What stays on your Mac.

Everyday input is processed on your Mac.

Composition, candidate selection and personal word frequency are processed locally. Hufu does not send Tiger-Code input strings, candidate lists or userdb over the network, and never logs what you type. Optional frequency statistics stay local. Hufu contains no telemetry, crash reporting or third-party analytics SDK.

There are no online subscriptions.

Hufu has no online vocabulary subscriptions, word-list downloads or update checks. The Tiger-Code vocabulary ships with the installer, and importing from Squirrel is a read-only local operation that uploads nothing.

Neither the input method nor Settings polls any server in the background.

AI handles text you explicitly choose.

When you explicitly invoke polish, translation or a custom action, the target draft, selection or recently entered text is handled by your chosen model for that request, without logging it. A cloud model requires separate permission to send text.

The default is Apple’s on-device model, whose availability depends on your device, system settings and region (currently unavailable for mainland China devices and accounts). Otherwise, you can configure your own OpenAI-compatible endpoint (may be billed); that provider’s data handling and retention policy applies. Hufu does not automatically fall back to the cloud. Simplified/Traditional conversion runs locally and needs no AI.

Snippets and statistics stay local.

Snippets are stored only on this Mac in an owner-only file. They are not added to vocabulary, synced, sent over the network or given to AI. The input method reads them only when you open the quick menu.

Typing statistics are off by default. When enabled, Hufu keeps on this Mac character counts by time of day and by app, plus 2–8 character Chinese words with their counts; it never keeps full sentences. Input in password managers is not counted, the data never goes online or to AI, and you can clear it at any time.

Credentials and sync.

Custom API keys are stored in a local credentials file. If you enable sync or choose a directory such as iCloud Drive, the selected service handles those files. Use directories and services you trust.

Theme links.

Themes arrive as hufu-ime://theme links: the colours and layout travel inside the link, decoding and validation happen on this Mac, and nothing is written until you confirm. Theme links make no network requests and contain nothing to download.

This website.

This site is static: no accounts, no ads, no third-party analytics and no live AI requests, and nothing about your visit is sent to an analytics service. Theme install links are generated locally by the page and handed to Hufu Settings on your Mac. This concerns the website only, not the input method. Search runs in your browser; theme preference is stored in localStorage. Visits and downloads make HTTP requests, and the hosting provider may process necessary access logs.