TypeKey Privacy Policy

App: TypeKey: AI Keyboard & Writer (iOS) · Provider: Zentropi LLC, 447 Broadway, 2nd Floor Suite #1809, New York, NY 10013, United States · Contact: info@zentropi.app · Applies from version 2.1 · Effective: 13 October 2026

The short version

TypeKey sends your text to our server only when you tap an action, and only after you have agreed to AI processing in the app. Our server passes it to our AI service provider to write the result and sends the result back to your keyboard. We don't store your text or the result on our server.
TypeKey does not record what you type between actions. iOS never lets third-party keyboards into password fields and other secure text fields.
No ads. No advertising identifier (IDFA). No tracking across other companies' apps or websites.
Usage analytics use a short, fixed list of events and never include your text or the results. In the EEA, the UK and Switzerland they run only if you tap "Allow", and you can switch them off in Settings at any time. Elsewhere they are on, and you can object by email.
You can ask us to delete your data at any time: info@zentropi.app.

How the keyboard handles your text

Your agreement first. Before you turn on Full Access, TypeKey explains that your text is sent to our server and processed by our AI service provider to write the result. The AI actions work only after you tap "Agree and continue". Until then the keyboard sends nothing to our server.
What is sent. When you tap an action (for example Spell Check, Change Tone, Translate, Summarize or Humanize), TypeKey sends the text in the field you're typing in, with the chosen action. For Reply, it sends the message you copied so it can suggest answers. Nothing is sent while you just type.
How it travels. Encrypted (HTTPS) to our server at api.typekey.app, which passes it to our AI service provider in the USA and returns the result.
What is kept. Our server does not store the text or the result. Our AI service provider processes them to create your result under its terms for business API use. We make no claim about its training or retention beyond what it confirms to us in writing, and we will update this page when it does.
Full Access. iOS requires Full Access for any keyboard that connects to the internet. TypeKey uses it to send your text when you tap an action, to check your subscription and, where you allowed it, for the analytics described below.
Withdrawing. To stop AI processing, turn off Full Access for TypeKey in iOS Settings, or remove the keyboard. The AI actions then stop.

Data that leaves your device

Purpose	What	Service	When
Creating your result	The text in the field (or the copied message for Reply) and the chosen action	Our server (api.typekey.app), our AI service provider (USA)	Only when you tap an action, after you agreed
Running the service	A random install ID created on your iPhone, sent together with your app user ID for purchases	Our server	When the keyboard or app talks to our server
Server access logs	IP address, time, request path, response status and the app’s User-Agent. Never your text.	Our server	Every request to our server
Subscriptions and restoring purchases	A random app user ID (linked to the install ID), purchase and subscription history, App Store receipt data, device info, IP address	RevenueCat (USA), Apple	When you view plans, buy or restore
Product analytics	Events from a fixed list (for example "keyboard enabled", "action used", "reply inserted", "purchase"), with fixed properties such as the preset name, the tone or a count. Device and OS information, the random install ID and the analytics tools’ device identifiers (the Firebase app instance ID and the iOS identifier for vendor). An approximate location (country and city) that the analytics provider derives from your IP address. Never your text, the results or the advertising identifier.	Mixpanel (EU data residency), Google Firebase Analytics	EEA/UK/CH: only after you tap "Allow". Elsewhere: while you use the app
Crash reports	Crash traces, device state, a crash-report install ID	Google Firebase Crashlytics	Same rule as analytics
Support	What you write to us, and the Install ID added to the email	Email	If you contact us

One install ID. TypeKey creates one random install ID on your iPhone. It is the ID in our analytics, it identifies your keyboard to our server, and it is sent to our server together with your purchase user ID, so these records can be linked to each other. It is not linked to your name or email address.

Analytics never uses the advertising identifier and switches off Google's advertising features. Reminders that TypeKey schedules on your iPhone are local notifications and send nothing to us.

Legal bases

AI processing of your text: your consent (Art. 6(1)(a) GDPR), given with "Agree and continue". You can withdraw it at any time as described above.
Subscriptions and running the service: contract (Art. 6(1)(b) GDPR).
Analytics and crash reports in the EEA, the UK and Switzerland: your consent (Art. 6(1)(a) GDPR, and for storing or reading data on your device Art. 5(3) ePrivacy Directive and, in Germany, § 25 TDDDG). You give it with "Allow" and withdraw it as easily in Settings → "Share usage analytics". Nothing is sent before you allow it: two onboarding events (first open and onboarding completed) wait on your iPhone until you choose; "Allow" sends them and "Not now" deletes them. If you said no on this device before, that choice stays.
Analytics and crash reports elsewhere: our legitimate interest (Art. 6(1)(f) GDPR) in understanding which actions help and keeping the app working, with minimal data and never your text. You can object at any time: write to us from Settings → Contact Us (the email includes your Install ID), or write to info@zentropi.app and include the Install ID shown in Settings. We then delete the analytics data for that Install ID at Mixpanel and ask Google to delete the matching Firebase data.
Security and fraud prevention: our legitimate interest (Art. 6(1)(f) GDPR).

International transfers

Some providers process data in the USA (our AI service provider, RevenueCat, Google). Where a provider is certified under the EU-US Data Privacy Framework we rely on it; otherwise on the EU Standard Contractual Clauses.

Retention

Your text and results: not stored on our server.
Analytics events: up to 14 months in Firebase Analytics and up to 24 months in Mixpanel, then deleted.
Crash reports: up to 90 days.
Server access logs: up to 14 days, then deleted.
Purchase records: as long as accounting and tax law require.
Support emails: as long as needed to answer you.

Earlier versions

Versions before 2.1 also sent the text around the cursor and the AI result to our analytics provider when you tapped an action, recorded sessions in the main app for product research, showed ads and used an attribution service. Version 2.1 stops all of this. We are deleting the analytics data that contained text.

Your rights

You can request access, correction, deletion, restriction or portability of your data, object to processing, and withdraw consent at any time, by emailing info@zentropi.app. You can also complain to your local data-protection authority.

This website (typekey.app)

With your consent we use Google Analytics to measure visits; you can change it at any time. Nothing is measured and no analytics cookie is set until you choose "Accept" in the banner; "Decline" is remembered on this device. We measure page views and clicks on App Store links, to learn which pages help people find TypeKey. Your IP address is sent to Google to estimate your rough location and is not stored. We have turned off Google signals and all advertising features. The cookies (_ga, _ga_<id>) expire after 14 months, and Google Analytics keeps the data no longer than 14 months. Legal basis: your consent (Art. 6(1)(a) GDPR; § 25(1) TDDDG). Google processes the data for us under the Google Analytics terms; see How Google uses information from sites that use its services. Withdrawing consent stops the measurement and removes the cookies.

Change your cookie choice

Children

TypeKey is not directed to children under 13 (under 16 in the EU), and we do not knowingly collect their personal data.

Changes

We will update this page when our practices change and show the new effective date above.