Privacy policy

App: OnKey (AI keyboard), including the OnKey keyboard and the “OnKey Reply” share extension
Effective date: 24 October 2026
Last updated: 24 October 2026

This policy explains how we handle personal data. It is a plain-language description of how the app works, not legal advice.

The short version

• No account. OnKey never asks you to sign up, and it does not ask for your email address or a password.
• The keyboard does not record your keystrokes. Text leaves your device only when you tap an AI action (for example fix grammar, change the tone, translate or reply). Then the text for that action is sent through our server to an AI model provider, and the result comes back to you.
• Voice dictation runs on your device. Your audio is never sent anywhere. Only if you then tap an AI action on the transcript is that text sent, like any other text.
• Images leave your device only for screenshot replies. When you pick or share a screenshot to get reply suggestions, a reduced-size copy is sent to an AI model provider.
• OnKey shows no ads and does not use your advertising identifier.
• Usage analytics and crash reports are sent while you use the app, to help us fix problems and improve features. They never include the text you write or the images you send.
• Subscriptions are handled by Apple, with RevenueCat checking your subscription status. We never see your card details.
• Your settings, saved commands, optional history and activity log stay on your device.

1. Who we are

OnKey is published by:

HOPIN.IT SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ (HopIn.IT sp. z o.o.) ul. Marsz. Józefa Piłsudskiego 74/320, 50-529 Wrocław, Poland KRS 0001117479, NIP 8971940626, REGON 529197668

(“HopIn.IT”, “we”, “us”). We are the controller of the personal data described in this policy. You can reach us about privacy at support+privacy@hopin.it. Based on our current assessment, the law does not require us to appoint a Data Protection Officer. We will reassess this if our processing changes.

UK representative. We have not appointed a representative in the UK under Article 27 UK GDPR. If you are in the UK, contact us directly at support+privacy@hopin.it.

2. What stays on your device

These things run on your iPhone or iPad and are not sent to us:

• Typing. The keys you press, autocorrection and the keyboard’s suggestions are handled on your device. The keyboard keeps what you type in its memory only while it is open, so that an AI action can use the full text of the field. It does not save it or send it anywhere unless you tap an AI action (section 3.1).
• Voice dictation. Speech is turned into text by Apple’s speech recognition on your device. The app requires on-device recognition, so your audio is never sent to Apple, to us or to anyone else, and no recording is saved.
• Checking whether the clipboard has text. While the keyboard shows its main screen, it checks about once a second whether the clipboard holds text, so it can show its paste button. This check does not read the clipboard’s contents. The contents are read only when you tap a paste button.
• Your settings and saved content, such as your keyboard and language choices, tone and length preferences, saved custom commands, the optional profile for the email writer, your count of uses without a subscription and offer status. They are stored in the app’s storage on your device, in an area shared between the app, the keyboard and the share extension, and are included in your device backups.
• History (off by default). If you turn on history in the app’s Library, the results of your AI actions are saved on your device so you can find them again (section 3.5).
• The activity log on the app’s Privacy screen. It records the type of each AI action, the number of characters sent and the AI model used, never your text, and entries expire after 24 hours (section 3.5).

3. What we collect and why

You do not have to give us any personal data to type with OnKey. AI features cannot work without sending the content you choose to process. Usage analytics and crash reports are not needed for the app to work.

3.1 The OnKey keyboard

To use AI actions in the keyboard, iOS asks you to turn on “Allow Full Access”. OnKey needs it to reach the internet and to share settings with the app. iOS shows the same general warning for every keyboard with Full Access; this section describes what OnKey actually does.

What is sent, and when. Only when you tap an AI action, the keyboard sends:

• the text the action works on: the text you selected or, if nothing is selected, the text before the cursor in the field you are typing in (iOS may shorten this for long texts), or the text you pasted with the keyboard’s paste button;
• the instructions for that action, such as the tone, the target language, the length, or the wording of a custom command you saved;
• technical details needed to answer, such as the AI model chosen for the action.

