Privacy Policy

This Privacy Policy explains how Aptype collects, uses, shares and protects information when you use the Aptype app and keyboard for iPhone and iPad, this website, and the Aptype Android waitlist. We wrote it to be read, not just agreed to. If anything is unclear, email hello@dewmina.dev.

1. Who we are

Aptype is developed and operated by Dewmina Udayashan, an independent developer based in Sri Lanka (“Aptype”, “we”, “us”). For the purposes of data protection law, we are the controller of the personal information described in this policy, except where we say a third party acts as an independent controller. You can contact us at hello@dewmina.dev.

Aptype was previously called Keyboarda AI. This policy applies to the app under both names.

2. What this policy covers

This policy covers:

• the Aptype iOS and iPadOS app (the “App”);
• the Aptype custom keyboard extension that comes with the App (the “Keyboard”);
• our website at aptype.dewmina.dev (the “Site”); and
• the Aptype for Android waitlist (the “Waitlist”).

Together we call these the “Services”. Apple's handling of your data (for example App Store purchases) is covered by Apple's own privacy policy, not this one.

3. How the keyboard handles your typing

Because Aptype is a keyboard, we want to be precise about this:

• No keystroke logging. The Keyboard does not record, store or send what you type as you type it.
• Only when you tap a tool. When you tap an AI tool (for example Grammar Fix, My Voice, Professional or Translate), the Keyboard reads the text that tool will work on: the text you have selected or, if nothing is selected, the text in the field you are editing. It sends that text, with the instructions the tool needs, to our server for processing and shows you the result. Nothing is read or sent before you tap.
• Offline tools stay offline. Case tools (UPPERCASE, lowercase, Title Case, Sentence case) run entirely on your device.
• Secure fields. iOS never lets third-party keyboards into password fields and some other secure fields. In those fields iOS switches to the system keyboard and Aptype receives nothing.
• Full Access. iOS shows a general warning when you turn on “Allow Full Access”. Aptype needs Full Access for one reason: so the Keyboard can connect to the internet to process the text you choose. We do not use Full Access to collect anything else.

4. Information we process

4.1 Text you submit to an AI tool

When you use an AI tool in the Keyboard or the App, we process the text you submit (up to 15,000 characters) and the instructions for that tool. Depending on the tool, the instructions can include: the tool or tone you chose, the target language, the description of a custom style you created, your My Voice style description and greeting, or the details of an email profile you selected (such as a name, relationship and preferred tone). We send this to our server and on to our AI provider, return the result to you, and then discard it. We do not save submitted text or AI results to our database or our logs.

Your text can contain anything you choose to write, including information about you or other people. Please don't submit information you are not comfortable having processed by an AI service, and don't submit anyone else's personal information unless you are allowed to.

4.2 Anonymous account identifier

The App creates an anonymous user ID through Firebase Authentication the first time it runs. It is not linked to your name, email address or phone number. We use it to apply daily limits, link your subscription status, prevent abuse, and connect analytics events from the same install.

4.3 Usage and limit records

To run the free daily limit and the Pro fair-use limit, our server keeps a count of AI requests per user ID per day, a small lifetime counter for the free requests you can try during setup, and your current subscription status. These records contain numbers and dates, not your text.

4.4 Purchases and subscriptions

Apple processes all payments. We never receive your card number or billing address. Apple tells our subscription provider, RevenueCat, about your purchase (for example the product, price, currency, transaction ID, purchase and expiry dates, and whether a trial or renewal is active), and RevenueCat tells our server whether you have Aptype Pro. RevenueCat links this to the anonymous user ID described above.

4.5 Analytics

We use Google Analytics for Firebase to understand how people use the App, for example how many people finish setup, enable the Keyboard, use each tool, hit the daily limit or start a trial. This involves:

• events such as onboarding steps, “keyboard enabled”, “full access granted”, the tool used and whether a rewrite succeeded, paywall views, and trial or subscription starts with their price and currency;
• the anonymous user ID, an app instance ID, and Firebase installation IDs;
• device and app information such as device model, operating system version, app version, language, and approximate location (country or region) derived from your IP address; and
• session information such as first open, app opens and engagement time.

