Privacy Policy — Voxly AI Keyboard

Effective date: 2 August 2026  ·  Developer: Sarun Saji

This Privacy Policy describes how Voxly AI Keyboard ("Application", "we", "us") collects, uses, and protects your information. Voxly is an Android keyboard that turns speech into text: you speak, and the text is typed into whatever app you are using.

1. Keyboard and Typing Data

• Word suggestions come from a dictionary bundled inside the Application and are generated entirely on your device. No typed text leaves your device for this.
• Suggestions are automatically switched off in password, email address, and web address fields.
• Voxly does not change words you have typed. Suggestions are applied only when you tap one.
• We do not collect data about which apps you type into.

Two things, and only two, leave your device as content: a voice recording you make by deliberately pressing or holding the mic button, and a word you type into the GIF search box. Both are deliberate acts. Nothing you type into the app you are using is included in either.

2. Information We Collect

Account information. When you sign in with Google, we receive your name and email address through Firebase Authentication (Google LLC). We use these to identify your account, to show you which account you are signed in to, and to manage your credit balance. Firebase Authentication is the record of who you are; the copy of your name and email in our database exists so that an account is readable without cross-referencing an internal id.

Voice recordings. The Application records audio only while you press or hold the mic button, and the keyboard shows plainly when recording is in progress. The recording is sent over an encrypted connection to our server in the European Union, and from there to Google Gemini (Google LLC), which converts it to text and, if you have chosen an output language, translates it. The audio file exists on our server only for the moment it takes to do this and is then deleted. It is never stored, never used to train any model by us, and never associated with your account beyond the credit that the request costs.

The transcribed text is not stored anywhere by us. It is returned to your device, typed into your field, and forgotten. Our request logs record that a transcription happened, the size of the audio, and which language mode was used, but never the audio itself or the text it produced.

GIF searches. The GIF panel is optional and does nothing until you open it. When you search in it, the word you type is sent to our server and forwarded to GIPHY (GIPHY, Inc., a Shutterstock company, United States), which returns matching results. We do not log search terms: our request log records the address of the request, which does not include what you searched for. The term is held in memory on our server for a few minutes so that the same search by anyone does not have to be repeated, and it is not written to any database, not attached to your account, and not retained after that.

The pictures themselves are loaded directly from GIPHY's servers to your device rather than through ours, so GIPHY receives your device's IP address and can see which results you loaded, in the same way as any website you visit. Results are restricted to GIPHY's most conservative content rating, which is enforced on our server and cannot be changed from the app.

Credit balance and credit history. Voxly runs on credits, so we store your balance in Firebase Firestore (Google LLC) together with a history of how it changed: the free credits granted when you signed up, credits added by a purchase, and a daily total of how many voice messages you used. The daily total is a count and a date. It does not contain what you said.

Purchase records. If you buy a credit pack, Google Play processes the payment. We never see your card or payment details. We record that the purchase happened, which pack it was, the number of credits, the Google Play order id, the country the purchase was made in, and the time, so the credits can be granted, a refund can be traced, and our accounts can be filed.

Device and technical data. Through Firebase Analytics (Google LLC) we may receive your device's IP address, operating system version, basic app usage events, and crash reports, which we use to keep the Application working and to fix faults.

Settings that never leave your device. Your chosen output language, keyboard theme, key size, and similar preferences are stored only on your phone. They are not sent to us and not restored if you reinstall.

3. What We Do Not Collect

• The text you type on the keyboard. The one exception is the GIF search box inside our own panel, which is described in section 2; text typed into other apps never reaches us.
• The text produced by a transcription.
• Your voice recordings, beyond the moment needed to transcribe them.
• Your location. We do not request or derive it.
• Your contacts, photos, files, or messages.
• Which applications you use Voxly in.

We do not sell personal data, and we do not use your data for advertising.

4. How We Use Your Information

• To turn your speech into text, and to translate it into the language you have selected
• To identify your account and keep your credit balance correct
• To grant credits you have paid for, and to handle refunds and payment disputes
• To keep the Application working and fix faults
• To meet legal obligations, including keeping accounting records

5. Third-Party Services

Each of these is governed by its provider's own privacy policy.

6. Microphone Permission

The Application requires microphone access for one purpose: to capture your voice so it can be turned into text. The microphone is active only while you press or hold the mic button, and the keyboard shows a clear recording indicator while it is. We never record in the background. If a recording is silent or too short, your device discards it and nothing is sent at all.

7. In-App Purchases

Voxly meters transcription with credits. New accounts receive a number of free credits, and a credit is only deducted for a successful transcription. Silence and failed requests cost nothing.

You can buy additional credit packs through Google Play. Payments are handled entirely by Google Play; we never receive or store your payment details. Purchases are verified with Google on our server before credits are granted. Credit packs are one-time purchases, not subscriptions, and are available in a limited set of countries.

8. Data Retention

9. Deleting Your Account

What is deleted: your account and sign-in credentials, your credit balance, your credit history, and your name and email address wherever we hold them. Unused credits are forfeited and cannot be restored.

What is kept, and why: the record that a purchase took place, including the amount, the Google Play order id, the country and the date. Accounting records have to be retained under Danish bookkeeping law, so these are not deleted. Your name and email are stripped from them at the moment you delete your account, leaving a financial record that is no longer tied to your identity.

10. Children's Privacy

The Application is not directed at children under 13, and we do not knowingly collect personal information from anyone under 13. Where the law sets a higher minimum age for consenting to data processing, which is up to 16 in parts of the European Union, you must meet that age or have your parent's consent to use the Application. If you believe a child has provided us with personal information, contact us and we will delete it promptly. GIF results are restricted to the most conservative content rating GIPHY offers, and that restriction is applied on our server so it cannot be turned off from the app.

11. Data Security

All traffic between the Application, our server, and third-party services uses HTTPS encryption. Every request to our server carries your Firebase session token and is rejected without it, and our database rejects writes from the app entirely, so your balance cannot be altered from a device. No method of transmission over the internet is completely secure, but we do not retain the data most worth stealing: your audio and your text are gone before the request finishes.

12. Where Your Data Is Processed

Our server is located in the European Union. Google's services, including Firebase and Gemini, may process data outside the EU under Google's own safeguards and contractual terms. Your voice recording travels from your device to our EU server and on to Google for transcription, and is deleted immediately afterwards.

GIF search is provided by GIPHY, Inc. in the United States. A search term you type in that panel, and your IP address when the pictures load, are therefore processed outside the European Union. This applies only if you open that panel; it does not affect transcription, which stays within our EU server and Google's infrastructure.

13. Your Rights

Depending on where you live, including under the GDPR, you have the right to access, correct, delete, or receive a copy of your personal data, and to object to or restrict its processing. In practice you can:

• Delete your account and data yourself, in Settings under Privacy & data
• Sign out at any time
• Uninstall the Application to stop all data collection
• Revoke microphone access in your Android settings, which disables voice input but leaves the keyboard working for typing
• Email us to exercise any other right, or to complain

If you are in the EU and believe we have handled your data improperly, you may also complain to your national data protection authority. In Denmark this is Datatilsynet.

14. Reporting a Problem

Speech recognition can get things wrong, and a translation can come out badly. If Voxly produces output that is wrong, offensive, or harmful, report it from Settings, under Privacy & data, then Report a problem, or write to the address below. Include what was produced so we can look into it.

15. Changes to This Policy

We may update this Privacy Policy, for example when a feature is added or removed. Significant changes will be reflected in the effective date at the top of this page. Continued use of the Application after a change constitutes acceptance of the updated policy.