ClevaType Privacy Policy
Last updated: May 13, 2026
This Privacy Policy explains how ClevaType ("ClevaType", "we", "us", or "our") collects, uses, shares, and protects information when you use the ClevaType iOS app, the ClevaType custom keyboard extension, and related features (together, the "Service").
ClevaType is operated from Portugal. For privacy questions or requests, contact us at clevatype@gmail.com. For support, contact clevatype+support@gmail.com.
For privacy-law purposes, Denis Petrov is the controller of personal data processed through the Service, except where a third-party service provider acts as an independent controller under its own terms.
ClevaType is an AI-powered iOS keyboard. Because keyboards can involve sensitive text, this Policy explains when text is processed, what is sent for AI actions, and what ClevaType does not collect automatically.
1. Summary
- ClevaType helps you write, rewrite, correct, translate, summarize, generate, and understand text from the iOS keyboard.
- ClevaType requires Apple's Allow Full Access keyboard permission for AI features that need network communication.
- ClevaType does not automatically send everything you type to ClevaType servers or AI providers.
- Text is processed only when you choose to use a ClevaType AI action, such as correcting, rephrasing, translating, summarizing, generating, or explaining text.
- AI requests are routed through ClevaType's backend and then to OpenAI.
- ClevaType does not store your Submitted Text, AI Output, typed text, action history, prompt history, or AI output history.
- ClevaType does not use Submitted Text or AI Output to train AI models, improve products, perform quality review, debug issues, or create analytics.
- Apple handles App Store purchases, subscriptions, trials, billing, and refund requests.
- Do not submit passwords, payment card numbers, government IDs, health information, confidential business information, or other sensitive information to ClevaType AI actions.
2. Information We Collect
2.1 Text You Submit for AI Actions
When you use an AI-powered feature, ClevaType processes the text you choose to submit, select, paste, copy into the keyboard, or otherwise provide for that feature ("Submitted Text"). Depending on the action you choose, this may include:
- text you ask ClevaType to correct, rewrite, translate, summarize, simplify, generate, or explain;
- incoming text you ask ClevaType to understand, summarize, translate, analyze, or extract action items from;
- selected text, surrounding text, current text-field context, clipboard text, or pasted text, only when you request an action that needs that text;
- prompts, parameters, and settings you choose, such as target language, tone, style, communication goal, length, platform, or output format;
- AI-generated responses, rewritten text, translations, summaries, explanations, or other results ("AI Output").
Submitted Text may contain personal data if you include personal data in the text. You are responsible for deciding what text to submit.
ClevaType does not store Submitted Text or AI Output on ClevaType servers after the AI response is returned. ClevaType does not store Submitted Text or AI Output locally as typed-text history, action history, prompt history, or AI output history.
2.2 Keyboard and App Settings
ClevaType may store settings needed to operate the app and keyboard on your device, such as:
- selected actions and configured action parameters;
- language, tone, style, and formatting preferences;
- app and keyboard configuration data;
- free-plan usage counters or local information needed to enforce usage limits.
ClevaType does not store these app settings on ClevaType servers. If cloud sync or accounts are added later, this Policy will be updated to describe the account data and cloud data stored by ClevaType.
2.3 Accounts
ClevaType does not require user accounts. Access to paid features is based on Apple App Store / StoreKit subscription entitlement. If ClevaType adds accounts later, we will update this Policy to describe what account information is collected, how it is used, and how long it is retained.
2.4 Subscription and Purchase Information
If you purchase a subscription, Apple processes your payment through the App Store. ClevaType does not receive your full payment card number, banking details, or Apple ID password.
ClevaType may check limited subscription-related information needed to provide paid features, such as:
- subscription entitlement status;
- product, plan, trial, renewal, cancellation, refund, or access status made available through StoreKit;
- App Store transaction identifiers, receipt data, or other StoreKit information needed to verify access to premium features.
ClevaType does not store subscription or transaction records on ClevaType servers. Subscription status and transaction information are handled by Apple.
