Privacy Policy

Last updated: 2026-10-28 (version 1.2.0)

Товчхондоо: бичих, хөрвүүлэх, үг санал болгох нь бүгд таны төхөөрөмж дээр, интернэтгүй хийгддэг. Цорын ганц үл хамаарах зүйл бол 1.2.0 хувилбараас нэмэгдэх, та өөрөө асаах ✨ AI засвар: одоогийн өгүүлбэр зөвхөн AI засварын товчийг дарах үед л илгээгдэнэ; нэргүй бүртгэлийн дугаар нь мөн засвар асаалттай байхад аппыг нээх үед болон худалдан авалтыг тооцох, дахин оролдох үед (засвар унтраалттай байсан ч) илгээгдэнэ. Өөр ямар ч бичвэр илгээгдэхгүй; худалдан авалтын мэдээлэл болон манай серверийн хадгалдаг зүйлсийг доор тайлбарлав.
The short version: typing, conversion and suggestions all happen on your device, offline. The one exception is the opt-in ✨ AI fix (from version 1.2.0): the current sentence is sent only when you tap the AI fix key; the anonymous account number is sent then, and also when you open the app with the fix on and when a purchase is credited or retried (even with the fix off). No other text is ever sent; purchase data and what our server keeps are described below.

Та аль хувилбарыг ашиглаж байна: 1.1.0 ба 1.1.1 хувилбарууд: гар болон апп интернэтэд огт холбогддоггүй, ямар ч мэдээлэл цуглуулдаггүй. 1.2.0 хувилбараас: доор тайлбарласан, сонголтоор асаах ✨ AI засвар нэмэгдэнэ; бусад бүх зүйл урьдын адил төхөөрөмж дээр үлдэнэ.
Which version you have: versions 1.1.0 and 1.1.1: the keyboard and app make no network connections and collect no data at all. From version 1.2.0: the opt-in ✨ AI fix described below is added; everything else stays on-device as before.

Монгол Keyboard is an iOS keyboard that converts Mongolian Latin transliteration to Cyrillic on your device. Typing, conversion and suggestions never leave your device. The one exception, from version 1.2.0, is the optional ✨ AI fix: it is off until you turn it on in the app and agree. Even then, the sentence is sent only at the moment you tap the AI fix key; the anonymous account number (never any text) is also sent when you open the app with the fix on and when a fix-pack purchase is credited or retried, even with the fix off.

What the keyboard does with your typing

• All transliteration (Latin → Cyrillic), word suggestions and corrections happen entirely on your device, using a word list built into the app. Keystrokes are never logged or transmitted.
• When you pick a suggestion from the candidate bar, that single word pair (what you typed → what you chose) is saved to a small dictionary on your device, so it can be offered first next time. The keyboard also keeps an on-device count of which Cyrillic words you commit most often (the words only — never sentences, never context), so your own frequent words can be recommended as you start typing them. Both stores never leave the device, are capped in size, and can be cleared together any time in the app (Гарын тохиргоо → Цээжилсэн үгсийг арилгах).
• Learning works without Allow Full Access: the keyboard saves to its own private storage. With Full Access, these words are shared locally with the containing app so its learned-words editor can show and manage them. Clearing in the app also clears the keyboard's private history the next time the keyboard opens and can read the app's data. With Full Access on it always can; without Full Access, iOS may keep the app's data out of the keyboard's reach, so the keyboard's own copy is cleared the next time it opens after you turn Full Access on.
• The keyboard contains no analytics, no advertising SDKs, and no trackers of any kind.

The ✨ AI fix (optional, from version 1.2.0) · ✨ AI засвар (сонголтоор, 1.2.0 хувилбараас)

The AI fix key fixes the text before the cursor: it converts Mongolian typed in Latin letters to Cyrillic and corrects spelling, grammar and punctuation. It is off by default. The app turns it on only after showing what is sent and to whom and asking you to agree; you can turn it off there at any time, and the key disappears.

