Privacy Policy

1. Overview

Keyly is an iOS third-party keyboard and AI-assisted writing app. It includes an on-device typing experience, a Sign in with Apple account system, clipboard translation capabilities, optional cloud AI features, and subscription and quota management.

To provide full writing assistance and clipboard translation, you need to enable "Allow Full Access" in iOS settings. We promise that enabling this permission is strictly for synchronizing settings between the app and the keyboard extension, reading the clipboard to detect foreign text, and transmitting data for cloud AI features when requested.

We follow a data minimization approach. We do not collect keyboard input for advertising, and we do not upload ordinary typing or clipboard content to our servers without your explicit action or configured opt-in. When you use account, subscription, or cloud AI features, we process only the de-identified data needed to provide those services.

If you do not use account, billing, or cloud AI features, most of Keyly's typing, settings, and built-in basic offline translation can remain completely on-device.

1.1 Service Market and Data Controller

Keyly is currently operated primarily for the Taiwan market. Our data-handling practices are mainly aligned with the laws of the Republic of China (Taiwan) and Apple platform requirements.

The data controller for this service is the Keyly development team. For data-related requests, please contact us at [email protected].

If you use the service outside Taiwan, mandatory local laws may still apply to you. Contact us if you need jurisdiction-specific rights information.

2. Categories of Data We Process

2.1 Account and Authentication Data

When you create or sign in to an account with Sign in with Apple, we may process:

• Apple-provided sign-in credentials and identifier information
• Your Keyly account identifier
• Authentication sessions and access token / refresh token data
• Account deletion requests and deletion scheduling status

This data is used for sign-in, account security, session management, and account deletion flows.

2.2 Subscription, Purchase, and Quota Data

If you purchase a Keyly subscription or quota package, we may process transaction information needed for App Store verification, your current subscription status and renewal timing, and AI quota-related records.

2.3 Cloud AI Request Data

When you use cloud AI features (including AI writing rewrites and cloud AI translation), the system processes the submitted text and the request context needed to generate a result:

• AI Writing Rewrites: When you type or select text and tap the AI rewrite button, the specified text is sent to cloud AI for processing.
• AI Translation: Clipboard translation offers two methods: "Basic translation" and "AI translation." The keyboard sends detected foreign text to cloud AI in the following cases: (1) your device runs a version earlier than iOS 26, where Basic translation is unavailable and AI translation is the default; (2) you select "Always use AI translation" in settings; or (3) you tap "✨ Make it more natural" on a translation card to re-translate that message with AI. Only the foreign text and the settings needed to produce the translation (such as the target language) are sent.
• Anonymization: We strive to remove personally identifiable information from requests before sending them to cloud AI processing engines.
• Usage Restrictions & No Stored Content: This data is processed solely for the duration of fulfilling the request. We do not store your submitted text or translation outputs in our databases, and we do not use your inputs to train third-party AI models.

If you use "Basic translation" (Apple's on-device translation) on iOS 26 or later, translation happens on your device and clipboard text is not sent to Keyly or any third-party server; the translation data for a language must be downloaded before first use. On-device local AI rewrite mode processes text on your phone, but if Apple Intelligence is unavailable on your device, AI rewrites are processed by cloud AI instead.

2.4 Clipboard Data

Clipboard translation requires Full Access to be granted in iOS settings. The Keyly keyboard accesses the clipboard as follows:

