Privacy Policy

App: typeApp · Data controller: Tilek Koszhanov (individual developer)
Last updated: 14 June 2026

typeApp is built to be private. We do not require an account, we do not sell your data, and we do not include advertising, analytics SDKs, or tracking. This policy explains exactly what data the App processes, why, and who it is shared with. It applies to the typeApp app and its keyboard extension.

1. Who we are

The App is provided by Tilek Koszhanov, an individual developer ("we", "us"). For any privacy question or request, contact koszhanov.tilek@icloud.com.

2. What we process, and why

DataPurposeStored by us?
Text you submit for processing (the content of the field you choose to rephrase, correct, translate or use, plus optional tone/target-language) To generate the AI result you requested No — processed in transit only, not retained on our servers
Anonymous device identifier (a random ID generated on your device, not Apple's advertising ID and not linked to your identity) To enforce a fair daily usage limit and prevent abuse Yes — a per-day request counter, automatically expiring (about 24 hours)
Subscription identifier (a RevenueCat app user ID) To verify that AI Features are unlocked by an active subscription Yes — a short-lived cached subscription status (about 24 hours)
App settings (your chosen tones, languages, consent state, subscription status) To make the App work the way you set it up Stored only on your device (and synced to your keyboard via an App Group); not uploaded to us

We do not create user accounts, and we do not collect your name, email, contacts, photos, precise location, or browsing history through the App.

3. How the keyboard handles your typing

The keyboard accesses the text in the field you are editing only when you actively trigger an AI Feature, and only to provide that feature. It does not log your keystrokes, does not build a typing history, and does not transmit anything in the background. Text leaves your device only at the moment you ask for an AI result.

4. How AI processing works (data flow)

When you use an AI Feature, the relevant text is sent over an encrypted (HTTPS) connection to our processing service (a serverless function hosted on Vercel). Our service builds the request and forwards your text to a third-party AI provider (currently OpenAI or Google), which generates the result and returns it. Your text passes through our service to produce the result and is not stored by us afterwards.

The AI providers process your text under their own API terms and privacy/data-usage policies. As of the date above, OpenAI states that data submitted via its API is not used to train its models by default, and Google applies its API data-use terms. We do not control these third parties; please review:

5. "Allow Full Access" permission

iOS requires the keyboard's "Allow Full Access" setting for it to use the network. typeApp uses Full Access solely to (a) send text to the AI service when you request a result, and (b) share your settings and subscription status with the main app. Without Full Access, AI Features cannot work.

6. Subscriptions and payments

Purchases are processed by Apple; we never receive your card or payment details. Subscription status is managed through RevenueCat, which processes the subscription identifier described above to tell the App whether your subscription is active. See RevenueCat's privacy policy and Apple's privacy policy.

7. Who we share data with

We share data only with the service providers needed to run the App: the AI providers (OpenAI, Google) for generating results; Vercel as our hosting/processing infrastructure; Upstash/Redis for the usage counter and subscription cache; and Apple and RevenueCat for subscriptions. We do not sell personal data and do not share it for advertising. We may disclose data if required by law or to protect our rights.

8. International transfers

Our providers may process data on servers located outside your country, including the United States. Where required, such transfers rely on appropriate safeguards (for example, the providers' standard contractual clauses).

9. Retention

We do not retain the text you submit. The daily usage counter and the cached subscription status are short-lived and expire automatically (about 24 hours). Settings remain on your device until you change them or delete the App.

10. Legal bases (EEA/UK users)

Where the GDPR or UK GDPR applies, we process data to perform our contract with you (providing the AI Features and managing subscriptions), based on your consent for AI processing (which you give in the App and can withdraw by not using AI Features or by disabling them), and based on our legitimate interests in preventing abuse and keeping the service reliable.

11. Your rights

Depending on where you live, you may have rights to access, correct, delete, or restrict processing of your personal data, to object, to portability, and to lodge a complaint with a supervisory authority. Because we do not maintain accounts and do not retain your text, most data is held only on your device and can be removed by deleting the App. For other requests, contact us at the email above and we will respond as required by law. California residents: we do not "sell" or "share" personal information as defined by the CCPA/CPRA.

12. Security

Data in transit is protected with encryption (HTTPS/TLS), provider API keys are kept on our server and are never shipped in the App, and we minimise what we collect and store. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

13. Children

The App is not directed to children under 13 (or the higher minimum age in your country), and we do not knowingly collect data from them. If you believe a child has provided us data, contact us and we will delete it.

14. Changes to this policy

We may update this policy from time to time. The "Last updated" date reflects the current version, and material changes will be shown in the App or on this page.

15. Contact

Tilek Koszhanov — koszhanov.tilek@icloud.com