Hears every keystroke. Remembers none.

What Keyoto can see

Keyoto uses a listen-only tap on keyboard events, gated behind the macOS Input Monitoring permission. It sees each key press just long enough to pick that key’s sound and stereo position, plays it, and forgets it — nothing is ever recorded or stored. It uses Input Monitoring only, not the broader Accessibility permission, and it never modifies or delays your keystrokes.

What macOS enforces

Keyoto runs in the App Sandbox with no network entitlement. That is not a promise — it is a technical guarantee: macOS itself prevents the app from making any network connection, so Keyoto can't phone home even in principle. No analytics, no accounts, no telemetry. Keystrokes are never recorded, stored, or transmitted.

You do not have to take my word for it. An app's entitlements are readable from its signed bundle on your own Mac, so you can confirm for yourself that no network entitlement is there. The FAQ shows how.

Passwords

macOS suppresses keyboard events in password and other secure input fields, so Keyoto stays silent while you type passwords. Those keystrokes never reach the app at all.

What's stored

Only your settings — volume, chosen sound pack, and toggles — saved locally on your Mac. Nothing else is written, and nothing ever leaves your machine.

What does exist, and where

Being accurate matters more here than sounding absolute. There are two places where information connected to you exists. Neither involves the app, and neither involves your keystrokes.

Your purchase. You bought Keyoto from Apple, not from me. Apple processes the payment and handles your details under Apple's own privacy policy. I never see your name, your email address or your payment information. Apple gives me sales reports showing numbers of units by territory; they do not identify individual buyers.

Your support email. If you write to support@keyoto.app, I receive your message, your email address, and whatever you include. If you use the Email Support link inside the app, that pre-fills your Keyoto version, your macOS version and the name of the sound pack you had selected. I use it to answer you and for nothing else. It is never added to a mailing list, never shared, never used for marketing, and it is deleted once your question is resolved.

Both of these are things you chose to start. Neither is something the app did.

This website

keyoto.app sets no cookies and runs no analytics, tracking pixels or advertising scripts. No account is needed and nothing is collected when you visit. The fonts and the demo sounds are served from this domain, so no third party is contacted while you browse. If you switch the site between light and dark, that one preference is kept in your browser's local storage so the page remembers it next time; it never leaves your browser.

The site is hosted on Cloudflare, which serves the pages and handles the requests under its own privacy policy, as any host does. I add nothing on top of that.

Children

Keyoto is suitable for all ages. Since it collects no data at all, it collects none from children.

Your rights

Because I hold nothing about you beyond any support email you have sent me, there is usually nothing to access, correct or delete. If you have written in and would like that correspondence erased, ask at the same address and I will do it.

If you are in the EU or the UK, the GDPR gives you rights to access, correct, delete, and object to the processing of your personal data. Those rights apply to support correspondence, which is the only personal data involved.

Changes

If this policy changes, the new version appears here with a new date. If a future version of Keyoto ever gains a capability that changes anything above — there are no plans for one — it will be described here before that version ships, not afterwards.