Privacy and data

Privacy Policy

This policy explains how your data is handled when you use Candemkey (keyboard and app, provided by Candemsoft). By "Candemkey" we mean both the main app you install and the keyboard extension you enable as your system keyboard.

1. Scope

This policy covers the iOS and Android versions of Candemkey. As a guest (not signed in) you can use the core typing features only; creating an account is only needed for the AI features and for syncing your settings across devices.

2. Data tied to your account, stored on our server

• Account: the unique identifier your sign-in provider gives us when you sign in with Apple or Google, your email address (or the relay address Apple generates if you chose "Hide My Email"), your display name if any, your language preference, and your "I am over 18" declaration.
• Session info: a refresh token keeps you signed in on your device; we store only a one-way hash of it plus a device label, never the token itself. The token itself lives only in your device's secure storage (iOS Keychain / Android encrypted storage).
• Keyboard and personalization settings: preferences such as layout, appearance, sound/haptics, and AI behavior. If you're signed in, these also sync to our server so they carry over between devices.
• Memory items: short notes (up to 200 characters, e.g. your name, job, a preference) you add yourself in Personalization > Memory — used as context for your AI requests. If you turn on "Let AI learn my writing style" (off by default, see section 5), short notes the AI derives are added to the same list; both kinds are ordinary items you can see, edit, disable, or delete.
• AI usage counters: which type of action you performed, how many times, how long it took, and whether it succeeded — never the text of your request or the AI's reply.
• Subscription/entitlement status: whether you're on the free or Pro plan.

3. Data that stays only on your device and never reaches us

• Everything you type: the text, words, and keystrokes you type on the keyboard stay in your device's memory; they're never persisted, logged, counted in statistics, or sent over the network. The one exception is when you deliberately send text by pressing the AI button (section 4); and the keyboard never reads or suggests anything in password/secure fields to begin with.
• Your personal dictionary: words and corrections learned as you type stay on your device only and never reach our server; you can wipe it completely from Settings with one tap.
• Keyboard background image: a photo you pick and crop from your gallery stays only on your device (iOS App Group file / Android app directory) and is never sent anywhere. The picker never grants the app access to your whole gallery — it only receives the single image you choose. The only thing stored on the server for this setting is a version number and a dim level, never the image itself.

4. The AI feature: what's sent, what's stored

AI features (fix, rewrite, free-form commands, etc.) only activate when you tap the AI button on the keyboard. At that moment, the text you want processed (or your free-form instruction), a system instruction describing how the AI should behave, and (if any) your enabled Memory items are sent to our server and from there to our AI provider (OpenAI, based in the US). We do not store or log the content of that request or its response — only the counters described in section 2 are kept. The provider may retain your request on their side for a limited time (currently up to 30 days) for abuse-monitoring purposes.

5. The AI learning your writing style (opt-in, off by default)

If you turn on "Let AI learn my writing style" in Personalization > Memory, roughly every 5th AI request triggers a second, small AI call that only holds that single request and response in memory for the duration of that one call (never written to disk) and tries to derive a general observation about your writing style (e.g. "prefers short sentences"); most of the time it derives nothing. Only that derived short note (at most 200 characters) gets added to your Memory list — your actual text is still never stored. You can turn this off at any time; when you do, we'll ask whether you'd also like to delete what's been learned so far.

6. Why we process your data

To create and manage your account, sync your settings across your devices, provide the AI features, prevent abuse of the service (e.g. exceeding the daily usage limit), fix technical issues, and improve the service.

7. Who we share data with

• Apple / Google: only during sign-in, to verify your identity. Your tokens are verified only on our server.
• OpenAI: only when you tap the AI button, as described in sections 4-5.
• Our hosting provider: all server data physically resides on their infrastructure.
• Currently not connected: ad networks, analytics providers (your consent defaults to off and nothing is sent until you turn it on), in-app purchase/subscription infrastructure (RevenueCat). If any of these get connected, this policy and the store privacy forms will be updated.

We never sell your data or share it for advertising purposes.

8. International transfers

AI processing happens at OpenAI, located abroad (US). This transfer happens only when you send a request by tapping the AI button, and only for that request.

9. How long we keep data

Your account data is kept for as long as your account exists. When you delete your account (App > Account > Delete account), your account and everything tied to it (settings, memory items, usage counters, sessions) is deleted immediately and permanently.

10. Security

Only a one-way hash of your session tokens is stored on our side; the token itself stays in your device's secure storage. Communication with our server is encrypted (HTTPS). The keyboard never reads or suggests anything in password or secure text fields.

11. Your rights

You can export your data at any time (App > Account > Export my data — you receive a file containing your profile, settings, memory items, entitlement status, and usage counters) and delete your account. You can request correction of your data or more information via the contact details in section 13. For deletion steps and what is deleted or kept, see the Account deletion page.

12. Children's privacy

Candemkey itself has no specific age requirement; only unlocking flirty/mature content levels requires your "I am over 18" declaration, which is not verified. The app's store age rating will be set separately.

13. Changes to this policy

We may update this policy; you'll be notified in-app of material changes.

14. Contact

Candemsoft · [address] · [email address]