2.5 Device, Usage, Analytics, and Crash Information
ClevaType uses Amplitude and Firebase for analytics, attribution or marketing measurement, crash reporting, infrastructure, and related technical operations. Depending on the tool and app configuration, we and these providers may process limited technical and usage information, such as:
- device model, operating system version, app version, language, region, and keyboard version;
- feature usage events, such as which ClevaType action was used and whether it succeeded or failed;
- performance data, diagnostics, crash logs, error reports, and technical logs;
- app-instance, device, session, event, or installation identifiers generated by analytics, crash, or notification tools;
- approximate country or region derived from device settings, App Store settings, IP address, or provider systems;
- network metadata needed to deliver, secure, and operate the Service.
ClevaType does not collect IDFA or other advertising identifiers. ClevaType does not include Submitted Text or AI Output in analytics, crash reports, attribution events, product-improvement datasets, or quality-review datasets.
ClevaType AI request logs do not contain Submitted Text, AI Output, IP addresses, device identifiers, installation IDs, or other user content.
2.6 Push Notifications
ClevaType uses push notifications. If you allow notifications, Apple Push Notification service and, where used, Firebase may process a push token and related technical delivery information so notifications can be sent to your device. You can manage notification permissions in iOS settings.
2.7 Support Communications
If you contact us, we may collect your email address, name, message content, attachments, and any other information you choose to provide so we can respond to your request.
2.8 Information We Do Not Collect Unless Disclosed
Unless clearly stated elsewhere in this Policy or required by a feature you choose to use, ClevaType does not collect:
- your full Apple payment card or banking information;
- your Apple ID password;
- contacts, precise location, microphone recordings, camera images, or photos;
- passwords, one-time codes, or other sensitive data entered into secure iOS text fields where iOS replaces custom keyboards with the system keyboard;
- the full contents of every app you use on your device;
- text that you do not submit to a ClevaType AI action;
- typed keystrokes automatically sent in the background.
3. Keyboard Allow Full Access
ClevaType is an iOS custom keyboard. Apple allows custom keyboards to operate with or without the Allow Full Access keyboard permission, which Apple developer materials also call open access. This is different from Apple's separate accessibility feature named Full Keyboard Access for controlling a device with a keyboard.
When Allow Full Access is off, iOS limits what a keyboard extension can do, including network communication. ClevaType's AI features require server-side AI processing, so Allow Full Access is needed for those features to work.
When Allow Full Access is enabled, a custom keyboard can communicate over the network and can use capabilities that are not available to a non-networked keyboard. Apple also provides custom keyboards with a text document proxy that can interact with text around the insertion point where supported by iOS and the host app. Text selection itself is controlled by the host app, not by the keyboard. ClevaType may process selected text, surrounding text, current text-field context, clipboard text, or pasted text only when you request an AI action that uses that text.
ClevaType uses Allow Full Access only to provide keyboard configuration, subscription access, and AI-powered text features. ClevaType does not automatically collect or transmit everything you type, and ClevaType does not use keyboard text for hidden advertising, profiling, or unrelated purposes.
Third-party keyboards such as ClevaType do not have access to secure iOS text fields used for sensitive data such as passwords and one-time codes. In those fields, iOS replaces third-party keyboards with the system keyboard. As a result, ClevaType can see and work only with text from ordinary text fields where third-party keyboards are allowed. iOS may also prevent third-party keyboards from appearing in other places, including phone-number fields, and individual apps can disallow third-party keyboards.
4. How We Use Information
We use information for the following purposes:
- to provide the ClevaType app and keyboard;
- to perform AI actions requested by you, including correction, rewriting, translation, summarization, generation, explanation, tone analysis, and action-item extraction;
- to apply your selected settings, parameters, languages, tones, styles, and action preferences;
- to verify subscription status, trial status, premium access, and free-plan limits;
- to maintain, debug, secure, and operate the Service;
- to monitor server performance, diagnose technical issues, and protect against abuse;
- to provide analytics, attribution, crash reporting, and product reliability measurement without using Submitted Text or AI Output;
- to send push notifications where permitted;
- to respond to support, privacy, and legal requests;
- to prevent fraud, abuse, security incidents, and misuse;
- to comply with legal obligations and enforce our Terms and Conditions.
5. AI Processing and OpenAI
ClevaType uses OpenAI as its AI provider. OpenAI's policy pages are available at:
- OpenAI policies: https://openai.com/policies/
- OpenAI Privacy Policy: https://openai.com/policies/privacy-policy/
- OpenAI business data privacy page: https://openai.com/business-data/
- OpenAI Data Processing Addendum: https://openai.com/policies/data-processing-addendum/
When you use an AI action, ClevaType sends the request through ClevaType's backend and then to OpenAI. The request may include:
- the Submitted Text needed to perform the action;
- selected parameters such as language, tone, style, length, or output format;
- technical metadata needed to route, secure, debug, or manage the request.
