Privacy Policy
This is a translation. In case of any discrepancy, the French version prevails: https://dablin.app/fr/privacy/
Effective from October 19, 2026.
1. In short
- What you type never leaves your Mac. Blin analyses keystrokes locally to fix the keyboard layout; it does not record or send the text you type.
- No telemetry: Blin collects no usage statistics, no crash reports and no analytics.
- Blin goes online only to check for updates and for licensing (activation, removing a Mac, free trial, occasional refresh of the licence file).
- The dablin.app website sets no cookies and uses no audience-measurement tools.
- Payment is handled by Paddle, our reseller, which is responsible for its own processing.
2. Controller
AMORTI, a French simplified joint-stock company with a sole shareholder (SASU), registered office 4 allée du Trécou, 06270 Villeneuve-Loubet, France, SIREN 103 211 942 (“we”). Contact for any data question: [email protected]. We have not appointed a data protection officer.
3. The Blin app
3.1. What stays on your Mac
Settings, the list of excluded apps, exception words (stored as salted cryptographic hashes, with the key
kept in the macOS Keychain) and the licence file (~/Library/Application Support/Blin/) stay on your Mac.
We have no access to them.
The app asks for the macOS “Accessibility” permission to observe the keyboard. Keystrokes are processed in memory, word by word, and are neither logged nor transmitted.
3.2. Complete list of network connections
| Connection | When | What is sent | Recipient |
|---|---|---|---|
| Update check | per your setting (offered at first launch) or on demand | IP address, Blin and macOS version (standard technical header); no system profile | update feed hosted on Cloudflare |
| Free trial | when the trial starts, then at most once a day during the trial | hashed machine ID, Mac model, Blin version, IP address | our server api.dablin.app (Cloudflare) and Keygen |
| Activating / removing a Mac | when you ask | licence key, hashed machine ID, technical machine name, Blin version, IP address | Keygen (directly or via api.dablin.app) |
| Licence file refresh | at most once every 30 days | licence key, hashed machine ID, IP address | Keygen |
- Hashed machine ID: a SHA-256 hash derived from the Mac’s hardware identifier. In practice it cannot be reversed to that identifier, but it remains pseudonymous data, so we treat it as personal data.
- Technical machine name: the Mac model (e.g.
MacBookPro18,3) plus 4 characters of the hash. Never the name you gave your Mac. - Never sent: the text you type, exception words, the list of your apps, your email address, the name of your Mac or user account.
3.3. “Report a problem”
This button prepares an email in your mail app, addressed to [email protected], with the Blin and macOS versions and an excerpt of the app’s technical log. That log never contains typed text. You review the email and decide whether to send it; nothing is sent automatically.
4. The dablin.app website
- Hosting: Cloudflare (Cloudflare Pages). To deliver and protect the site, Cloudflare processes the IP
address and technical headers of each request. We do not enable retention of site access logs; logging on
our server
api.dablin.appis turned off (no request logs are kept). - No cookies, no analytics: the site sets no cookies and reads no information from your device. It uses no Google Analytics, advertising pixel or similar tool.
- Download counter: we count downloads in aggregate per day, per channel (the link’s
?src=parameter) and per page language, without cookies; IP address and browser identifier (user agent) are not stored and no raw logs are kept. - Payment: Paddle’s checkout script (Paddle.js, loaded from Paddle’s servers) is loaded only on the Pricing page, when you click “Buy”. From then on Paddle receives your IP address and may set the cookies needed for payment and fraud prevention, under its own responsibility: these cookies appear only on the checkout page, and their list is given in Paddle’s cookie policy (https://www.iubenda.com/privacy-policy/83216669/cookie-policy). See Paddle’s privacy policy: https://www.paddle.com/legal/privacy.
- “Lost key” page: the email address you enter is used only to look up a purchase at Paddle and, if found, to resend your key. It is not kept after the request is processed. Anti-abuse counters tied to the IP address are kept for at most 24 hours.
5. Purchase, licence and emails
- Paddle.com Market Limited (United Kingdom) is the reseller and Merchant of Record for Blin. Paddle collects your payment details, email, country, IP address and, depending on the country, postcode; it acts as an independent controller. We never receive your card details.
- We receive from Paddle: your email, country, the product purchased, the amount, the payment status and Paddle identifiers (customer, subscription, transaction).
- At Keygen, your licence is linked only to Paddle identifiers, not to your email.
- Transactional emails (licence key, download link, end date of the updates period, pre-renewal reminder) are sent via Scaleway (France). We send no newsletters or advertising.
6. Purposes, legal bases and retention
| Purpose | Legal basis (GDPR Art. 6) | Retention |
|---|---|---|
| Issuing and managing the licence (activation, 3 Macs, updates) | performance of contract (b) | life of the licence, then deletion on request |
| Free trial: one trial per Mac | legitimate interest: preventing repeated trials (f) | 3 years from trial start |
| Key emails and pre-renewal reminders | performance of contract (b) and legal obligation (c) | duration of the subscription |
| Support (emails to [email protected]) | legitimate interest: answering you (f) | 3 years after the last exchange |
Security and abuse prevention for api.dablin.app |
legitimate interest (f) | no logs; 24 hours (counters) |
| Accounting and tax obligations | legal obligation (c) | applicable statutory period |
| Aggregate download statistics | no personal data | — |
7. Recipients and processors
| Provider | Role | Data | Location, safeguards |
|---|---|---|---|
| Paddle.com Market Limited | reseller, independent controller | purchase and payment data | United Kingdom — European Commission adequacy decision |
| Keygen LLC | processor: licence management | key, hashed machine ID, technical name, version, Paddle IDs, IP | United States — standard contractual clauses |
| Cloudflare, Inc. | processor: website hosting, api.dablin.app server, download files, routing of [email protected] email |
IP, technical headers, logs, emails passing to our inbox | United States and global network — EU–US Data Privacy Framework and standard contractual clauses |
| Scaleway SAS | processor: sending transactional emails | email, message content | France |
| Google LLC (Gmail), via Cloudflare Email Routing | processor: support inbox | emails you write to us | United States; EU–US Data Privacy Framework |
We do not sell or rent any data. A copy of the transfer safeguards can be requested at [email protected].
8. Security
Encrypted connections (HTTPS/TLS), strong authentication on provider accounts, data minimisation (no email at Keygen, hashed machine ID, no typing data collected).
9. Your rights
You have the rights of access, rectification, erasure, restriction, objection (in particular to processing based on legitimate interest) and portability, and the right to give instructions on what happens to your data after your death. Write to [email protected]; we reply within one month. For payment data you may also contact Paddle directly.
Erasing your licence at Keygen prevents any further activation of that licence; we will remind you before doing so.
You may lodge a complaint with the CNIL (3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France — www.cnil.fr) or with the data protection authority of your country of residence.
10. Changes
Any change to this policy is published on this page with its effective date. Any introduction of usage data collection in the app would be optional (enabled only by you), announced in advance in the release notes and preceded by an update of this policy.