Privacy Policy

Last Updated: September 14, 2026

Context Keyboard (Mizuna, we, us) is an iOS keyboard that suggests replies. This policy explains what we collect, what leaves your device, and what we can and cannot read.

1. Information We Collect

Account information — Name, email address, gender, and age calculated from the birth date you enter; whether you signed up with an email and password or with Google Sign-In.

Onboarding answers — The questions we ask when you first open the app: who you usually text, what you want replies to sound like, and the tone you pick. These are stored on your profile and used to shape suggestions.

Preferences — Your default tone and keyboard settings.

Usage data — Counts only: how many replies you generated, and when. No message text is stored in these records.

Subscription data — Your subscription status and the identifier our payment processor uses for purchases. Apple handles payment; we never see or store card details.

Technical data — Device model, iOS version, app version, and IP address. Our infrastructure and subscription providers receive this to serve requests and detect abuse.

2. Conversation Content

This is the part that matters most, and it changed when we added conversation memory. Please read it rather than skimming.

Text and screenshots you give the keyboard — When you paste text or add a screenshot, it is sent to our servers and our AI providers so a reply can be generated. It is processed for that request and is not retained on our servers afterwards: we do not log it or write it to any database we can read. Screenshots are screened by an automated moderation check before generation, then discarded. We never store your images.

Before anything leaves your device, an automatic filter attempts to remove obvious sensitive strings such as card numbers and long digit sequences. This is a best-effort safeguard, not a guarantee: please do not paste information you would not want processed.

Conversation history (memory)

So that replies stay consistent across a conversation, the app keeps a history of the conversations you have used it for. This history is stored on your device, encrypted with AES-256-GCM; encrypted before it leaves your device; and stored on our servers only as an encrypted blob so it survives reinstalling the app or moving to a new device.

We cannot read it. The encryption key is generated on your device and stored in your iCloud Keychain; it never reaches our servers. What we hold is ciphertext plus the minimum needed to sync it: a random identifier, your account id, a version number, and timestamps. No titles, previews, or participant names.

You can delete history at any time from the app’s home screen using Clear all, which removes it from your device and our servers. Because we do not hold the key, we cannot recover history if you lose access to your iCloud Keychain. That is a deliberate trade-off.

What the keyboard cannot see

The keyboard extension has no access to the app you are texting in, who you are texting, your contacts, or your message history in that app. iOS does not expose any of it, and we do not ask for it. Everything we work with is what you explicitly paste or capture.

3. Full Access

iOS asks you to enable Allow Full Access for the keyboard. We request it for one reason: without it, the keyboard extension cannot use the network or reach our servers to generate a reply. It also lets the keyboard read the settings and encrypted history the app saved for it.

We do not use Full Access to record what you type. The keyboard only transmits the text you deliberately place into it.

4. How We Use Your Information

We use your information to generate contextual AI-powered replies shaped by your profile and onboarding answers; keep replies consistent across a conversation using encrypted history; communicate about your account and services; manage subscriptions and restore purchases; enforce usage limits; screen harmful content; and prevent fraud and abuse.

We do not use your information for advertising, and we do not build profiles for anyone else.

5. AI Processing

When you generate a reply, the text or screenshot you supplied is sent to our servers, which call an AI provider on our behalf. Our API keys stay on the server and are never shipped inside the app.

OpenAI generates standard replies and screens images for harmful content. xAI (Grok) generates replies when you turn on Unhinged mode, available only to users aged 17 and over. Your profile information — gender, age, tone, and onboarding answers — is included so replies are personalized. Neither provider uses content sent through their API to train their models under their API data usage policies. Both may retain requests briefly for abuse monitoring before deleting them.

6. Data Storage and Security

All data is encrypted in transit using TLS and at rest. Account data is stored with Supabase. Conversation history is additionally end-to-end encrypted; our servers hold only ciphertext. Authentication tokens are stored in the iOS Keychain, not ordinary storage, and excluded from device backups. Every database record is protected by row-level security so your account can only read its own rows. API keys and sensitive credentials live on our servers, never in the app. No system is perfectly secure, but these are the measures we take.

7. Third-Party Services

Supabase — authentication, database, and server functions; receives account data, encrypted conversation blobs, and usage counts.

OpenAI — reply generation and image moderation; receives text and images you submit for a reply.

xAI (Grok) — reply generation for Unhinged mode; receives text you submit for a reply.

Apple — subscriptions and payments; receives purchase information, while we never see your payment details.

RevenueCat — subscription status management; receives purchase receipts and an app-specific user identifier.

Google — Sign-In only if you choose it; shares your name and email address with us.

We do not sell your personal information to third parties, and we never have. Google Calendar and Gmail integrations were removed from Context Keyboard in September 2026. We no longer request, receive, or store any calendar or email data.

8. Your Rights

You have the right to access your personal data, correct inaccurate information, delete your account and all associated data, export your data, opt out of certain data processing activities, and withdraw consent for data processing.

To exercise these rights, email admin@contextkeyboard.com or use Delete Account in the app’s settings. Deleting your account removes your profile, preferences, onboarding answers, usage records, and every stored conversation blob. You can clear conversation history at any time without deleting your account. Signing out also erases the local copy of your history, quiz answers, and keyboard state from the device.

9. Data Retention

Account and profile data is retained while your account is active. Conversation history is retained until you delete it or delete your account. Usage counts are retained for abuse prevention and are not tied to message content. Text and images submitted for a reply are not retained by us at all. After account deletion, we may keep minimal records where the law requires it, such as transaction records for tax purposes.

10. Children’s Privacy

Context Keyboard is not intended for children under 13, and we do not knowingly collect personal information from them. Unhinged mode is restricted to users aged 17 and over. If you believe we have collected information from a child, contact us at admin@contextkeyboard.com and we will delete it.

11. International Users

Our servers are located in the United States. If you use Context Keyboard from outside the US, your information will be transferred to and processed there under US law and under the terms of this policy.

12. Changes to This Policy

We may update this policy from time to time. Material changes will be announced in the app and the Last Updated date above will change. Continuing to use the service after a change means you accept the updated policy.

13. Contact Us

Questions about this policy or our data practices:

Email: admin@contextkeyboard.com
Website: https://www.contextkeyboard.com

Text smarter, not harder with Context Keyboard

Text smarter, not harder with Context Keyboard