This goes through our server to an AI model provider (sections 4 and 5), and the result is shown to you to insert or discard.

What is not sent. The keyboard does not send what you type unless you tap an AI action. iOS does not let third-party keyboards be used in password fields. The keyboard does not record usage events itself and never includes your text in analytics. It keeps a few markers on your device (for example the date of your first AI action, when Full Access was turned on and which days you used the keyboard), plus a short queue of events such as “AI request sent” with the action type and model, or whether you inserted or discarded a result. These contain no text. The next time you open the OnKey app, it sends them to our analytics (section 3.6).

Legal basis: performance of our contract with you (providing the feature you ask for), Art. 6(1)(b) GDPR.

3.2 AI tools in the app

The app has AI tools to rewrite or translate text, write and reply to emails, write replies, summarize text, and run your own custom commands. When you tap the button that starts a tool, the app sends the text you entered or pasted and the instructions for that tool (for example tone, length and language) through our server to an AI model provider.

• Email writer profile. If you fill in the optional profile (name, gender, company and role, school and degree, field of study, interests), these details are added to the instructions of every email you write with the email writer, so the AI can write in your name and style. Leave the fields empty if you do not want them sent. You can clear them in the profile screen at any time.
• Summaries of web addresses. If you enter a web address to summarize, the address is sent to the AI model provider as text. The app itself does not download the page.
• Paste buttons. The app reads the clipboard only when you tap one of its paste buttons.
• Voice to text. A transcript you dictated (section 2) is sent only if you tap an action such as polish or summarize.

Legal basis: contract, Art. 6(1)(b) GDPR.

3.3 Screenshot replies and “OnKey Reply”

You can get reply suggestions for a conversation from a screenshot, either by choosing an image in the app (iOS’s photo picker gives the app only the image you pick, not your library) or by sharing a screenshot to OnKey Reply from another app. A reduced-size copy of the image and your reply preferences (such as language) are sent through our server to an AI model provider that can read images. When you share an image to OnKey Reply, it is sent as soon as you share it. The image is re-encoded on your device before it is sent, so the original photo metadata, such as location, is not included.

Screenshots of conversations often show other people’s names and messages. Please only send screenshots you are comfortable sharing with the AI provider for this purpose.

Legal basis: contract, Art. 6(1)(b) GDPR.

3.4 Microphone and speech recognition

OnKey asks for access to the microphone and speech recognition only when you first use dictation in the app. The microphone is used only while you dictate. Recognition runs on your device (section 2). The keyboard itself does not use the microphone.

3.5 History and activity log on your device

• History is off until you turn it on in the app’s Library. While it is on, the text of AI results (not your original text) is saved on your device, up to the 50 most recent items. Items older than 30 days are removed when the history is next opened or updated. You can clear it at any time in Library or on the Privacy screen, and turning history off stops new items being saved.
• Activity log. Each AI request adds a line with the action type, the number of characters and the AI model, never the text itself. Up to 50 lines are kept; each expires after 24 hours and is removed the next time the log is read. You can clear it at any time on the Privacy screen.

3.6 Usage analytics

We use Amplitude and Google Analytics for Firebase to understand how the app is used, so we can fix problems and improve features. Analytics run in the main app, not in the keyboard or the share extension (their events are queued on your device and sent by the app, as described in section 3.1).

Amplitude receives:

• events such as app opens and sessions, screens and features used, AI actions succeeding or failing, settings changed, paywall views, purchases (including product, price and currency) and offers, together with details such as the action type, the AI model, language codes, counts, durations and error categories;
• user properties such as app version, interface language, the AI model setting, keyboard key style, how many times you opened the app, whether onboarding is finished, whether the keyboard is enabled, whether Full Access is on, and your subscription status and plan;
• your device’s identifier for vendor (IDFV), an identifier Apple gives to all apps from the same developer on your device, which Amplitude uses as your device ID; device model, OS version, language, mobile carrier, and approximate location (city, region, country) that Amplitude derives from your IP address.

