by Stripe through Stripe Managed Payments. Stripe, selling through Link ("Sold through Link"), is the merchant of record for your purchase. Stripe collects your payment details, calculates and remits tax and VAT, issues receipts and provides payment support. We never see or store your full card number. Stripe acts as an independent controller of the data it collects and handles it under its own privacy policy, available at stripe.com/privacy. We receive from Stripe your email address, the plan purchased and references we need to run your license.

Who we share data with

We do not sell your data and do not share it for advertising. We use these service providers, who process data only to provide their service to us: Cloudflare (hosting, the license server, database storage and email routing) and Stripe (payments, as described above). We may disclose data if the law requires it.

How long we keep data

• License, device and purchase records: while your license exists and afterwards as long as needed for accounting, tax and dispute purposes (typically up to 7 years for purchase records).
• Trial records (hashed device ID and start time): for as long as needed to keep the trial from being restarted.
• Contact messages: up to 24 months.
• Rate-limit counters: about a day.

Your rights

Depending on where you live, including under the GDPR (EU and UK), the CCPA/CPRA (California) and PIPEDA and Canadian provincial laws, you may have the right to access the personal data we hold about you, to have it corrected or deleted, to receive a copy, to object to or restrict some processing, to withdraw consent, and to complain to your data protection authority (in Canada, the Office of the Privacy Commissioner). We do not sell or share personal information for cross-context advertising, and we do not discriminate against anyone who uses these rights.

To use a right, write to support@smartytab.app from the email address on your purchase. We reply within 30 days. We may need to verify who you are first. Some data (such as purchase records) we must keep by law, and data held by Stripe must be requested from Stripe.

Our legal bases under the GDPR are performance of our contract with you (licenses, activation, support), our legitimate interests (preventing abuse and fraud, keeping the service secure) and legal obligations (accounting and tax).

International transfers

We are based in Canada. Cloudflare and Stripe operate globally, so data may be processed in other countries, including the United States, with the safeguards those providers offer, such as standard contractual clauses.

Children

SmartyTab is not directed at children under 13 (or under 16 where the law sets that age), and we do not knowingly collect their personal data. If you think a child has given us data, contact us and we will delete it.

Security

License tokens are signed, license keys are stored encrypted, IP addresses are not stored raw, and all connections use HTTPS. No system is perfectly secure, but we limit what we collect so there is little to lose.

Changes

If we change this policy, we will update the date above, and for material changes we will say so on this page or in the app before they take effect.

Contact

Privacy questions and requests: support@smartytab.app or the contact form.