• When "Auto-translate copied text" is off: the keyboard only checks whether the clipboard has new text and does not read its contents. The text is obtained and translated only when you tap the system "Paste" button on the keyboard.
• When "Auto-translate copied text" is on: the keyboard reads clipboard text once when it appears, and again if the clipboard changes while the keyboard is open. It does not read the clipboard while the keyboard is not shown. iOS may ask whether to "Allow Paste"; you can change this permission in Settings › Apps › Keyly › Paste from Other Apps. Without permission, Keyly cannot read the clipboard.
• On-Device Detection: Whether text is in a foreign language is determined on your device. URLs, phone numbers, digits-only text, single strings without spaces (such as most passwords and verification codes), and text not detected as a foreign language are neither translated nor sent.
• When Text Is Sent: Detected foreign text is sent to cloud AI only in the AI translation cases listed in Section 2.3.
• No Storage: Clipboard text and translations exist only in the keyboard's memory, are never written to device storage or logs, and are cleared when the keyboard is dismissed. Keyly does not store your clipboard contents or translations on its servers or databases; text sent to cloud AI providers is handled under the providers' data processing terms listed in Section 5.
• No Analytics or Advertising Use: Clipboard contents are never reported as analytics events or used for advertising.
• Your Control: You can turn off "Auto-translate copied text" or change the translation method in Keyly's Clipboard Translation settings at any time. If you turn off Full Access, Keyly cannot read the clipboard.

2.5 Local Settings and Personalization Data

Keyly stores necessary local data on your device, such as keyboard and AI preferences, settings shared between the app and the keyboard extension, personal dictionary or learning results, and local caches and session state.

2.6 Diagnostics, Analytics, and Remote Configuration Data

Keyly currently uses Firebase Analytics, Firebase Remote Config, and Supabase to support product operations. These services may process data related to product behavior, feature flags, reliability, diagnostics, or service security. We do not send keyboard text content or clipboard text as general analytics events.

3. How We Use Data

• To create and maintain your account
• To verify session state and protect account security
• To provide cloud AI text rewrites and cloud AI translation
• To verify subscription, quota, and payment entitlements
• To store your settings and personalization preferences
• To prevent abuse, keep the service reliable, and troubleshoot problems
• To fulfill account deletion and legal obligations

4. What We Do Not Do

• We do not sell your personal data for advertising purposes
• We do not collect keyboard input or clipboard text as general tracking data without your action or configuration
• We do not automatically upload everything you type or copy just because you installed the keyboard
• We do not store your typing history, original texts, or clipboard contents on our servers
• We never access or upload sensitive identity information such as credit card numbers, passwords, or addresses without permission.

5. Third-Party Services

Keyly may use the following third-party services or platforms to process necessary data:

• Apple: sign-in, App Store subscriptions, transaction flows, and on-device Basic translation engine on iOS 26 or later (processed on-device, without server processing)
• Supabase: accounts, database, edge functions, and related backend capabilities
• Firebase: analytics and remote configuration
• Anthropic (Claude): primary cloud AI provider for writing assistance rewrites, processing submitted text only when you use AI rewrite features
• Google (Gemini): cloud AI translation provider, and backup provider for writing assistance rewrites
• Cloudflare: hosts the Keyly API that relays cloud AI requests

Each third-party service handles data under its own policies and practices.

6. Data Retention

• Local settings and personalization data: generally remain on your device until you delete the app, clear data, or reset settings
• Account, subscription, quota, and security-related data: retained for as long as needed to provide the service
• Legal, tax, transaction, dispute-resolution, or security records: may be retained longer where required

7. Account Deletion

You can submit an account deletion request inside the app. Once the request is accepted:

• Your account is immediately deactivated and signed out
• A 30-day grace period begins
• During those 30 days, you cannot sign in again or start over with the same Apple ID
• After 30 days, we delete the account and deletable data
• You immediately lose access to Keyly cloud AI, subscription-linked entitlements, and related account-based services

Deleting your Keyly account does not automatically cancel your App Store subscription. You still need to cancel it yourself on the Apple subscription management page. Subscription billing and refund decisions remain subject to Apple's policies and handling.

Where required for legal obligations, tax, payment verification, dispute handling, or security purposes, we may retain limited data for the necessary period instead of deleting everything immediately.

8. Your Rights

Depending on the laws that apply to you, you may have rights to access, correct, delete eligible data, or object to specific processing activities.

9. Children's Privacy

Where required by applicable law, children should use services involving accounts, payments, or cloud features only with parent or guardian consent.

10. Changes to This Policy

If we update this policy, we may provide notice in the app, on the App Store page, or through other appropriate channels when required, and we will update the last updated date of this document.

11. Contact

If you have questions about this Privacy Policy or the account deletion flow, please contact us at [email protected].