Privacy Policy — Voxly AI Keyboard

Effective date: 26 September 2026  ·  Developer: Sarun Saji

This Privacy Policy describes how Voxly AI Keyboard ("Application", "we", "us") collects, uses, and protects your information. Voxly is an Android keyboard that turns speech into text: you speak, and the text is typed into whatever app you are using. It can also translate text you have typed, when you ask it to.

1. Keyboard and Typing Data

• Word suggestions come from a dictionary bundled inside the Application and from words the keyboard has learned from your own typing, and are generated entirely on your device. No typed text leaves your device for this.
• Learned words stay on your phone. To suggest the words you actually use, the keyboard keeps a list of words and word pairs you type, and the spellings you pick when typing a language in English letters (for example Manglish), in the Application's private storage on your device. This list is never sent to us, is excluded from Google's cloud backup, and may be copied to a new phone only if you use Android's phone-to-phone transfer during setup. Nothing is learned in password, email address, or web address fields, or in fields where the app you are typing in asks keyboards not to learn (such as incognito modes). You can erase it at any time in Settings under Privacy & data (Clear learned words); it is also erased when you delete your account on that phone, clear the Application's data, or uninstall it.
• Suggestions are automatically switched off in password, email address, and web address fields.
• Voxly does not change words you have typed. Suggestions are applied only when you tap one.
• We do not collect data about which apps you type into.

Three things, and only three, leave your device as content: a voice recording you make by deliberately pressing or holding the mic button, text you send for translation by tapping the Translate button, and a word you type into the GIF search box. All three are deliberate acts. Nothing else you type is ever included.

2. Information We Collect

Account information. When you sign in with Google, we receive your name and email address through Firebase Authentication (Google LLC). We use these to identify your account, to show you which account you are signed in to, and to manage your credit balance. Firebase Authentication is the record of who you are; the copy of your name and email in our database exists so that an account is readable without cross-referencing an internal id.

Voice recordings. The Application records audio only while you press or hold the mic button, and the keyboard shows plainly when recording is in progress. The recording is sent over an encrypted connection to our server in the European Union, and from there to Google Gemini (Google LLC), which converts it to text and, if you have chosen an output language, translates it. The audio file exists on our server only for the moment it takes to do this and is then deleted. It is never stored, never used to train any model by us, and never associated with your account beyond the credit that the request costs.

The transcribed text is not stored anywhere by us. It is returned to your device, typed into your field, and forgotten. Our request logs record that a transcription happened, the size of the audio, and which language mode was used, but never the audio itself or the text it produced.

Text you choose to translate. The keyboard shows a Translate button while you type. Nothing is sent until you tap it. When you do, the text you have selected, or if nothing is selected the paragraph you are typing in, up to the cursor, is sent over an encrypted connection to our server in the European Union and from there to Google Gemini (Google LLC), which translates it. The translation is returned to your device and replaces your text; an Undo button puts the original back. If you have kept typing while it was on its way, your text is left as it is and the translation is offered for you to insert instead. Neither the text you sent nor the translation is stored by us, used to train any model by us, or associated with your account beyond the credit the request costs. Our request logs record that a translation happened, how long the text was, and which language mode was used, never the text itself. The Translate button is not shown in password, email address, or web address fields.

GIF searches. The GIF panel is optional and does nothing until you open it. When you search in it, the word you type is sent to our server and forwarded to GIPHY (GIPHY, Inc., a Shutterstock company, United States), which returns matching results. We do not log search terms: our request log records the address of the request, which does not include what you searched for. The term is held in memory on our server for a few minutes so that the same search by anyone does not have to be repeated, and it is not written to any database, not attached to your account, and not retained after that.

The pictures themselves are loaded directly from GIPHY's servers to your device rather than through ours, so GIPHY receives your device's IP address and can see which results you loaded, in the same way as any website you visit. Results are restricted to GIPHY's most conservative content rating, which is enforced on our server and cannot be changed from the app.

Credit balance and credit history. Voxly runs on credits, so we store your balance in Firebase Firestore (Google LLC) together with a history of how it changed: the introductory credits granted when you first use voice or typed-text translation, credits added by a purchase, and a daily total of how many voice messages and translations you used. The daily total is a count and a date. It does not contain what you said or wrote.

Transcription records. For each transcription or translation we also record the date, whether it came from your voice or from text you typed, whether the output was English or the language you chose, which language that was, the size of the recording or the length of the text you sent, and the length of the text produced. We use this to see which features are actually used and how well the service is working. It never contains the recording, the text you sent, or the text produced, and it is deleted when you delete your account.

Purchase records. If you buy a credit pack, Google Play processes the payment. We never see your card or payment details. We record that the purchase happened, which pack it was, the number of credits, the Google Play order id, the country the purchase was made in, and the time, so the credits can be granted, a refund can be traced, and our accounts can be filed.

Device and technical data. Through Firebase Analytics (Google LLC) we may receive your device's IP address, operating system version, basic app usage events, and crash reports, which we use to keep the Application working and to fix faults.

Settings stored on your device. Your keyboard theme, key size, chosen language, and similar preferences are stored on your phone, not on our servers. If Android backup is turned on, they are included in your Google backup, so they can be restored when you reinstall the Application or set up a new phone; your sign-in and your learned words are not. Your chosen output language is also saved as a local preference, but it travels with each voice message or translation so the text comes back in that language. We retain the language used for each request in the transcription records described above until you delete your account; we do not store a separate server copy of your keyboard settings.

