Privacy

中文

What is sent when

Action	What leaves this Mac	Where it goes
Typing (English, French, pinyin, Korean or Hindi), picking words	Nothing	—
@improve, @translate: when you press the action key	The sentence (the part after the command), the fixed system prompt and built-in examples; with the Jargon style on and a list set, the jargon list too	The AI provider you chose: Bedrock in your AWS account, or the service whose key you added
@question, your own AI commands: when you press the action key	What you wrote, plus the fixed instructions	The same provider
With AllInOneIME Cloud as the provider	The same text, through the developer's server to a model provider (currently through OpenRouter); the server keeps counts only, never the text. Signing in keeps only your email address	AllInOneIME Cloud
"Test Connection" in the settings	A fixed sample sentence, in your first input language	The same provider
@claude: when you press the action key	What you wrote, passed to Claude Code on this Mac	From there, Claude Code and its account
@open, @calculate	Nothing; they work on this Mac	—
@note, @reminder	Nothing to the AI; the text goes to Notes and Reminders on this Mac	Those apps (and wherever their accounts sync, such as iCloud)
@imessage	Nothing to the AI; Contacts are read on this Mac, Messages sends the message	Messages
Plugins	Only what you wrote after the plugin's command, only to the websites it declares (shown in the settings)	Those websites
Voice input	Nothing; recognized on this Mac, audio isn't uploaded	—
Adding a language (Chinese, Korean, Hindi)	Nothing about you: the pack is downloaded, checked against the signed index	languages.allinoneime.com

• Requests go out only when you press the action key, never while you type.
• API keys are kept in the login keychain, never in the config file; a saved key goes only to the service it was saved for. A plain http:// base URL is allowed only for this Mac or the local network.
• Recognized speech is treated like typed text: in a command, it isn't sent until you press the action key.
• The clipboard is read once, and only when you press ⌃V or ⌘V in a command. Content that password managers mark as concealed isn't read. The text shows in the command first and, again, isn't sent until you press the action key.
• @py and @js run only the code after a @py or @js you typed yourself, typed or pasted: AI answers and other commands' output are never run as code, and a @py or @js inside pasted or dictated text stays text. @py uses your python3, which can read files and go online as it does in Terminal; @js can't read files, reach the network or run programs.

Secure input

Password fields, Terminal's "Secure Keyboard Entry", sudo prompts, the lock screen and the like turn on the system's secure input.

• While it's on, nothing is sent to the AI and @claude doesn't start: the candidate panel says so, and what you wrote stays in the command, to send once secure input is over.
• In the app that turned it on, there's no composing and no recording: keys go in as typed.
• @note and @reminder work during secure input: they don't go to the AI.

Logs

The unified log (subsystem com.aipinyin.inputmethod.AIPinyin) records only character counts, durations and error categories, never what you type or the AI's answers. Rime's warnings and errors are written to ~/Library/Logs/AllInOneIME.

For every third-party input method, macOS warns "The developer can access anything you type with this input source"; that's the system's generic warning.

Data on this Mac

Location	Contents
~/.config/allinoneime/config.json	Settings, no keys
~/.config/allinoneime/jargon.txt	Your jargon list (default location)
~/.config/allinoneime/plugins/	Installed plugins
The login keychain, "AllInOneIME API key"	API keys for the Claude API, Gemini, OpenAI-compatible services, the web search
~/Library/Application Support/AllInOneIME/Rime	Rime user data: learned words
~/Library/Logs/AllInOneIME	Rime logs
Preferences com.aipinyin.inputmethod.AIPinyin	What you opened with @open (the latest 200), the id and first line of the last 30 notes saved with @note (for the menu bar panel), rows removed from the panel, the background Claude tasks being watched
~/.aws/credentials, ~/.aws/config	Your AWS keys and region, read only

• The settings window shows only AWS profile names and whether keys were found; it never shows the keys themselves.
• Uninstalling doesn't delete this data; see "Uninstall" in Installation and Troubleshooting.