User Permission Before AI Processing
Before ClevaType sends Submitted Text to OpenAI for an AI action, ClevaType explains in the app that the text you submit, selected text, surrounding text/current-field context, pasted text, clipboard text, chosen parameters, and related technical metadata may be sent through ClevaType's backend to OpenAI to generate the requested result.
ClevaType sends this information to OpenAI only after you choose to use an AI action and give permission in the app. You may avoid this sharing by not using AI actions or by not submitting text for AI processing.
ClevaType does not send Apple payment details, full account credentials, contacts, precise location, or unrelated analytics data to OpenAI for text generation.
ClevaType does not use Submitted Text or AI Output to train ClevaType's own AI models. ClevaType does not use Submitted Text or AI Output for product improvement, quality review, debugging, or analytics.
Under OpenAI's applicable API and business terms, OpenAI should not use Submitted Text or AI Output to train or improve OpenAI models unless ClevaType explicitly opts in or otherwise authorizes that use. ClevaType does not opt in to AI-provider training for Submitted Text or AI Output.
OpenAI may process AI requests under its own applicable terms and data-processing commitments, including for providing the service, security, abuse monitoring, legal compliance, and other permitted operational purposes.
6. Legal Bases for Processing in the EEA, UK, and Switzerland
If the GDPR, UK GDPR, or similar data protection law applies, we rely on the following legal bases:
| Processing purpose | Legal basis |
|---|---|
| Providing the app, keyboard, AI actions, subscription access, and user-requested features | Performance of a contract |
| Processing Submitted Text and AI Output to perform an AI action you request | Performance of a contract |
| Responding to support and privacy requests | Performance of a contract, legal obligation, or legitimate interests |
| Security, fraud prevention, abuse prevention, debugging, and service reliability | Legitimate interests |
| App analytics, attribution, crash reporting, and reliability measurement | Legitimate interests or consent, depending on the tool, jurisdiction, and data used |
| Push notifications | Consent or legitimate interests, depending on the notification and applicable law |
| Optional permissions or optional marketing choices | Consent, where required |
| App Store subscription, entitlement, and transaction checks | Performance of a contract, legal obligation, and legitimate interests |
| Compliance with law and enforcement of legal claims | Legal obligation and legitimate interests |
Where we rely on legitimate interests, we balance our interests against your rights and freedoms. Where we rely on consent, you may withdraw consent at any time.
7. Sharing Information
We may share information with:
- OpenAI, to perform AI actions you request;
- Apple, for App Store distribution, subscriptions, billing, refunds, StoreKit, push notifications, and platform services;
- Firebase / Google, for backend hosting, infrastructure, analytics, crash reporting, push notification support, and related technical operations;
- Amplitude, for analytics, attribution, marketing measurement, and usage measurement;
- email providers, to receive and respond to support and privacy requests sent by email;
- professional advisors, such as lawyers, accountants, and auditors;
- law enforcement, regulators, courts, or public authorities, where required by law or necessary to protect rights, safety, and security;
- successors in a business transaction, such as a merger, acquisition, financing, restructuring, or sale of assets.
ClevaType does not sell personal information and does not share personal information for cross-context behavioral advertising.
ClevaType requires third-party service providers that process user data for ClevaType to provide the same or equal protection for user data as described in this Privacy Policy and as required by Apple App Store Review Guidelines, applicable law, and relevant data-processing agreements.
8. International Transfers
ClevaType is operated from Portugal, and service providers may process information in countries other than your country of residence. If personal data from the EEA, UK, or Switzerland is transferred internationally, we use appropriate safeguards where required, such as adequacy decisions, standard contractual clauses, data processing agreements, and supplementary safeguards.
Because ClevaType's operator is established in the EU, ClevaType does not need an Article 27 GDPR representative in the EU.
9. Data Retention
We keep personal data only as long as reasonably necessary for the purposes described in this Policy, unless a longer period is required or permitted by law.
- Submitted Text and AI Output: ClevaType processes this data to provide the requested AI response and does not store it on ClevaType servers after the AI response is returned.