Google Analytics for Firebase receives automatically collected events, such as first opens, sessions, app updates and in-app purchases, together with a Firebase app instance identifier, device model, OS version, language and approximate location derived from your IP address.

We design our events never to include the text you write or send to the AI, your clipboard, your profile details or your images.

Your choice. The app does not currently have a switch to turn analytics off. You can object at any time by emailing support+privacy@hopin.it (section 8).

Legal basis: our legitimate interest in maintaining and improving the app (Art. 6(1)(f) GDPR).

3.7 Crash and error reports

We use Sentry and Firebase Crashlytics to receive crash reports and error reports from the main app: device model, OS and app version, technical error details, and a random installation identifier for each service, so we can tell how many devices a problem affects. Sentry also receives performance measurements for about half of app sessions (timings of screens and of network requests, including the address of our server, but not the content of requests) and may include your IDFV in its device details. Crash reports do not include the text you write.

Legal basis: legitimate interest in keeping the app working, Art. 6(1)(f) GDPR.

3.8 Subscriptions and purchases

Purchases are processed by Apple. We use RevenueCat to check whether your subscription is active, to show subscription offers and to manage discounted offers. RevenueCat receives a random app user ID, your purchase and subscription history from Apple, device and app information, your IP address and, so we can match purchases with app usage, the Amplitude device ID (your IDFV). We never receive your payment card details.

Legal basis: contract, Art. 6(1)(b) GDPR, for subscription status; our legal obligations to keep accounting and tax records (Art. 6(1)(c)), which is why purchase records are kept for years (section 7); and our legitimate interest in understanding which features lead to subscriptions (Art. 6(1)(f)).

3.9 Support emails

If you contact us from the app’s support button or by email (support@hopin.it or support+privacy@hopin.it), we receive your email address and whatever you write, and use them to reply. The app opens your own email app with our address filled in; it does not attach anything.

Legal basis: legitimate interest in answering you and improving the app, Art. 6(1)(f) GDPR.

3.10 Notifications

OnKey asks for permission to send notifications only if you choose to be reminded about an offer. The reminders are scheduled on your device. The app does not register for push notifications and sends no notification token to any server. You can turn notifications off at any time in iOS Settings.

3.11 Ratings

The app may ask whether you are enjoying OnKey and invite you to rate it on the App Store. Your App Store review is handled by Apple.

3.12 Data we receive from others

From Apple, through RevenueCat, we learn your subscription status and purchase history. We do not receive your name or contact details from them.

4. Content you send to AI

Much of what people write is personal: messages, emails, work documents, screenshots of conversations. Please keep in mind:

• Anything you send to an AI action leaves your device and is handled by the providers in section 5.
• If you do not want a text to leave your device, do not run an AI action on it. Typing and dictation alone never send your text.
• Sensitive content. We never ask for information about your health or other sensitive matters, and the app cannot tell it apart from other text. If content you choose to send contains it, it is processed only to return the result you asked for and is never used for analytics or advertising.
• We do not use your content to build advertising profiles, and we do not sell it.
• We do not use your text or images to train AI models.
• Our server forwards your request to the AI provider and returns the answer. It does not store the content of requests. Cloudflare, which runs our server, keeps technical logs about requests for up to 7 days (section 7). AI providers process the request to return the result; depending on the provider, a request may be kept for a limited period, for example to detect abuse.
• AI output can be wrong. Rewrites, translations, summaries and replies are generated by AI models and can contain mistakes. Check important content before you send or rely on it.

5. Who we share data with

We use these service providers (“processors”) to run the app. They may only use the data to provide their service to us, except where noted.

