Privacy Policy

Last updated: 2026-07-25

The short version: your typing stays on your device. Text is sent only at the moment you tap an AI button — and only the text you selected or the last sentence. KlaroKey keeps no copy of it: no history, no accounts, no tracking.
要約：入力内容は端末内に留まります。AIボタンをタップした時だけ、選択したテキストまたは直前の一文が送信されます。KlaroKeyが内容を保存することはありません — 履歴なし、アカウント不要、トラッキングなし。

KlaroKey is an iOS keyboard with optional AI writing actions (Fix, Translate, Tone). This policy describes exactly what the app does with your data.

What the keyboard does with your typing

• Typing and spelling suggestions run entirely on your device. Keystrokes are never logged or transmitted.
• Your settings (target language, tone, protected terms, monthly usage counts) are stored in the app's private container on your device. The text you type is never stored anywhere by KlaroKey.
• The keyboard contains no analytics, no advertising SDKs, and no trackers of any kind.

The AI buttons (Fix / Translate / Tone)

• Only when you explicitly tap an AI button, the selected text or the last sentence before the cursor (at most 2,000 characters), together with your settings for that request (operation, target language, tone, protected terms), is sent over an encrypted HTTPS connection, and the result comes back as a preview. Your document changes only if you tap Apply.
• Depending on how the app is set up, the request goes to one of two places:
  • KlaroKey service (on releases that include it) — the app's own server, which forwards the text to the Anthropic API. The server holds the API key, enforces rate limits, and never stores or logs the text — its logs contain only request metadata (operation, input length, status, timing). The request also carries a random device identifier (a locally generated UUID) reserved for quota enforcement; it is not linked to your name or any account. There are no user accounts.
  • Direct mode ("My Anthropic key") — straight to the endpoint shown in Settings → AI endpoint, which is the Anthropic API (api.anthropic.com) unless you change it, authenticated with your own API key. In this mode KlaroKey operates no server at all and has no way to see your text; the request is associated with your own Anthropic account, and your account's settings — including any data-use choices you made there — govern it. If you point the endpoint at a different Anthropic-compatible gateway, your text and key go to that operator instead and their policies govern; KlaroKey requires https (http is accepted only for localhost) but cannot vouch for third-party gateways.
• Nothing is sent while you type, and no conversation history exists — each request stands alone.
• KlaroKey does not store the text it processes. Processing by Anthropic is governed by Anthropic's privacy policy: with standard API settings Anthropic does not use API inputs to train its models (the KlaroKey service keeps training opt-in off); Anthropic ordinarily retains API inputs and outputs for up to 30 days, content flagged by its safety systems can be retained longer (up to two years), and retention may be extended where the law requires — see Anthropic's data-retention policy for the authoritative terms.
• If you never tap an AI button, the keyboard makes no network connections at all.

Your API key (direct mode)

• An API key you optionally enter is stored only on your device, in the iOS Keychain (device-only protection), where the keyboard extension can read it.
• It is never transmitted anywhere except directly to the endpoint configured in Settings — api.anthropic.com by default — to authenticate your own requests, and it never appears in logs. Deleting it in the app removes it from the Keychain.

iOS "Allow Full Access"

iOS requires the Allow Full Access permission for any keyboard that makes network requests. KlaroKey uses it for exactly one thing: the AI request described above, made only when you tap an AI button. Typing and spelling suggestions work fully without it.

Data we collect

KlaroKey has no accounts, and we never receive your name, email, contacts, or location. In direct mode we operate nothing at all — requests go from your device to Anthropic under your own account, and we cannot see them; this account linkage on Anthropic's side is why the App Store privacy label marks submitted text as "linked to you". When the KlaroKey service is active, the application payload contains the text you submitted, your request settings, and the app's random device UUID; like any internet request it also carries network-level metadata such as your IP address, which the server uses transiently for rate limiting and does not store. Text is never written to logs or storage.

Subscriptions

KlaroKey Pro is processed entirely by Apple. We receive no payment details and no Apple ID information; the app stores only your entitlement status on-device.

Children's privacy

The app has no accounts, no ads, and no tracking, and is not directed at children. The only data processed is what the AI buttons send, exactly as described above — the same for every user.

Changes

Any change to this policy will be published at this URL with an updated date.

Contact

Questions: email amarsanaa@outlook.com or open an issue on GitHub.