Privacy Policy

Pre-release testing of purchases and ad-supported previews is in progress.

What you type

We do not collect, save or transmit typed text, composition text or typing history. Text needed for typing and suggestions is processed temporarily in memory and is not sent to our servers or ad providers. Japanese conversion and English suggestions run on your device. We do not build a personal learning history. Storage or transmission by the app you type into is governed by that app and its privacy policy.

Settings and purchases

We store theme, volume, sound and haptic settings, verified purchase status and expiry on the device for the companion app and keyboard. Apple StoreKit handles iOS purchases and restoration; Google Play handles Android purchases. We do not receive card details or store passwords. There is no app-specific user account. Product retrieval and verification are currently being tested. If access cannot be verified, the keyboard returns to free Basic PC; this does not cancel a subscription. Cancel subscriptions in your store's subscription settings.

Android purchase verification and retention

The Android companion app sends the purchase token obtained from Google Play, a one-use verification challenge (nonce), an installation public key and signature, and a Play Integrity token to a dedicated verification server over HTTPS. Google services are queried to verify the purchase and app integrity for providing access and preventing fraud. These data are not repurposed for advertising, and the API accepts no typed text. A hash of the public key binds access to the installation and is an identifier, not anonymous data.
We do not maintain our own purchase-history database. Purchase tokens are handled in processing memory, not in our own persistent storage or request-body logs. The server briefly stores a nonce hash and issue/expiry times. A nonce is valid for 60 seconds and deleted when used; unused entries are eligible for automatic cleanup. Cleanup can be delayed, so physical deletion exactly after 60 seconds is not guaranteed. An aggregate per-minute counter is retained for load control.
The device stores its local key and a signed access proof. Proofs are valid for at most 24 hours, or until the purchase expires if sooner. Expiration and file deletion are different events. iOS purchase information is not sent to this server.
Google Cloud service logs may include request IP, time, path and result. Ordinary log retention is 30 days; mandatory audit logs are retained for 400 days. These settings do not control all processing or retention by Google Play, Integrity or other providers. Uninstalling removes app-local data but does not automatically cancel subscriptions. Store/OS backups and provider records follow the respective service policies.

Review and invitation access

If you choose to activate a review or invitation code in the Android companion app, it sends that code, a one-use challenge, an installation public key and signature, and the app version to the same verification server over HTTPS. These are used only to authorize and protect complimentary access, not for advertising. The code and signed access proof are stored locally to renew access. Request bodies and codes are not logged by our application, and installation identifiers are not stored in a purchase-history database. The server and provider log retention described above also applies. This access does not create a purchase or subscription.

Ads

Advertising is designed for optional previews selected by adults in the companion app. Starting with iOS test build 1.0 (23), the advertising feature is enabled for optional adult previews. Ad availability depends on provider readiness, inventory and network conditions. The same optional adult ad preview is enabled starting with Android internal test version 0.10.0 (10). Ads remain disabled in the older version 0.9.0 (9). The iOS keyboard extension contains no advertising SDK. The Android companion app includes Google Mobile Ads and UMP, but keyboard code does not call them; automatic initialization and advertising-ID permissions are removed. Typed text, composing text and typing history are never passed to advertising providers.
In ad-enabled builds, the adult preview flow provides applicable consent forms and privacy options. The configuration uses limited ads (LTD), restricted data processing (RDP), disabled personalization and disabled publisher first-party IDs. The app will additionally block ad requests when required European consent is absent, supported US consent signals contain sale/sharing or related opt-outs, or required signals cannot be read. Declining does not restrict free typing.
Limited ads do not mean zero communication or data processing. Google and advertising participants may process IP addresses and approximate region inferred from them, device/app-related information, ad interactions, and performance/error diagnostics for delivery, measurement and fraud prevention. Programmatic limited ads may use device storage solely for invalid-traffic detection. Development test ads and consent forms also communicate over the network. Provider retention is not controlled by this app; their privacy policies apply. See Google's limited ads explanation.

Children and students

Typing and free Basic PC need no purchase or ad. Before a preview, we optionally ask for age. The numeric age is not saved or sent; only under 18, adult, or unanswered is stored locally in the companion app. This group is not sent to the keyboard or an ad provider. Preview actions for under-18 and unanswered users do not initialize an ad SDK or request an ad; a 60-second preview is available without ads. Adults may preview after voluntarily watching an ad. Both previews stay in the companion app; a verified Premium subscription is needed to use paid themes as the system keyboard. Previews do not charge money. Purchases follow store confirmation and family approval settings. The calculation gate is not legal parental consent.

Permissions

We do not request microphone, contacts or device location permissions. iOS Full Access is used for local key sounds. Enabling it also permits networking at the OS level, but this keyboard has no code to send typed text externally. Typing works with Full Access off. The keyboard reads companion-app settings and verified purchase status; typed text is not shared. Android internet permission is application-wide for companion ads and purchase checks, but typing and conversion do not initiate networking. Ad providers may infer an approximate region from an IP address.

Contact

Contact 99.rockyou@gmail.com. Email addresses and messages you voluntarily send for support are used to respond and resolve the issue. Do not send private typed text or screenshots containing personal information. You may request deletion of support correspondence at this address.

Updates

Last updated October 2, 2026. This describes the implementation being prepared for release. We update it when features or external services change.

このサイト / This website

GitHub Pagesで公開しています。GitHubがアクセス時のIPアドレス等をサービス提供・安全確保のために処理する場合があります。キーボードの入力内容は含みません。当サイト独自の解析・広告・追跡Cookieは設置しません。
This site is hosted by GitHub Pages. GitHub may process access logs, including IP addresses, to provide and secure its service. Logs do not contain keyboard input. We add no analytics, ads or tracking cookies.