Privacy Policy

The short version. Keyboarda is a keyboard, but it does not log what you type. The only text that leaves your device is the text you deliberately run an AI tool on — and that goes to Google Gemini, through our server, to produce the rewrite. We keep no copy of it afterwards. There is no account; you are a random, anonymous ID. Subscriptions are handled by Apple. We use a small amount of analytics, and — only if you allow it when asked — your advertising identifier, to measure our ads.

1. Who we are

Keyboarda ("the app", "we", "us") is published by Dewmina Udayashan. The product is two parts that work together: the Keyboarda iOS app and the Keyboarda keyboard extension that types inside other apps. This policy covers both, on iOS. It does not apply to the App Store itself, which has its own policy.

For the purposes of the UK and EU General Data Protection Regulation, Dewmina Udayashan is the data controller for the processing described below.

2. What Keyboarda collects

The table below is the complete list. Anything not in it, the app does not collect.

Keyboarda has no accounts. We never ask for your name, email address, phone number or a password.

3. Your typing, and Full Access

This is the part that matters most for a keyboard, so it is spelled out plainly.

• Keyboarda does not log your keystrokes. It does not record, transmit or store a running copy of what you type. It has no capability to do so.
• The keyboard reads text from the field you are editing only through iOS's UITextDocumentProxy, which exposes a window of text around the cursor, and it does so only when you tap a tool that needs it — to rewrite, translate or fix the text you are working on.
• That text leaves your device only when the tool you tapped needs the network. Four of the built-in tools run entirely on your device and send nothing anywhere.
• Full Access. iOS requires you to grant "Allow Full Access" before a third-party keyboard can use the network. Keyboarda asks for it so the AI tools can reach our server. Until you grant it, the networked tools are unavailable and nothing is transmitted. You can revoke Full Access at any time in Settings → General → Keyboard → Keyboards.
• Secure fields. iOS automatically disables third-party keyboards in password and other secure text fields, so Keyboarda does not appear — and cannot read anything — there.

4. AI processing

The AI tools are the product, and they work by sending the text you chose to a large language model.

When you tap a networked tool, the collected text, the tool or style, and any target language are sent over HTTPS to a Firebase Cloud Function we operate. That function checks your anonymous identity and your remaining daily quota, then calls Google Gemini with a key held on our server (never in the app) and returns the result to your keyboard.

• We do not keep the content of your text, or the model's output, after the request completes. Our usage records store counts — how many requests you have made — not what was in them.
• Text processed through our Gemini integration is not used to train Google's models, under the terms of the paid Google API we use.
• The rewrite is shown to you as a diff before anything is inserted; nothing is placed into the field until you choose it.

5. What stays on your device

Your languages, custom writing styles, tool order, saved email profiles and your cached daily-limit figure are written to local storage and shared between the app and the keyboard through an App Group. They are not uploaded, not synchronised by us, and not readable by us. If you delete the app, that data is deleted with it.

6. Third-party services

These are the only third parties that receive anything, and what each one gets:

7. Advertising and tracking

Keyboarda itself shows no advertising. We do, however, advertise the app elsewhere, and to measure whether that advertising works we include Meta's SDK.

• When you first finish onboarding, iOS shows Apple's App Tracking Transparency prompt. If you allow tracking, your device's advertising identifier (IDFA) may be shared with Meta so a tap on one of our ads can be matched to an install. If you deny it — or ignore the prompt — no IDFA is used, and measurement falls back to Apple's privacy-preserving SKAdNetwork, which reports conversions in aggregate without identifying you.
• We send Meta a small set of app events — app open, trial start, subscription — so our campaigns can be optimised. These are tied to the ad system, not to your typing.
• We do not sell your personal information, and we do not share it for cross-context behavioural advertising as those terms are defined under the California Consumer Privacy Act.

You can change your choice at any time in Settings → Privacy & Security → Tracking.

8. Purchases and subscriptions

Keyboarda Premium is sold as a subscription, with a free trial where offered, through the Apple App Store. Your payment details never reach the app or us — Apple handles payment and tells us only whether an entitlement is active. We use RevenueCat to validate receipts and keep your purchase working across reinstalls on the same Apple ID. RevenueCat identifies your install with a randomly generated identifier that is not linked to your name or email.

9. Why we are allowed to process this (UK/EU)

• Performance of a contract — your anonymous identity, the AI request path and quota enforcement. Without them the app cannot do the thing you installed it for.
• Legitimate interests — pseudonymous usage measurement, to keep the app working and decide what to build; and measuring our own advertising in aggregate.
• Consent — advertising-identifier (IDFA) tracking, which happens only if you allow it at the App Tracking Transparency prompt, and which you can withdraw at any time in your device settings.

10. How long anything is kept

• The content of an AI request — not retained. It exists only for as long as it takes to generate and return the result.
• Usage/quota records — the counts are kept while they are needed to enforce your daily limit and are cleared automatically about a week after they are no longer current.
• On your device — until you delete the item, clear the app's data, or uninstall the app.
• Analytics — retained by Firebase for up to 14 months, then deleted automatically.
• Purchase records — kept for as long as your entitlement is active plus the period Apple and tax law require.

11. Your rights and choices

Depending on where you live, you may have the right to access, correct, delete, port, or object to the processing of your personal data, and to complain to your data protection authority. Many of these you can exercise directly:

• Stop sending text off the device — use only the on-device tools, or revoke Full Access in Settings → General → Keyboard → Keyboards.
• Stop ad tracking — turn off tracking in Settings → Privacy & Security → Tracking.
• Delete local data — uninstall the app to remove everything stored on your device.
• Analytics — limit app analytics in your device's privacy settings, or contact us to request deletion of the data associated with your install.

For anything you cannot do yourself, write to support@dewmina.dev and we will respond within 30 days. We will never charge you for exercising a right, and we will not discriminate against you for doing so.

12. International transfers

The providers listed in §6 operate globally, so data sent to them may be processed outside your country, including in the United States. Where required, those transfers rely on the European Commission's Standard Contractual Clauses or an equivalent approved mechanism, as set out in each provider's own policy.

13. Children

Keyboarda is a general-audience utility and is not directed at children under 13 (or under 16 in the EEA/UK). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

14. Security

All network requests use HTTPS. The key for the AI model is held on our server and never ships in the app. There is no Keyboarda account and no database of your typing to breach: your identity is anonymous, your settings stay on your device, and the content of an AI request is not stored after it is answered. No system is perfectly secure, but there is deliberately very little here to lose.

15. Changes to this policy

If this policy changes materially — in particular, if a new processor is added — we will update the "Last updated" date and, for significant changes, tell you in the app before the change takes effect.

16. Contact

Questions, requests or complaints: support@dewmina.dev.

---

© 2026 Dewmina Udayashan. This policy is provided for the Keyboarda mobile application. Apple and App Store are trademarks of Apple Inc. Google, Google Play, Gemini and Firebase are trademarks of Google LLC. Meta is a trademark of Meta Platforms, Inc.