Privacy Policy
A keyboard sees everything you type, so this policy is written to be read. The short version: what you type stays on your phone. Text leaves it only when you use an AI feature, only the text you chose, and only to have it rewritten or answered. There is no advertising, analytics or tracking inside the keyboard, and we have no account of yours to hold anything against.
- Who we are
- What the keyboard does with your typing
- AI features: what is sent, and where
- What is stored on your phone
- Typesmith AI subscription
- What our server keeps
- Passwords and sensitive fields
- Permissions
- Advertising
- This website
- Children
- Your rights and choices
- Changes
- Contact
1. Who we are
Typesmith is made by FocusDot (“we”). You can reach us at support@focusdot.dev. We are the data controller for whatever this policy says we process.
2. What the keyboard does with your typing
Typesmith is an input method: when it is your keyboard, every character you type passes through it. Android shows a warning about this when you enable any third-party keyboard, and it is right to. Here is what Typesmith actually does with that text:
- Suggestions and autocorrect are computed on your phone, from dictionaries bundled with the app or downloaded to it. Nothing is looked up online.
- Learning. The keyboard remembers words you type that it doesn't know, so it can suggest them next time, and typos you let it correct, so it corrects them faster. This is stored on your phone only (see section 4), and you can see and remove every learned word in Settings.
- Nothing is transmitted. Ordinary typing is never sent to us or to anyone. The keyboard has no analytics, no crash reporting and no advertising SDK; it does not know how much you type, in which apps, or what.
3. AI features: what is sent, and where
Typesmith's AI features — rewriting text in a chosen style, and “Ask AI” — need a large language model, which runs on a server, not on your phone. They send text off your device only when you use them, and they send only:
- the text you asked to have rewritten (the text you selected, or the field's text when nothing is selected), or the question you typed for Ask AI;
- the instruction for the mode you picked (for example, “make this more formal”), including any custom mode you wrote yourself;
- for custom modes, nothing else of yours.
The app says this, and asks you to continue, before the first time you use an AI feature. Where the text goes depends on which of the two ways you use the AI:
3a. With your own API key
If you enter an API key from an AI provider (currently OpenAI or DeepSeek), the app sends the text directly from your phone to that provider, over an encrypted connection, using your key. It does not pass through us, and we never see it. Your key is stored on your phone in the app's private storage and used for nothing else. The provider processes the text under its own terms and privacy policy, which you agreed to when you got the key:
- OpenAI — openai.com/policies/privacy-policy. OpenAI states that data sent through its API is not used to train its models.
- DeepSeek — platform.deepseek.com. DeepSeek is based in the People's Republic of China and stores data there; consider that before choosing it for anything you would not want stored there.
3b. With a Typesmith AI subscription
If you subscribe to Typesmith AI, the app sends the text to our server, which forwards it to an AI provider we have chosen (currently OpenAI, under its API terms, which exclude training on the data) and returns the reply. Our server:
- does not store the text or the reply — they are forwarded and forgotten;
- does not log them — our logs hold the request's path, status and time, and a hashed identifier of the subscription, never any text;
- counts the size of each request and reply (as tokens) against a daily fair-use allowance, and keeps each day's count for 30 days (see section 6).
We choose the model; the app does not send us which one you would prefer, and we don't tell you which one answered.
4. What is stored on your phone
All of the following lives in the app's private storage on your device, which other apps cannot read, and is deleted when you uninstall the app:
| What | Why | Your control |
|---|---|---|
| Learned words | Suggestions for words the dictionary lacks | Settings → view and remove any; incognito fields never learn |
| Learned corrections | Typos you let it correct, corrected faster next time | Settings → view and remove any |
| Clipboard history | Recent things you copied, to paste from the keyboard | Delete items from the clipboard panel; set how long they're kept in Settings; text a password manager marks sensitive is never kept |
| Touch calibration | Where your taps land, to make the keys hit right | Cleared with the app's storage (Android Settings → Apps → Typesmith → Clear storage) or by uninstalling |
| Settings, languages, custom AI modes | Your preferences | Change any time |
| Your AI provider key, if you entered one | To call the provider on your behalf | Remove in Settings |
Backups. You can export all of this to a file, to move it to another phone. The file is encrypted end-to-end with a passphrase you choose; without the passphrase it cannot be read, by us or anyone. Where you keep the file is up to you.
5. Typesmith AI subscription
Subscriptions are sold and billed by Google Play. We never see your payment details, your name or your email address. What Google gives us is a purchase token that identifies the subscription, and notifications when it renews, is cancelled, or is refunded. We keep a hash of the token (which cannot be turned back into it), whether the subscription is active, and until when.
There is no Typesmith account. The subscription is tied to your Google account by Google Play, which is why it follows you to a new phone without signing in to anything of ours.
6. What our server keeps
To be exact about the server behind Typesmith AI, it holds:
- for each subscription: a hash of its purchase token, its status, its expiry, and the product name — until the subscription has been inactive for 90 days;
- for each day: the number of tokens each subscription used — for 30 days;
- request logs with the path, status, timing and the first characters of the hashed identifier — for at most 30 days.
It keeps no text, no IP address beyond the logs above, and no device identifiers. The server runs on Cloudflare (Cloudflare, Inc., United States). Your request enters Cloudflare's network at a data centre near you and is processed by our server in one Cloudflare location, which may be outside your country. Cloudflare processes the requests on our behalf, under its own policy, and does not keep the text either.
7. Passwords and sensitive fields
In a password field the keyboard shows no suggestions, learns nothing and keeps nothing. In fields an app marks private (“incognito”), nothing is learned either. The AI features are not offered in password fields.
8. Permissions
The app asks Android for three things: Internet (for the AI features and nothing else), network state (to tell you when you're offline rather than fail silently), and vibration (key feedback). It does not ask for contacts, location, storage, microphone or camera.
9. Advertising
There are no advertisements in the keyboard, and there never will be: nothing that draws on your screen while you type should also be trying to sell you something. If we ever show ads, it will be in the Typesmith settings app only, from Google AdMob, with the consent choices that apply where you live, and this policy will say so before it happens.
10. This website
This website, focusdot.dev, is a static site with no cookies, no accounts and no analytics scripts. Our hosting provider (Cloudflare) sees the requests, as any host does, under its own policy.
11. Children
Typesmith is not directed at children under 13, and we do not knowingly collect anything from them. Since the app collects nothing from anyone, there is nothing to have collected; if you believe a child has subscribed to Typesmith AI, contact us and we will end the subscription.
12. Your rights and choices
- Everything on your phone you can see, change or delete yourself in Settings, or by uninstalling the app. How to delete your data spells it out.
- The subscription records on our server can be deleted on request; write to us with your Google Play order number so we can find the right one. Cancelling the subscription in Google Play stops any further use of them.
- If you are in the European Economic Area, the United Kingdom or another place with a data protection law, you have the rights that law gives you — access, correction, deletion, objection, portability and complaint to a supervisory authority — and you can exercise them by writing to us. Our lawful basis for the little we process is performing the contract you have with us (the subscription) and, for the counts and logs, our legitimate interest in keeping the service running and fairly shared.
13. Changes
If this policy changes in a way that matters — new data, a new recipient, a new purpose — the app will tell you before the change applies, and this page will show the date. Small clarifications just update the date.
14. Contact
FocusDot · support@focusdot.dev