• Cloudflare, Inc.: runs our server, which forwards AI requests. Data: request content in transit, IP address. Location: global network. https://www.cloudflare.com/privacypolicy/ and https://www.cloudflare.com/cloudflare-customer-dpa/
• AI routing and AI model providers that we select. Our server passes each request to an AI routing service, which sends it to an AI model provider that can serve the model chosen for the action. Data: the text, instructions and images of the request. Location: the United States and possibly other countries outside the EEA. The providers can change over time; email support+privacy@hopin.it for the current list.
• Amplitude, Inc.: usage analytics. Location: United States. https://amplitude.com/privacy
• Google (Google LLC / Google Ireland Ltd): Google Analytics for Firebase and Firebase Crashlytics. Usage analytics and crash reports. Location: United States and other Google locations. https://firebase.google.com/support/privacy
• Functional Software, Inc. (Sentry): crash reports, error reports and performance data. Location: United States. https://sentry.io/privacy/
• RevenueCat, Inc.: subscription status and offers. Location: United States. https://www.revenuecat.com/privacy and https://www.revenuecat.com/dpa
• Zoho Corporation (Zoho Mail): support email, hosted in Zoho’s EU data centre (zoho.eu). Data: your email address, message and attachments you send. https://www.zoho.com/privacy.html

Apple Inc. acts as an independent controller for App Store purchases and on-device frameworks, under its own policy: https://www.apple.com/legal/privacy/

Each of these providers is bound by a contract or by its published terms to protect your data and to use it only for the purposes listed here.

We may also disclose data if required by law, to protect our rights, or as part of a merger or sale of the business, in which case this policy will continue to apply.

6. International transfers

Several providers above process data in the United States or other countries outside the European Economic Area and the UK. Where the provider is certified under the EU-U.S. Data Privacy Framework and its UK extension, we rely on that certification (Art. 45 GDPR). Otherwise we rely on Standard Contractual Clauses (Commission Decision 2021/914, Art. 46(2)(c) GDPR) and the UK International Data Transfer Addendum, in the provider’s data processing terms. We rely on Standard Contractual Clauses for our AI routing service, RevenueCat and Cloudflare.

You can get a copy of the safeguards by emailing support+privacy@hopin.it, using the contact details in section 14.

7. How long we keep data

• On your device: settings, saved commands and your profile stay until you change or delete them, or delete the app. History (if on) keeps up to 50 items, and items older than 30 days are removed when the history is next opened or updated. The activity log keeps up to 50 lines, each expiring after 24 hours. Events waiting to be sent to analytics are kept until you next open the app (at most 200).
• AI requests: our server does not store their content. Cloudflare keeps technical logs of our server for up to 7 days. AI providers may keep requests for a limited period under their own terms, for example to detect abuse.
• Analytics (Amplitude, Google Analytics for Firebase): only as long as needed to understand how the app is used, then deleted.
• Crash reports: Sentry up to 30 days; Firebase Crashlytics up to 90 days.
• Subscription records (RevenueCat): for as long as we hold an account with RevenueCat and up to six years afterwards, because accounting and tax law requires us to keep purchase records.
• Support emails: as long as needed to handle your request and any follow-up, then deleted. Support emails are stored in Zoho Mail until we delete them.

7a. Deleting your data

OnKey has no account, so there is no account for us to close. To delete your data:

• On your device, in the app: clear your history (Library, or the Privacy screen in Settings) and the activity log (Privacy screen). To remove your email writer profile, clear its fields and save.
• Delete the app. Deleting OnKey removes the data it stores on your device, including the keyboard’s and the share extension’s data. Older backups of your device may still contain it until those backups are deleted.
• Copies held by providers (analytics, crash reports, purchase records): email support+privacy@hopin.it and ask us to delete them. OnKey does not show an identifier in the app, so we may ask for details that help us find your records, such as the approximate dates you used the app and your device model. We will tell you if we cannot identify records that belong to you.
• Subscriptions: deleting your data or the app does not cancel a subscription. Subscriptions are managed by Apple: cancel in iOS Settings, [your name], Subscriptions.