3. What We Do Not Collect

• The text you type on the keyboard. The two exceptions are text you send by tapping Translate and the GIF search box inside our own panel, both described in section 2. Nothing you type reaches us any other way.
• The text produced by a transcription or a translation.
• Your voice recordings, beyond the moment needed to transcribe them.
• Your location. We do not request or derive it.
• Your contacts, photos, files, or messages.
• Which applications you use Voxly in.

We do not sell personal data, and we do not use your data for advertising.

4. How We Use Your Information

• To turn your speech into text, to translate it into the language you have selected, and to translate text you send with the Translate button
• To identify your account and keep your credit balance correct
• To grant credits you have paid for, and to handle refunds and payment disputes
• To keep the Application working and fix faults
• To meet legal obligations, including keeping accounting records

5. Third-Party Services

Each of these is governed by its provider's own privacy policy.

6. Microphone Permission

The Application requires microphone access for one purpose: to capture your voice so it can be turned into text. The microphone is active only while you press or hold the mic button, and the keyboard shows a clear recording indicator while it is. We never record in the background. If a recording is silent or too short, your device discards it and nothing is sent at all.

7. In-App Purchases

Voxly meters transcription with credits. New users receive introductory credits when they first use voice or typed-text translation (signing in alone does not add them), and a credit is only deducted for a successful transcription or translation. Silence and failed requests cost nothing.

You can buy additional credit packs through Google Play. Payments are handled entirely by Google Play; we never receive or store your payment details. Purchases are verified with Google on our server before credits are granted. Credit packs are one-time purchases, not subscriptions, and are available in a limited set of countries.

8. Data Retention

9. Deleting Your Account

What is deleted: your stored account details, credit balance, credit history, and transcription records. We also request deletion of your sign-in account. Unused credits are forfeited and cannot be restored.

What is kept, and why. The following records remain after account deletion.

The record that a purchase took place, including the amount, the Google Play order id, the country and the date. Accounting records have to be retained under Danish bookkeeping law, so these are not deleted. Your name and email are stripped from them at the moment you delete your account, but the record retains your account identifier (UID) and purchase identifiers so purchases and refunds can be traced. Removing your name and email does not remove these identifiers.

A record of the deletion itself. This holds your email address, the reason you gave if you chose to give one, how long the account existed, and the credits left on it. We keep it to understand why people leave and to detect repeated abuse of the free credit grant. It is removed automatically 12 months after you delete your account. If you would rather it were removed sooner, email us at the address below and we will delete it.

A free-credit eligibility record is also retained to prevent repeated introductory grants. It is keyed by a one-way hash of your Google provider identity and stores the date of the grant, without your name or email. It is not removed when you delete your account and has no scheduled expiry.

10. Children's Privacy

The Application is not directed at children under 13, and we do not knowingly collect personal information from anyone under 13. Where the law sets a higher minimum age for consenting to data processing, which is up to 16 in parts of the European Union, you must meet that age or have your parent's consent to use the Application. If you believe a child has provided us with personal information, contact us and we will delete it promptly. GIF results are restricted to the most conservative content rating GIPHY offers, and that restriction is applied on our server so it cannot be turned off from the app.

11. Data Security

All traffic between the Application, our server, and third-party services uses HTTPS encryption. Every request to our server carries your Firebase session token and is rejected without it, and our database rejects writes from the app entirely, so your balance cannot be altered from a device. No method of transmission over the internet is completely secure, but we do not retain the data most worth stealing: your audio and your text are gone before the request finishes.

12. Where Your Data Is Processed

Our server is located in the European Union. Google's services, including Firebase and Gemini, may process data outside the EU under Google's own safeguards and contractual terms. Your voice recording travels from your device to our EU server and on to Google for transcription, and is deleted immediately afterwards.

GIF search is provided by GIPHY, Inc. in the United States. A search term you type in that panel, and your IP address when the pictures load, are therefore processed outside the European Union. This applies only if you open that panel; it does not affect transcription, which stays within our EU server and Google's infrastructure.

13. Your Rights

Depending on where you live, including under the GDPR, you have the right to access, correct, delete, or receive a copy of your personal data, and to object to or restrict its processing. In practice you can:

• Delete your account and data yourself, in Settings under Privacy & data
• Erase the words the keyboard has learned from your typing, in Settings under Privacy & data
• Sign out at any time
• Uninstall the Application to stop all data collection
• Revoke microphone access in your Android settings, which disables voice input but leaves the keyboard working for typing
• Email us to exercise any other right, or to complain

If you are in the EU and believe we have handled your data improperly, you may also complain to your national data protection authority. In Denmark this is Datatilsynet.

14. Reporting a Problem

Speech recognition can get things wrong, and a translation can come out badly. If Voxly produces output that is wrong, offensive, or harmful, report it from Settings, under Privacy & data, then Report a problem, or write to the address below. Include what was produced so we can look into it.

15. Changes to This Policy

We may update this Privacy Policy, for example when a feature is added or removed. Significant changes will be reflected in the effective date at the top of this page. Continued use of the Application after a change constitutes acceptance of the updated policy.