Draft for pre-release review

Privacy, action by action.

Effective: 2026-08-30

This page describes the current pre-release data-flow contract. It must be reviewed against the shipped build and provider configuration before App Store publication.

Ordinary typing

Phraselet does not transmit or store ordinary keystrokes. The local keyboard remains usable when Full Access is off. The extension does not access contacts, location, photos, microphone, or pasteboard.

Explicit AI transformations

When you choose an AI action, the keyboard captures selected text or a bounded current sentence, shows that text in a preview, and waits for Send. Full Access alone is not consent to send text. Requests go to https://api.phraselet.app, which forwards them to the configured AI processor.

Text storage

Raw transformation input and output are kept in memory only for the request and are not written to Phraselet application logs, databases, Redis, analytics, crash reports, or backups. The app has no transformation-history feature. Provider processing is enabled only after the project-level data-control setting is verified and recorded.

Account and operational data

The service may retain opaque app-generated installation and account identifiers, entitlement and quota state, purchase records, and operational request metadata such as action, model, text length, status, and latency. Security infrastructure may process IP addresses for short-lived abuse prevention. It does not attach raw transformation text to those records and does not use this data for tracking.

Payments and processors

Apple processes App Store purchases. Where separately offered, the declared payment provider processes its transaction details. The configured AI provider processes only text explicitly sent for a transformation. Their legally required transaction or security records are governed by their own terms.

Your controls

See Privacy choices for access and deletion instructions. Questions can be sent to tuhage@gmail.com.