Privacy Policy

Effective 6 November 2026 · Applies to the Typesmith keyboard for Android (com.focusdot.typesmith) and this website.

A keyboard sees everything you type, so this policy is written to be read. The short version: what you type stays on your phone. Text leaves it only when you use an AI feature, only the text you chose, and only to have it rewritten or answered. Nothing else is copied off the phone except into backups that are yours: the one Android makes of your phone to your own Google account, and any backup file you choose to save (section 4). There is no advertising, analytics or tracking inside the keyboard. The Typesmith settings app can show an ad, but only one you ask for, to earn Typesmith AI credits (section 9); the keyboard itself never shows one. We have no account of yours to hold anything against: Typesmith AI works through an anonymous account for your install, not a sign-in (section 5).

1. Who we are
2. What the keyboard does with your typing
3. AI features: what is sent, and where
4. What is stored on your phone, and backups
5. Typesmith AI: your install's account, credits and subscriptions
6. What our server keeps
7. Passwords and sensitive fields
8. Permissions
9. Advertising
10. This website
11. Emails you send us
12. Children
13. Your rights and choices
14. Changes
15. Contact

1. Who we are

Typesmith is made by FocusDot (“we”). You can reach us at support@focusdot.dev. We are the data controller for whatever this policy says we process.

2. What the keyboard does with your typing

Typesmith is an input method: when it is your keyboard, every character you type passes through it. Android shows a warning about this when you enable any third-party keyboard, and it is right to. Here is what Typesmith actually does with that text:

• Suggestions and autocorrect are computed on your phone, from dictionaries bundled with the app or downloaded to it. Nothing is looked up online.
• Learning. The keyboard remembers words you type that it doesn't know, so it can suggest them next time, and typos you let it correct, so it corrects them faster. This is stored on your phone, and copied nowhere but into a backup of your own (see section 4). You can see and remove every learned word in Settings.
• Nothing is transmitted as you type. Ordinary typing is never sent to us or to anyone. The keyboard has no analytics and no crash reporting, and it shows no ads; it does not know how much you type, in which apps, or what. Google's ads software, which the app includes for the ad you may choose to watch in Settings (section 9), is given nothing of what you type.

3. AI features: what is sent, and where

Typesmith's AI features — rewriting text in a chosen style, and “Ask AI” — need a large language model, which runs on a server, not on your phone. They send text off your device only when you use them, and they send only:

• the text you asked to have rewritten (the text you selected, or the field's text when nothing is selected), or the question you typed for Ask AI;
• the instruction for the mode you picked (for example, “make this more formal”), including any custom mode you wrote yourself;
• for custom modes, nothing else of yours.

The app says this, and asks you to continue, before the first time you use an AI feature. Where the text goes depends on which of the two ways you use the AI:

3a. With your own API key

If you enter an API key from an AI provider (currently OpenAI or DeepSeek), the app sends the text directly from your phone to that provider, over an encrypted connection, using your key. It does not pass through us, and we never see it. Your key is stored on your phone in the app's private storage, used for nothing else, and put in a backup only if you ask for that (section 4). The provider processes the text under its own terms and privacy policy, which you agreed to when you got the key:

• OpenAI — openai.com/policies/privacy-policy. OpenAI states that data sent through its API is not used to train its models.
• DeepSeek — platform.deepseek.com. DeepSeek is based in the People's Republic of China and stores data there; consider that before choosing it for anything you would not want stored there.

3b. With Typesmith AI

If you use Typesmith AI — on credits or on a subscription — the app sends the text to our server, which forwards it to an AI provider we have chosen (currently OpenAI, under its API terms, which exclude training on the data) and returns the reply. Our server:

• does not store the text or the reply — they are forwarded and forgotten;
• does not log them — our logs hold the request's path, status and time, and the first characters of your install's identifier, never any text;
• takes one credit for a rewrite and two for an Ask AI reply, or on a subscription counts the size of each request and reply (as tokens) against a daily fair-use allowance, and keeps each day's count for 30 days (see section 6).

We choose the model; the app does not send us which one you would prefer, and we don't tell you which one answered.

4. What is stored on your phone, and backups

All of the following lives in the app's private storage on your device, which other apps cannot read, and is deleted from the phone when you uninstall the app:

Two kinds of backup can hold a copy of some of it. Both are yours, and neither comes to us.