What is sent, and when: when you tap the AI fix key — the text before the cursor in the current field (the current sentence, at most 500 characters) and an anonymous account number (below). Nothing else you type is ever sent. The app itself sends only the anonymous account number, never any text: each time you open it with the ✨ fix on, to show your fix balance, and with a fix-pack purchase, to credit it (a purchase not yet credited is retried each time you open the app, even if you have turned the fix off since). The app listens for StoreKit transaction updates and can complete an already-authorized pending purchase while it remains running, including in the background. Sentence text is never sent by these purchase retries.

To whom:

1. Our server, keyboard-api.zon.mn (run by the developer, hosted in Seoul, South Korea). It passes the text to the AI and returns the result. It does not store or log the text — neither what you sent nor the corrected result.
2. Anthropic, PBC, whose Claude AI model makes the correction. Anthropic receives only the text, from our server — not your device, IP address or account number — and processes it as our service provider under its commercial API terms. Anthropic states that it does not use API inputs or outputs to train its models and that it deletes them from its systems within 30 days by default — text its automated safety systems flag as a violation of its Usage Policy can be kept for up to 2 years, and it may keep data longer where the law requires (how long Anthropic stores data, whether it is used for training; its privacy policy).

What our server keeps:

• An anonymous account number — a random identifier (UUID) created on your device the first time it is needed and kept in the iOS keychain, so it survives a reinstall. It is not your name, email, Apple ID or device ID. Your free daily fixes and the fixes you bought are counted against it. The app shows it under ✨ AI засвар.
• Your fix balance, how many free fixes you used each day, when the account was created and when it was last used, and any fixes we credited by hand (with a short note, for example after a support email).
• Your purchases of fix packs: the App Store transaction id, the product, the price and currency, the store environment and the dates (purchase, credit, refund). Payment itself is handled entirely by Apple; we never see your payment details or Apple ID.
• For each fix request, metadata only: the time, the account number, which AI model was used, the result status, the number of AI tokens used and their cost, how long it took, and the length of the text in characters. Never the text itself.
• The server's operational log records the same metadata, with the account number shortened to its first 8 characters.

These records are used only to run the feature: to count free and paid fixes, to credit purchases and take back refunded ones, to prevent abuse, and to see what the service costs. They are not used for advertising, not combined with other data and not sold or shared with anyone. They are kept while the service runs; to have your account's records deleted, email us your account number (contact below). Deleting them also deletes any unused fixes you bought. The server's automatic backups keep deleted records for up to 7 more days.

Purchases: fix packs are bought through Apple's In-App Purchase. The app passes your anonymous account number to Apple with the purchase so the server can credit it to the right account; Apple's own privacy policy covers the payment.

iOS "Allow Full Access"

iOS shows every keyboard that asks for Allow Full Access a general warning that the keyboard could transmit what you type. Монгол Keyboard uses the permission for two things only:

1. Sharing your learned words and word-use counts with the containing app on your device, so you can see, edit and clear them there.
2. The ✨ AI fix's connection to our server — only after you turned the fix on in the app, and only when you tap the AI fix key.

Typing, transliteration, suggestions and word learning all work without Full Access and without the AI fix.

Data we collect, in short

No tracking, no advertising, no analytics SDKs. In versions 1.1.0 and 1.1.1 nothing is sent or collected at all. From version 1.2.0 nothing is collected unless you turn the ✨ AI fix on; with it on, the sentence is sent only when you tap the AI fix key, and the anonymous account number also when you open the app with the fix on and when a purchase is credited or retried (a pending purchase is retried even after you turn the fix off).

Earlier versions

Version 1.0.0 offered an earlier AI grammar fix that sent one sentence to a correction server when you tapped it. Version 1.1.0 removed it and made no network connections at all; 1.1.1 is the same, fully offline. Version 1.2.0 brings the fix back as the opt-in ✨ AI fix described above, with a new server.

Children's privacy

The app has no sign-up, no ads and no tracking, and is not directed at children.

Changes

Any change to this policy will be published at this URL with an updated date.

Contact

Questions, or deleting your account's records: email amarsanaa@outlook.com.