Kavanati — Privacy Policy
Last updated: 5 October 2026
1. Who is responsible
Kavanati ("the app", "we", "us") is operated by the registered Israeli business Engineering & Development Services (שירותי הנדסה ופיתוח), business no. 056665227, based in Israel. For any privacy question: support@kavanati.com.
2. What Kavanati does on your device
Kavanati is a desktop utility for Windows and macOS that automatically fixes text typed in the wrong keyboard language (Hebrew ↔ English). To do its job, it observes your keystrokes locally to detect when a word or line was typed in the wrong keyboard layout, and to correct it. This happens entirely in memory, on your computer, in real time — the same access any spell-checker needs.
3. What we do NOT collect
- No user accounts, logins, or profiles.
- We do not send what you type to any server. Ever.
- No analytics or advertising SDKs, tracking, advertising IDs, or cookies in the app. The only usage data is the anonymous update-check count described in section 5.
- We do not read or correct password fields; the app deliberately ignores them.
- We do not sell, rent, or share any personal data, because we do not collect any.
4. What Kavanati stores on your device
No record of what you type is kept. Versions up to 1.5.4 kept a small local diagnostic log that could include examples of corrections (the "before"/"after" of a fix); as of version 1.5.5 that logging is removed, and the app clears the log file every time it starts. What remains on your device, and only there:
- A small technical log (start-ups, errors, which app was in focus when a fix ran, counters) that contains no typed text.
- Your settings, including words you chose to protect (by undoing a fix) and your personal vocabulary: words you typed that aren't in the built-in dictionary, each with a count, so Kavanati stops "correcting" your names and jargon. These stay in the app's settings file on your computer, never leave it, and can be emptied any time via Settings → "Clear learned words".
- For paid plans, your license key and its signed license token.
The technical details (file locations, every network request) are in our security overview.
5. Checking for updates
Kavanati checks whether a newer version is available by requesting a small file
(version.json) from kavanati.com, at start-up and then every 6 hours. On its own, this is the only
request the app makes; paid licenses add the license verification in section 6, and the app sends a diagnostic log
only if you agree to (section 7). From version 1.11 the update check carries three anonymous values: the platform
(Windows or Mac), the app version, and a flag that marks the first check after a new installation. From version
1.12.1 it also carries the installation's anonymous device id: a short one-way hash of a hardware identifier
of the computer (the same fingerprint described in section 6). The identifier itself never leaves your computer, the
hash cannot be turned back into it, and it is not linked to a name, an email or an account. It does not include
anything you typed. Our hosting provider (Cloudflare) may log
standard technical data (e.g. IP address, time) to deliver the file; we do not use it to identify you. We count
these requests in aggregate (daily totals by country, platform and version), and from version 1.12.1 we keep one
record per installation — device id, platform, app version, country, first and last check, and whether it was
uninstalled — so we can count installations and removals exactly. Choosing Uninstall Kavanati… in the menu
sends one last request that marks the record as removed and then deletes the app's own files from your computer.
We never know who a device belongs to. When a newer version exists, the app downloads it from kavanati.com and checks
it against the SHA-256 hash published in version.json before installing it.
6. License verification (Kavanati Pro and Business)
If you activate a Kavanati Pro or Business license, the app contacts our license server (kavanati.com) when you enter your license key, and afterwards re-verifies it when the app starts and at most every 12 hours while it runs, only when the computer is online. Activation carries your license key, a one-way device fingerprint, the platform and the app version; re-verification carries only the license key and the fingerprint. The device fingerprint is a short hash computed from a hardware identifier on your machine; the identifier itself never leaves your computer and cannot be reconstructed from the fingerprint. License verification never includes anything you type, and the free plan makes no license requests at all. Machines activated offline (via the code flow at kavanati.com/activate) make no verification requests. When you buy a license, Paddle, our merchant of record, processes your payment and billing details; we receive your email address (to send and recover your license key) and the order details.
7. The website, feedback and diagnostic logs
Our website, kavanati.com, uses Google Analytics 4 to measure aggregate site usage: page views, where a visit came from (e.g. which social post), and button clicks such as downloads, and Microsoft Clarity to see how pages are used (clicks, scrolling and anonymised session replays, with anything typed into forms masked). This applies to the WEBSITE only and is entirely separate from the app, which sends no analytics (see section 3). The feedback page (kavanati.com/feedback) is the exception: it loads no analytics and no third-party scripts at all.
Reporting a problem and sending feedback. When you choose "Report a problem" (or share feedback, or
answer the rating prompt) in the app, it opens the feedback page in your browser. A report can be pre-filled with an
example of the last fix; from version 1.11 that example travels in the part of the page address after the
# sign, which browsers never send to a server, so it stays on your device until you press Send. We
receive only what you submit: your message, rating, ideas or language vote, the app version and operating system,
and your email address if you give one (to reply). We send product updates only if you tick the box.
Diagnostic logs. The app uploads its local technical log (section 4: app events and app names, no typed text) only if you agree to attach it when reporting a problem.
If you ask us to email you the download link (for example from your phone), we use your email address to send that one email (delivered through our email provider, Resend) and keep the request record; we send product updates only if you ticked the box. The download links in that email carry a reference number, so we can count whether the link was used to download Kavanati. We do not track whether you open the email.
8. Legal basis and your rights (GDPR / EU/EEA)
The app itself collects no personal data. The personal data we do process is limited to license records for paid plans (section 6, on the basis of performing our contract with you) and what you choose to send us (section 7, on the basis of your request or consent). Limited technical data your browser or the update check exposes to our host (e.g. IP address) is processed on the basis of legitimate interest in delivering downloads/updates and security (Art. 6(1)(f) GDPR). You may access, correct, erase, object, or complain to a supervisory authority; since we hold essentially no such data, most requests simply confirm that. Email support@kavanati.com.
9. Israeli privacy law
Kavanati is operated from Israel and complies with the Protection of Privacy Law, 5741-1981 (as amended). The app itself does not collect personal information. The limited personal information we hold (license records for paid plans, and messages you choose to send us) is used only for those purposes and is never sold or shared beyond the service providers named in this policy (Cloudflare, Paddle, Resend).
10. Children
Kavanati is not directed at children; we knowingly collect nothing from anyone.
11. Data security
Your typing stays on your device. The macOS build is code-signed and Apple-notarized, so you can verify it came from us. The Windows build is not code-signed yet; download it only from kavanati.com. Details for IT teams are in the security overview.
12. Changes
If we change how the app handles information (for example, removing the local log, or adding a paid Pro tier with online features), we will update this page and the date above.
13. Contact
Engineering & Development Services (business no. 056665227) — support@kavanati.com