8. Your rights under GDPR and UK GDPR

If you are in the EEA, the UK or Switzerland, you have the right to:

• access the personal data we hold about you and get a copy;
• correct inaccurate data;
• have your data deleted;
• restrict or object to our processing, including processing based on legitimate interests;
• receive your data in a portable format;
• withdraw consent at any time, where we rely on it, without affecting earlier processing;
• not be subject to decisions based solely on automated processing that significantly affect you (we do not make such decisions).

Your right to object. Where we rely on legitimate interests (analytics, crash reports), you can object at any time by emailing support+privacy@hopin.it. We will stop unless we have compelling legitimate grounds.

To use these rights, email support+privacy@hopin.it. We will answer within one month, which may be extended where the law allows. If we cannot identify you in our records, we will tell you (Art. 11 GDPR).

You are not required to give us any personal data. AI features need the content you send them, so if you do not send it, that feature does not run.

You also have the right to complain to a data protection authority. Our lead authority is the Polish Prezes Urzędu Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warszawa, Poland, https://uodo.gov.pl. You can also complain to the authority where you live or work. In the UK, this is the Information Commissioner’s Office (https://ico.org.uk).

9. US privacy rights (California and other states)

In the last 12 months we have collected these categories of personal information: identifiers (identifier for vendor, Firebase app instance identifier, crash-reporting installation identifiers, random app user ID, IP address); commercial information (subscription and purchase history); internet or other electronic network activity (in-app usage); geolocation (approximate, derived from IP address); professional or education information and gender (only if you add them to the email writer profile, and then only sent with your email requests); and user content (text and images you choose to send to AI features, and emails you send us). Sources and purposes are described in section 3, and recipients in section 5.

We may also process sensitive personal information: the contents of messages and emails, and any other sensitive details that appear in text or screenshots you choose to send to AI features. We use it only to provide the AI result you request. Our server does not store it; the provider logs described in section 7 may briefly contain it.

We do not sell your personal information. OnKey contains no advertising SDKs and does not use your advertising identifier.

Washington and other consumer health data laws. OnKey is not a health app and does not ask for health data. Health information in content you choose to send to AI features is handled only as described above, and never used for analytics or advertising.

You have the right to know what we collect, to access it, to correct it, to delete it, and to limit use of sensitive personal information. You can use these rights, or have an authorized agent use them for you, by emailing support+privacy@hopin.it. We may need to verify your request. We will not discriminate against you for using any of these rights. Residents of other US states with similar laws have comparable rights and can contact us the same way.

Appeals. If we decline your request, you can appeal by replying to our answer with the subject “Appeal”. We will answer within 60 days. If you are not satisfied, you can contact your state attorney general.

Do Not Track. Our apps do not respond to web browser Do Not Track signals, because they are apps, not websites.

10. Subscriptions via Apple

All payments are processed by Apple under Apple’s terms and privacy policy. We receive confirmation of your purchase and subscription status (through Apple and RevenueCat), never your payment details. You can manage or cancel subscriptions in your App Store account settings.

11. Children

OnKey is not directed at children under 13, and the app does not ask your age. We do not knowingly collect personal data from children under 13. If you are under 16 in the EEA (or under the age your country sets), please use the AI features only with a parent’s permission. If you believe a child has sent us personal data, contact us and we will delete what we can.

12. Security

Data sent between the app and our server is encrypted in transit (HTTPS), and connections to our AI server use certificate pinning. Your saved settings, profile and history stay on your device. Only authorized team members can access analytics, crash and support tools. No system is perfectly secure, so please do not send highly sensitive content to AI features unless you need to.

13. Changes to this policy

We may update this policy when the app or the law changes. We will change the “Last updated” date and, for significant changes, tell you in the app or in the App Store release notes before they take effect.

14. Contact

HopIn.IT sp. z o.o. ul. Marsz. Józefa Piłsudskiego 74/320, 50-529 Wrocław, Poland Email: support+privacy@hopin.it