1. Objective

This Privacy Policy explains how KAI AI Keyboard collects, uses, processes, stores, and protects personal data when using the custom iOS keyboard extension and mobile application (collectively, the "Services"). Personal data is processed in accordance with applicable data protection legislations (including the General Data Protection Regulation - GDPR, and the California Consumer Privacy Act - CCPA).

2. Data Collection and Processing

Data processing is limited strictly to the explicit and legitimate purposes of providing the AI writing features. The following categories of data are collected and processed:

• User Content (AI Prompts): The specific text highlighted or selected for processing when tapping an AI button (e.g., Translate, Grammar). No other background typed text is ever sent or read.
• Technical & Usage Data: Device model, operating system version, network activity log data, anonymous purchase transaction tokens, IP address, and advertising/vendor identifiers (IDFA/IDFV) if permitted.
• Contact Information: The email address provided when voluntarily contacting support.

3. The "Allow Full Access" Permission Explained

Apple iOS requires custom keyboard extensions to request "Allow Full Access" to establish network connections. KAI AI Keyboard requires network access solely to communicate with AI services when initiating an AI command (such as asking for grammar correction or translation). Without Full Access, KAI AI Keyboard cannot connect to the servers to process the request. This access is strictly not used to monitor typing, log regular keystrokes, or gather background user data.

4. Purposes of Processing and Legal Bases

Data is processed under the following legal bases and for the specific purposes listed below:

• Contractual Obligation: To provide the core AI-writing features of the keyboard, translate texts, generate smart replies, and handle subscription access.
• Legitimate Interests: To maintain secure operation of the Services, detect fraud, analyze crash logs, and improve performance.
• Consent: For using device identifiers (IDFA) for marketing attribution, which can be allowed or denied via the iOS system pop-up.

5. Third-Party Data Transfer

In order to provide AI functionalities and manage payments, specific data is securely shared with trusted third-party service providers. Personal data is never sold to third parties.

A. Third-Party AI Services

When triggering an AI feature, only the explicitly selected text (User Content) is sent to AI API partners, including:

• OpenAI, LLC: For processing text prompts and generating writing assistance. (Privacy Policy: https://openai.com/privacy/)
• Google LLC (Gemini): For generating AI writing suggestions and translation assistance. (Privacy Policy: https://policies.google.com/privacy)

These AI providers process prompts in real-time. They are contractually obligated not to store inputs permanently or use them to train their public AI models.

B. Subscription and Payment Management

• RevenueCat, Inc.: RevenueCat is used to verify and manage paid subscriptions and free trial status. RevenueCat processes anonymous purchase transaction records. No personally identifiable financial information (credit cards, bank details) is ever shared. (Privacy Policy: https://www.revenuecat.com/privacy)
• Apple Inc. (App Store): All purchase processes and payments are handled exclusively by Apple. Users are subject to Apple's App Store terms and privacy policies.

6. Data Security and Technical Measures

Appropriate technical and organizational measures are implemented to ensure data remains secure. All communications between the KAI AI Keyboard extension, the app, and third-party AI APIs are strictly encrypted using HTTPS (SSL/TLS). AI prompt texts are processed dynamically on servers and immediately discarded. Typed texts or AI outputs are not saved or logged on any persistent database.

7. Children's Privacy

The Services are not directed to children under the age of 13 (or 16 in certain jurisdictions). Personal information from children is not knowingly collected. If it is discovered that personal data has been collected from a child without parental consent, steps will be taken to delete that information.

8. Legal Rights

Depending on the user's jurisdiction, rights include requesting access to personal data, requesting deletion or correction of personal data, objecting to or restricting data processing, or withdrawing consent at any time (e.g., by revoking Full Access in iOS Settings or disabling tracking permission).

9. Contact

For questions, support requests, or inquiries regarding this Privacy Policy, contact support at: supportkaikeyboard@gmail.com