Privacy Policy

Effective date: February 13, 2026

Keybridge is a translation keyboard extension for iOS. Your privacy matters to us. This page explains what data we collect, how we use it, and what rights you have.

1. Data We Collect

Anonymous Device Identifier

The first time you use the keyboard, a random ID is created and saved on your device. It has nothing to do with your real identity — it’s only used to count how many translations you’ve done today.

Translation Text

When you tap Translate, the text you’re working on is sent to our servers, translated instantly, and immediately deleted. We don’t keep it.

Language Preferences

Your chosen languages are saved on your device only. They never leave your phone.

Daily Usage Count

We keep track of how many translations you do each day for the free plan limit. The counter resets every night. We only store the number, not the text.

2. What We Don’t Collect

• Your keystrokes are never recorded. Text is only sent when you tap Translate.
• No name, email, phone number, or personal info.
• No analytics, ads, or third-party trackers.
• No access to your location, contacts, or photos.
• We never sell or share your data.

3. Sensitive Data Protection

Keybridge automatically blocks translation when it detects:

• Credit card numbers
• National ID / social security numbers
• Password patterns

When detected, the text stays on your device and is never sent anywhere.

4. Full Access Permission

iOS requires “Full Access” for any keyboard that needs internet. We only use it to reach our translation servers. Despite the scary name, this permission does not let us see what you type — we can only read text when you tap Translate.

5. Translation Providers

When you tap Translate, your text is securely transmitted to one of the following third-party AI providers solely to perform the requested translation:

• Google Gemini 2.0 Flash (primary) — processes in real time. Subject to Google’s API Terms of Service.
• OpenAI GPT-4o-mini (first fallback) — may retain text up to 30 days for abuse monitoring, then deletes it. Does not use API inputs for model training. See OpenAI’s data policy.
• Google Cloud Translation (second fallback) — processes in real time, no storage.
• MyMemory (third fallback) — processes in real time, no storage.

We only send the text you choose to translate and the target language — no personal information, device data, or identifiers are shared with these providers.

Voice Translate: Voice audio is processed entirely on your device using Apple’s built-in speech recognition. Only the resulting text is sent for translation, following the same policies as written text above. We never receive, store, or transmit your voice recordings.

6. Legal Basis (GDPR)

For users in the European Economic Area:

• Performance of a contract (Art. 6(1)(b)): Processing your text is necessary to provide the translation service.
• Legitimate interest (Art. 6(1)(f)): Usage counting is necessary for service operation. Only anonymous data (UUID + count) is used.

7. Data Storage & Retention

• Server location: Railway cloud (United States)
• Translation text: Not stored. Processed in memory, discarded immediately.
• Daily counter: Resets every 24 hours (midnight UTC).
• Subscription records: Kept up to 90 days for purchase verification, then auto-deleted.
• Server logs: May contain request metadata (timestamp, status code). Rotated regularly. Never contain translation text.

8. Your Rights

All Users

• Delete your data: Contact us to request deletion of all data associated with your anonymous ID.
• Stop using: Remove the keyboard anytime via Settings → General → Keyboard → Keyboards.

European Economic Area (GDPR)

You have the right to access, rectify, erase, restrict, port your data, and lodge a complaint with your local data protection authority.

Turkey (KVKK)

Under Law No. 6698, you may learn whether your data is processed, request information about its purpose, request deletion, and object to processing. Our legal basis: legitimate interest (Art. 5(2)(f)) and contractual necessity (Art. 5(2)(c)).

California (CCPA / CPRA)

• Right to Know: We collect only an anonymous UUID and daily count.
• Right to Delete: Contact us to request deletion.
• No Sale of Data: We do not sell or share your personal information.

9. Children’s Privacy

Keybridge doesn’t require an account and collects no personal information, so there is no age-gated data to worry about.

10. Changes

If we change anything, we’ll update this page and the date at the top.