Android's backup of your phone

If Backup is on in your phone's settings, Android copies your apps' data to your own Google account, and brings it back when you set up a new phone or install an app again. Typesmith takes part, and decides what of its own goes in:

• Always: your settings and languages, the AI models you chose, your custom AI modes with the instructions you wrote for them, and your recently used emoji.
• Only when the backup is end-to-end encrypted with your screen lock, which Google cannot read, or when you copy your phone straight to a new one: your learned words and corrections. A switch under Settings → Backup & restore leaves them out.
• Only if you switch it on in the same place, and then only in those same two cases: your AI provider key. It is off until you do.
• Never: your clipboard history.

This backup goes from your phone to Google, under Google's privacy policy. It does not pass through us, and we cannot see it or delete it. It can outlast the app: uninstalling Typesmith removes what is on the phone, not the copy in your Google account, and Android restores that copy if you install Typesmith again. You can turn Backup off in your phone's settings, and see or delete your backups in your Google account; Google's help page has the steps.

Backup files

You can also save a backup file yourself, under Settings → Backup & restore, and restore it on any phone. Your settings and modes always go in; you choose whether your learned words and corrections, your AI provider key and your pinned clipboard items do. Give the file a passphrase and its contents are encrypted with it: without the passphrase they cannot be read, by us or anyone, and we cannot recover a passphrase you forget. A passphrase is required when the file holds an AI provider key and optional otherwise; a file saved without one can be read by anyone who has it. Either way, the file states in the open when it was made and how many items of each kind it holds. Where you keep the file is up to you; it is never sent to us.

5. Typesmith AI: your install's account, credits and subscriptions

The account. The first time you use Typesmith AI, the app opens an account for this install of the app on our server. There is nothing to sign up for: the account is a random identifier our server makes up, with a secret the app keeps on your phone (never in a backup). It is not tied to your name, your email, your Google account or any identifier of your device, and it is not shared with anyone. To open it, the app asks Google's Play Integrity service to confirm that it is the genuine Typesmith from Google Play, running on a device that passes Android's integrity checks; Google answers with a signed verdict, which our server checks once and does not keep. This stops automated abuse of the free credits. If you reinstall the app, the old account is left behind with whatever credits it had, and a new one is opened.

Credits. A new account starts with a small number of credits. A rewrite uses one and an Ask AI reply two. Watching a rewarded ad in the Typesmith app adds more (section 9), up to a daily number of ads and a ceiling on the balance; the app shows all three numbers. Credits keep for a limited time: those from an ad for seven days, the starting ones for thirty. The app shows which credits expire next and when, and a rewrite always uses the ones that expire soonest. Credits have no money value and cannot be transferred.

Subscriptions are sold and billed by Google Play. We never see your payment details, your name or your email address. What Google gives us is a purchase token that identifies the subscription, and notifications when it renews, is cancelled, or is refunded. We keep a hash of the token (which cannot be turned back into it), whether the subscription is active, and until when.

A subscription is attached to the install's account, and while it stands, rewrites draw on its daily allowance instead of credits. It is tied to your Google account by Google Play, which is why it follows you to a new phone without signing in to anything of ours.

6. What our server keeps

To be exact about the server behind Typesmith AI, it holds:

• for each install's account: its random identifier, a hash of its secret, its credits (each grant with the day it expires), how many ads it watched today, the subscription attached to it if any, and when it was last used — until it has gone unused for a year;
• a ledger of each change to a balance — the amount, and the identifier of the rewrite or of the ad that caused it (a number AdMob assigns to the ad view, nothing about you) — for 90 days;
• for each subscription: a hash of its purchase token, its status, its expiry, and the product name — until the subscription has been inactive for 90 days;
• for each day: the number of tokens each subscription used — for 30 days;
• request logs with the path, status, timing and the first characters of the install identifier — for at most 30 days.

It keeps no text, no IP address beyond the logs above, and no device identifiers. The records live in a database at Cloudflare (D1), in one Cloudflare location. The server runs on Cloudflare (Cloudflare, Inc., United States). Your request enters Cloudflare's network at a data centre near you and is processed by our server in one Cloudflare location, which may be outside your country. Cloudflare processes the requests on our behalf, under its own policy, and does not keep the text either.

7. Passwords and sensitive fields

In a password field the keyboard shows no suggestions, learns nothing and keeps nothing. In fields an app marks private (“incognito”), nothing is learned either. The AI features are not offered in password fields.

8. Permissions

The app itself asks Android for three things: Internet (for the AI features and, if you choose to watch one, the ad), network state (to tell you when you're offline rather than fail silently), and vibration (key feedback).