- Typed text, action history, prompt history, and AI output history: ClevaType does not store these locally or remotely.
- AI request logs: ClevaType AI request logs do not contain Submitted Text, AI Output, IP addresses, device identifiers, installation IDs, or other user content. We keep AI request logs only as long as needed to operate, debug, secure, and maintain the Service.
- App settings and free-plan counters: These are stored on your device rather than on ClevaType servers, and may be removed when you delete the app, subject to normal iOS behavior.
- Subscription and transaction records: ClevaType does not store these records on ClevaType servers. Apple handles subscription status and transaction information.
- Analytics, attribution, crash, notification, and infrastructure data: retained according to the settings and retention practices of Amplitude, Firebase, Google, Apple, and ClevaType, and only as long as needed for the purposes described in this Policy.
- Support communications: kept for up to 2 years, unless a longer period is needed to resolve a dispute, comply with law, or protect legal rights.
- Backups: ClevaType does not use separate ClevaType backups for Submitted Text or AI Output. Service-provider systems may retain limited operational backups according to their normal backup cycles.
10. Security
We use reasonable technical and organizational measures designed to protect personal data, such as encryption in transit, encryption at rest, access controls, limited access to operational systems, and security monitoring appropriate to the Service.
Production logs and AI request metadata are accessible only by ClevaType service developers who need access to operate, debug, secure, or maintain the Service. ClevaType does not store Submitted Text or AI Output in logs.
No method of transmission or storage is completely secure. You should avoid submitting sensitive information to AI actions.
11. Your Privacy Rights
Depending on where you live, you may have rights to:
- request information about how we process your personal data;
- access personal data we hold about you;
- correct inaccurate or incomplete personal data;
- delete personal data;
- restrict or object to certain processing;
- receive a portable copy of certain data;
- withdraw consent where processing is based on consent;
- object to direct marketing;
- lodge a complaint with a data protection authority.
To exercise rights, contact clevatype@gmail.com. We may need to verify your request before acting on it. Where the GDPR applies, we generally respond without undue delay and within one month, unless a permitted extension applies.
You can revoke permission for AI processing by not using AI actions, disabling Allow Full Access for the ClevaType keyboard, or deleting the app. If you revoke permission, AI-powered keyboard features that require server-side processing may stop working.
Because ClevaType is operated from Portugal, you may contact the Portuguese supervisory authority, Comissão Nacional de Proteção de Dados (CNPD), or your local supervisory authority if you are in the EEA.
12. Children's Privacy
ClevaType is intended for users aged 16 or older. If you are under 18, you may use ClevaType only with permission from a parent or legal guardian.
13. Sensitive Information
ClevaType is a writing and communication tool, not a secure storage service. Do not submit:
- passwords, authentication codes, or security credentials;
- payment card numbers or banking details;
- government identification numbers;
- health, medical, biometric, or genetic information;
- information about criminal convictions or offenses;
- confidential legal, financial, employment, or business information;
- private information about other people without permission;
- intimate, explicit, or highly sensitive personal content.
ClevaType does not ask for sensitive information. If you choose to include sensitive information in Submitted Text despite this warning, ClevaType processes it only as needed to perform the AI action you requested, unless this Policy says otherwise.
14. Automated Decision-Making
ClevaType uses AI to generate, rewrite, translate, summarize, and analyze text at your request. ClevaType does not use automated processing to make decisions about you that produce legal or similarly significant effects, such as eligibility for credit, employment, insurance, housing, education, or public benefits.
15. California and Other US State Privacy Notices
Users in the United States may have privacy rights under applicable state laws.
ClevaType does not sell personal information. ClevaType does not share personal information for cross-context behavioral advertising. ClevaType does not collect IDFA or other advertising identifiers.
If applicable law grants you rights to access, delete, correct, opt out of certain processing, limit the use of sensitive personal information, appeal a privacy-rights decision, or avoid discrimination for exercising privacy rights, contact clevatype@gmail.com.
16. Changes to This Policy
We may update this Privacy Policy from time to time. If changes are material, we will take reasonable steps to notify you, such as through the app, the App Store listing, or another appropriate channel. The "Last updated" date shows when this Policy was last revised.
17. Contact
Privacy contact: clevatype@gmail.com
Support contact: clevatype+support@gmail.com
Legal owner: Denis Petrov, an individual in Portugal