Andrea, I want to reassure you on this directly. Charm does all of its work on your device, nothing you type is ever stored or sent anywhere. The latest update (1.0.51) also makes Charm explicitly skip password fields, so it doesn't read them at all. Your passwords are never seen, kept, or transmitted. Thanks for raising it, it's an important thing to get right.