Privacy

DRAFT · LAST UPDATED 2026-11-03 · REVIEWED BY A LAWYER BEFORE LAUNCH

Short version: the keyboard never sends what you type, unless you turn on the AI writing bar and tap it, and then only that one sentence is sent. The app sends what you ask the AI studios to make, and what you choose to publish.

The keyboard

Lights, effects, looks and text styles work on your phone without any permission.
Full Access is optional. It is an iOS permission that lets a keyboard play custom sounds and haptics, and use the optional AI writing bar.
The AI writing bar is off until you switch it on in the app. When you tap Fix, Rewrite, Shorter, Translate or Emoji, only the current sentence (or your selection, up to 600 characters) goes to our server and on to the AI model. It is not stored and not used for training. Nothing else you type is ever sent.
Learned words for autocorrect stay on your phone.
The keyboard never shows ads.

The app

When you describe a light, sound or look in a studio and press Generate, that description goes to our server and on to an AI model (Anthropic's Claude) to produce the result. Anthropic does not train on it. We keep a log of request counts and cost, not the text.
Emoji maker: your description (or the two emoji you mix) and the name go to our server and on to OpenAI (an image model) to draw three takes. The prompt, name and images are stored privately for 30 days, then deleted; deleting your account deletes them at once.
Emoji from a photo: the photo is read on your phone (Apple Vision) to describe it. With Match my photo on (the default; the screen says so), the square you framed, or just its subject, is sent once to our server and on to OpenAI to draw the emoji. We don't store it. OpenAI doesn't use API inputs to train its models and may keep them for up to 30 days for abuse monitoring. Turn Match my photo off to send only a text description you can edit.
Lights and looks from a photo: the colors are extracted on your phone. Only those color values are sent, never the picture.
Your creations are stored on your phone.
Sharing or publishing a creation stores its recipe (colors, speeds, triggers, sound settings), the name and tags you give it, and a short code on our server so others can open it. It never includes anything you typed with the keyboard.
To count how many people tried a creation, tries are counted once per account per creation per day, with no device identifier. (The app still sends a one-way hash of an app-specific identifier for compatibility with older servers; the current server ignores it.)
If you turn on notifications, we store your device's push token to tell you when someone tries or remixes your creations. No marketing notifications.
No analytics SDKs, no ads, no tracking across apps or websites.

Accounts

When you first use AI or sharing, the app creates an anonymous account so your daily free uses and shared links work. It has no name or email.
Publishing to Discover, following creators and picking a handle need Sign in with Apple. We don't ask Apple for your name or email.
Follows, saves, reports, blocks and activity on your creations are stored with your account.
Delete account (Settings → Account & community) deletes everything above from our server: published creations, handle, follows, saves, activity and push tokens. Creations saved on your phone stay until you delete the app.

Community safety

Names and tags are checked automatically before they go public. Any creation can be reported, and any creator blocked, from its … menu. A person reviews reports, usually within 24 hours, and removes content that breaks the rules.

Who processes data for us

Supabase (database, accounts, server functions), hosted in the United States.
Anthropic (AI model) for AI studio and writing bar requests.
OpenAI (image model) for the emoji maker, including the framed photo when Match my photo is on.
Apple (Sign in with Apple, push notifications).

This website

If you leave an email to be notified on release day, we store that address and the date, send one email, and delete the list after launch. No tracking pixels, no third-party ad cookies. The site uses Vercel Web Analytics to count visits and page views: it sets no cookies and stores no IP addresses; visitors are told apart by a hash that resets every day, and what we see is aggregated (page, referrer, country, device and browser type).

Contact

Questions, deletion requests, anything: support@keyripple.app. A person reads it.