Privacy

Controller

Payrolless, LLC

Address

701 Tillery Street, Unit 12 #1311, Austin, TX 78702, USA

Contact

[email protected]

No keystrokes. The keyboard does not transmit what you type — not as you type it, not later, not in aggregate. Suggestions are computed on the device, from a dictionary shipped with the application.

Nothing at all from a protected field. In a password field, suggestions, learning and every network feature are switched off.

• Dictation: the audio of a passage goes to our service, which transcribes it on our own servers. It is neither stored nor logged.
• GIFs and stickers: the words of your search, and nothing else.
• Translation and rewriting: the text you submitted, and only that.

These calls go through our service because a provider's keys cannot live in an application: a key in a binary is a public key.

The personal dictionary — the words the keyboard has learned from reading you —, your Boards and the clipboard history. These files are excluded from backups and device transfers, and you can review and erase them from the application.

The clipboard history is capped: twenty unpinned entries, and nothing longer than an excerpt. An unlimited log of what somebody copies on a phone eventually contains a one-time code or a password.

The data processed is the account's — email address, hashed password, usage counters per feature per month — and the content you explicitly submit to a remote feature, for as long as it takes to process it.

Legal bases

Performance of the contract for the account and the remote features; legitimate interest for the security of the service and for anonymous statistics.

Retention

The account and its usage counters for as long as the account exists; they are erased with it. Content submitted to a remote feature is not kept after the response.

Recipients

Our infrastructure and processing providers, for the sole performance of the requested feature. No data is sold or transferred. If you consent to audience measurement, Google Ireland Limited and Google LLC also receive the data that measurement produces.

Transfers outside the EU

Dictation is transcribed on our own servers, located in the European Union. Translation and rewriting go through a language-model provider that may process them outside the Union; those transfers rely on the European Commission's standard contractual clauses. Audience measurement sends your IP address and a browser identifier to Google, which may process them in the United States, on the same standard contractual clauses.

Your rights

Access, rectification, erasure, restriction, objection and portability, by writing to [email protected]. You may also lodge a complaint with your supervisory authority.

This site embeds no advertising tracker. Fonts are served from our own domain, which avoids a request to a third party on every visit.

We measure the site's audience with Google Analytics, and only if you agree to it: no measurement cookie is set and no data is sent before you consent, which you can refuse or withdraw at any time. What is measured is the pages that are read, never what you type on the keyboard.

The mobile application uses no cookies. It keeps a session token on the device to keep you signed in, erased when you sign out.

The application sends crash reports and usage statistics (Firebase Crashlytics and Analytics). They carry an installation identifier, the device model and the version of the application — pseudonymous data, not anonymous, and erased with the account. No content typed, dictated or translated appears in them.