Analytics events never contain the text you type or the text the AI writes. We also use Firebase Remote Config to adjust settings such as the daily limit without an app update.

4.6 Advertising measurement

The App (not the Keyboard) includes the Meta (Facebook) SDK so we can measure whether our ads lead to installs and subscriptions. See section 10.

4.7 Feedback and support

If you send feedback in the App, we store your message, the feedback type, your anonymous user ID, the app version, your device model and your iOS version. If you email us, we receive your email address and whatever you include in your message.

4.8 Technical and security data

Like any internet service, our servers and providers receive technical information when the App connects, such as your IP address, request times and error information, and keep it in security and operational logs for a limited time. We use it to keep the Services running and to detect and prevent abuse.

5. Information that stays on your device

The following is stored only on your device, in storage shared between the App and the Keyboard, and is not uploaded to our servers except as part of a tool request you make (see 4.1):

• your My Voice answers and the style description generated from them;
• custom styles you create;
• email profiles (for example a recipient's name, relationship and preferred tone);
• your language choices and settings; and
• small counters and flags, such as whether you have seen a prompt.

To create your My Voice profile, the App sends your quiz answers to the AI once to generate the style description. Deleting the App removes everything stored on your device.

6. How we use information

We use information to:

• provide the AI tools you ask for and show you the results;
• apply free and fair-use limits, and provide Aptype Pro to subscribers;
• keep the Services secure, prevent fraud and abuse, and fix problems;
• understand which features are used so we can improve them;
• measure the effectiveness of our advertising;
• respond to feedback and support requests;
• email Waitlist members about the Android launch; and
• comply with the law and enforce our Terms of Use.

We do not use your text to build advertising profiles, and we do not use it to train or improve AI models.

7. Legal bases (EEA, UK and similar laws)

Where the GDPR, UK GDPR or a similar law applies, we rely on these legal bases:

Where we rely on consent, you can withdraw it at any time without affecting earlier processing. Where we rely on legitimate interests, you can object (see section 14).

8. AI processing

Aptype's AI tools are powered by Google's Gemini models, accessed through the Gemini API. Google processes the text you submit on our behalf to generate the result. Under the terms that apply to our use of the paid Gemini API, Google does not use your prompts or results to train or improve its models. Google may keep them for a limited period to detect abuse and comply with law, as described in Google's Gemini API terms.

AI results are generated automatically and can be wrong, incomplete or inappropriate. Always review a result before you use it. Aptype does not make decisions about you that have legal or similarly significant effects.

9. Who we share information with

We share information only with service providers that help us run the Services, and only what they need. They are bound by contract to protect it and use it only to provide their services, except where noted.

Meta may also use information it receives for its own purposes as an independent controller, as described in Meta's Privacy Policy. Each provider's privacy policy is on its website.

We may also disclose information:

• if required by law, court order or a valid request from a public authority;
• to protect the rights, safety or property of our users, the public or us, or to investigate abuse; and
• to a successor if Aptype is sold, merged or transferred, in which case this policy, or one that protects you at least as well, will continue to apply.

We do not sell personal information, and we do not share your text with anyone except our AI provider for the purpose of processing your request.

10. Advertising measurement and tracking

The App uses the Meta SDK to send Meta events such as app installs and opens, and the start of trials and subscriptions (with price and currency), so that Meta can tell us which ads worked and show our ads to people likely to find Aptype useful. The Keyboard does not contain the Meta SDK and sends nothing to Meta.

iOS asks whether you allow Aptype to track you. If you allow tracking, your device's advertising identifier (IDFA) is shared with Meta for ad attribution and optimisation. If you ask Aptype not to track, we tell the Meta SDK, the IDFA is not shared, and we do not link data from Aptype with data from other companies' apps or websites for targeted advertising. Meta still receives limited, non-identifying event data, and Apple's SKAdNetwork reports attribution in aggregate. You can change your choice at any time in Settings › Privacy & Security › Tracking.

