Privacy Policy

Last updated: 2026-08-07

Товчхондоо: таны бичсэн зүйл төхөөрөмж дээрээ үлдэнэ. Зөвхөн та ✨Засах дээр дарсан үед л тухайн нэг өгүүлбэр илгээгдэнэ — өгүүлбэрийн текстийг бид хэзээ ч хадгалдаггүй, лог хийдэггүй.
The short version: your typing stays on your device, and nothing is ever sent anywhere except the single sentence you explicitly ask to have corrected — sentence text is never stored or logged by us (the server keeps only the anonymous request metadata described below).

Монгол Keyboard is an iOS keyboard that converts Mongolian Latin transliteration to Cyrillic on your device, with an optional AI grammar-correction feature. This policy describes exactly what the app does with your data.

What the keyboard does with your typing

• All transliteration (Latin → Cyrillic) happens entirely on your device. Keystrokes are never logged or transmitted.
• When you pick a suggestion from the candidate bar, that single word pair (what you typed → what you chose) is saved to a small dictionary in the app's private container on your device, so it can be offered first next time. The keyboard also keeps an on-device count of which Cyrillic words you commit most often (the words only — never sentences, never context), so your own frequent words can be recommended as you start typing them. Both stores never leave the device, are capped in size, and are cleared together any time in the app. Saving them requires the Allow Full Access permission (iOS only allows a keyboard to write to the app's shared container with it); without the permission the keyboard works identically but doesn't remember or count anything.
• The keyboard contains no analytics, no advertising SDKs, and no trackers of any kind.

The ✨Засах (grammar fix) feature

• Only when you explicitly tap the Засах key, the current sentence (at most 500 characters) is sent over an encrypted HTTPS connection for grammar correction, and the corrected sentence is returned.
• The request goes to the app's own correction server (keyboard-api.zon.mn), which forwards the sentence to the Anthropic API. The server holds the API key, enforces rate limits, and never stores or logs sentence text. The request also carries a random device identifier (a locally generated UUID) used only for rate limiting — it is not linked to your name, account, or anything else about you. There are no user accounts, and the feature is free: there is nothing to buy, anywhere in the app. You can turn it off in the app.
• Nothing else is on offer: the App Store app has no setting for a different server and no place to enter an API key, so your sentence can only ever go to the server named above. (Developers building the app from source can point a development build elsewhere; that is not something the App Store app can do.)
• Nothing is sent while you type. The request contains only that one sentence — no conversation history, no location, and no identifiers beyond the anonymous UUID described above.
• The app does not store the sentences it corrects. Processing by Anthropic is governed by Anthropic's privacy policy; with standard API settings Anthropic does not use API inputs to train its models. Anthropic ordinarily retains API inputs and outputs for up to 30 days; content flagged by its safety systems can be retained longer (up to two years), and retention may be extended where the law requires — see Anthropic's data-retention policy for the authoritative terms.
• So that corrections respond quickly, when the keyboard opens with the AI feature enabled and Full Access granted, it may make one empty warm-up connection to that same correction server — a request to its public status route that carries no text, no typing, and no identifiers. Its only purpose is having the encrypted connection ready before you tap Засах. Turning ✨ AI засвар off in the app disables these connections together with the feature.
• If the AI feature is turned off — or Full Access is not granted — the keyboard makes no network connections at all.

API keys

No API key exists on your device. The correction server holds the only key, and the app gives you no way to enter one — you never need an account, a key, or a payment of any kind to use any part of this keyboard.

iOS "Allow Full Access"

iOS requires the Allow Full Access permission for any keyboard that makes network requests. Монгол Keyboard uses this permission for exactly two things: the Засах feature (the correction call and its empty warm-up connection, both described above), and saving your candidate-bar picks and word-use counts to the on-device stores described above (never transmitted). Typing and transliteration work fully without it — the keyboard just won't remember or count anything, and Засах is unavailable.

Data we collect

The app has no accounts, and we never receive your name, email, contacts, location, or anything else about you. When you tap Засах, the application payload contains exactly two things: the sentence you asked to correct, and the app's random device UUID. Like any internet request, it also carries network-level metadata (notably your IP address and connection details): the built-in server sits behind the Cloudflare network, which processes that metadata transiently to route and protect traffic under Cloudflare's privacy policy; our server itself does not use or store IP addresses. The server processes the request in memory — the sentence is forwarded for correction and then discarded. What it keeps: anonymous request counts per device UUID for the current day (rate limiting), and standard operational logs containing request metadata only — a timestamp, a truncated prefix of the device UUID, the input length, the response status, and the processing time. Sentence text is never written to logs or storage. In Apple's App Privacy terms, the sentence and the device UUID count as collected data "linked" to a device identifier — which is why the App Store label lists them — but they map to no account and no personal identity.

Children's privacy

The app has no accounts, no ads, no tracking, and is not directed at children. The only data processed is what the Засах feature sends, exactly as described above — the same for every user, including children.

Changes

Any change to this policy will be published at this URL with an updated date.

Contact

Questions: email amarsanaa@outlook.com.