Google's ads software, which the app includes for that ad (section 9), declares its own: the advertising ID, Android's ad services for the ad ID, attribution and topics, and two that let it finish its work in the background (wake lock and foreground service). It uses them only once you tap Watch an ad.

None of these makes Android show you a permission prompt, and the app does not ask for contacts, location, storage, microphone or camera.

9. Advertising

There are no advertisements in the keyboard, and there never will be: nothing that draws on your screen while you type should also be trying to sell you something.

Ads exist in one place: the Typesmith settings app, when you choose to watch one to earn Typesmith AI credits (Settings → AI → Watch an ad). They come from Google AdMob (Google LLC). Google's ads software is started the first time you tap that button, not when the app opens; if you never tap it, it never runs. When it runs, Google receives what its software collects to serve and measure ads: your device's advertising ID, your IP address, information about your device and the app, and, where the law asks for it, your consent choices. Google uses this under its privacy policy and its advertising terms. You can reset or delete your advertising ID, and opt out of personalised ads, in Android's settings (Settings → Google → Ads).

If you are in the European Economic Area, the United Kingdom or Switzerland, the app shows Google's consent form before the first ad, and Ad privacy options in Settings → AI lets you change your choice later. When an ad has been watched to the end, AdMob tells our server so, with the install identifier the app gave it, so that the credits can be added; that message carries nothing else about you. We use nothing from the ads for any other purpose, and we never give advertisers anything of yours.

10. This website

This website, focusdot.dev, is a static site with no cookies and no accounts. Our hosting provider, Cloudflare, serves it and counts its visits with Cloudflare Web Analytics: a small script on each page reports the page viewed, where the visit came from, the browser, device type and country, and how quickly the page loaded. It sets no cookie, keeps nothing in your browser and does not follow you to other sites; we see totals, not people. Cloudflare sees the requests, as any host does, under its own policy.

The guide page embeds our how-to video from YouTube in its privacy-enhanced mode: the player is fetched from Google (youtube-nocookie.com) when you scroll to it, so Google sees that request under its own policy, and YouTube keeps nothing in your browser unless you play the video.

11. Emails you send us

If you write to support@focusdot.dev, we get what any email carries: your address, the name your email app sends with it, and what you wrote. Cloudflare's Email Routing forwards mail for that address to the mailbox we answer from.

Send feedback, in the app's Settings, opens your own email app with a message to that address already started. The app sends nothing itself: the message goes only if you send it, and you can change or delete any of it first. Below the space for your words it adds a few lines that help us match a report to a build and a phone:

• the app's version;
• Android's version and API level;
• the phone's maker and model;
• the phone's languages, and the keyboard languages you added.

Nothing you typed with the keyboard is in them, and no API key, learned word, correction or clipboard item.

We use your emails only to answer you and to fix what you report. We keep them no longer than 12 months after the last message in the conversation; ask and we delete them sooner.

12. Children

Typesmith is not directed at children under 13, and we do not knowingly collect anything from them. The app collects nothing from anyone beyond the anonymous account in section 5; if you believe a child has subscribed to Typesmith AI, contact us and we will end the subscription. Ads are requested from Google as not directed at children.

13. Your rights and choices

• Everything on your phone you can change or delete yourself in Settings, or by uninstalling the app. A copy in a backup is deleted where it is kept: in your Google account, or wherever you saved the file. How to delete your data spells it out.
• Your install's account on our server goes on its own a year after its last use, and uninstalling the app abandons it. To have it deleted sooner, write to us with the install ID shown in Settings → AI under the plan; it is the only thing we can find the account by.
• The subscription records on our server can be deleted on request; write to us with your Google Play order number so we can find the right one. Cancelling the subscription in Google Play stops any further use of them.
• Ads: your advertising ID and personalised ads are under your control in Android's settings; where a consent form applies, Ad privacy options in the app reopens it.
• If you are in the European Economic Area, the United Kingdom or another place with a data protection law, you have the rights that law gives you — access, correction, deletion, objection, portability and complaint to a supervisory authority — and you can exercise them by writing to us. Our lawful basis for the little we process is performing the contract you have with us (the plan you use, on credits or a subscription); for the counts, the ledger and the logs, our legitimate interest in keeping the service running and fairly shared; for the ads, your consent where the law requires it and otherwise our legitimate interest in funding the free AI; and for emails you send us, our legitimate interest in answering them.

14. Changes

If this policy changes in a way that matters — new data, a new recipient, a new purpose — the app will tell you before the change applies, and this page will show the date. Small clarifications just update the date.

15. Contact

FocusDot · support@focusdot.dev