11. International transfers

We are based in Sri Lanka, and our providers process data in the United States and other countries. Our servers run in Google Cloud's us-central1 region (United States). When we transfer personal information from the EEA, the UK or Switzerland, we rely on safeguards recognised by those laws, such as the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, and the EU-U.S. Data Privacy Framework where a provider is certified.

12. How long we keep information

13. Security

All connections between the App, the Keyboard and our servers are encrypted in transit with TLS. Our database only accepts writes from our own server code, users can read only their own usage records, and access to production systems is restricted. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your information and will notify you and the authorities of a breach where the law requires.

14. Your choices and rights

Choices you can make at any time

• Use only the offline case tools, or don't tap AI tools in conversations you want to keep private.
• Turn off Full Access in Settings › General › Keyboard › Keyboards › Aptype, or remove the Keyboard.
• Change your tracking choice in Settings › Privacy & Security › Tracking.
• Delete your My Voice profile, styles and email profiles in the App, or delete the App.
• Manage or cancel your subscription in your Apple ID settings.

Your rights

Depending on where you live, you may have the right to: access the personal information we hold about you and get a copy; correct it; delete it; restrict or object to our processing; receive it in a portable format; withdraw consent; and not be discriminated against for exercising these rights. These rights are given by, among others, the GDPR, the UK GDPR, the California Consumer Privacy Act, other US state privacy laws, and Sri Lanka's Personal Data Protection Act, No. 9 of 2022.

To make a request, email hello@dewmina.dev. Because we don't ask for your name or email in the App, we may need information to find your data, such as the date you installed the App, an App Store transaction ID, or the email address you used for the Waitlist. We will respond within the time the law requires (usually one month). You may use an authorised agent where the law allows. If you are unhappy with our response, you can complain to your local data protection authority. In Sri Lanka, that is the Data Protection Authority of Sri Lanka.

15. Notice for California and other US states

In the past 12 months we have collected these categories of personal information, from you and your device:

• Identifiers: anonymous user ID, app instance and installation IDs, IP address, IDFA (only with your permission), and email address (Waitlist and support only).
• Commercial information: subscription and purchase status.
• Internet or other electronic network activity: in-app usage events and technical logs.
• Geolocation: approximate location derived from IP address. We do not collect precise location.
• Content you submit: text you send to an AI tool (processed, not stored) and feedback messages.
• Inferences: your My Voice style description, which is stored only on your device.

We use and disclose these categories for the purposes in sections 6 and 9. We do not sell personal information. If you allow tracking, sharing your IDFA and app events with Meta for ad measurement may count as “sharing” for cross-context behavioural advertising under California law. You can opt out by choosing “Ask App Not to Track” or turning tracking off in iOS Settings, and you can also email us. Our Site doesn't use tracking technologies, and we treat a Global Privacy Control signal as a valid opt-out. We do not use sensitive personal information to infer characteristics about you. We have no actual knowledge of selling or sharing the personal information of anyone under 16.

16. Children

The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13 (or under the minimum age set by the law where they live, such as 16 in some EEA countries) without consent from a parent or guardian. If you believe a child has given us personal information, email hello@dewmina.dev and we will delete it.

17. Website and Android waitlist

The Site. Our Site does not use cookies, analytics or advertising trackers. Our hosting provider receives standard technical information (such as IP address, browser type and the pages requested) in server logs, which are used for security and to keep the Site running.

The Waitlist. If you join the Android Waitlist, we collect your email address, your answers to the optional questions (which phone you use and whether you would pay for Pro), the page you joined from and any campaign tags in the link (for example utm_source), the domain of the site that referred you, your browser language and time zone, and the time you gave consent. We use this to email you when Aptype for Android launches and, in aggregate, to decide whether and how to build it. We will not send you marketing for anything else, and we will not share your email with anyone except Google, which hosts the list. Ask to be removed at any time by emailing hello@dewmina.dev or using the unsubscribe link in any email we send.

18. Changes to this policy

We may update this policy when the Services or the law change. We will post the new version here with a new “Last updated” date. If a change is material, we will tell you in the App or by other appropriate means before it takes effect, and where the law requires, ask for your consent.

19. Contact us

Dewmina Udayashan
Sri Lanka
Email: hello@dewmina.dev