Privacy Policy
Effective July 10, 2026 · Typesfast is made by Synth Inc. · privacy@typesfast.ai
The short version
• Typesfast sends the text you're typing to our server only to fix your typos, and only if you turn on Full Access. Without Full Access, the keyboard still works — corrections just happen on-device.
• We don't store what you type. Correction requests are processed in memory and discarded.
• Nobody trains AI on your typing. Not us, not our AI provider — their terms exclude your text from any model training or product improvement.
• No account, no identity. We never ask for your name or email. To us, you're a random ID.
• No ads, no selling data. What you type is never used for advertising and never sold. Full stop.
• Words the keyboard learns from you (your personal dictionary) never leave your device.
The long version follows.
Who we are
Typesfast is an iOS keyboard by Synth Inc. This policy covers the Typesfast app and keyboard extension, and our servers that power corrections.
What the keyboard sends, and why
When you pause typing, the keyboard sends the current text and a small amount of surrounding context to our server, which uses an AI model to return a corrected version. Specifically, a correction request contains:
• the text you're currently typing and nearby context from the text field,
• which words you typed vs. what on-device autocorrect substituted (so we can undo bad autocorrections),
• a random installation ID and your subscription tier (to enforce quotas).
This only happens if you grant Full Access (iOS requires this permission for any keyboard that uses the network). If you don't grant it, nothing you type ever leaves your device and the keyboard falls back to on-device corrections.
iOS shows a strong warning when you enable Full Access for any keyboard. Here's what we actually do with that access: the correction requests described above, and nothing else.
What happens to your text
1. Your text travels over an encrypted connection (TLS) to our server, hosted on Heroku (Salesforce) in the United States.
2. Our server forwards it to Cerebras, our AI inference provider, which runs the correction model on US infrastructure and does not retain your text — their policy: "We do not retain inputs and outputs associated with our … inference … Services."
3. The corrected text is returned to your keyboard, and the request is discarded. We do not write your text to databases or logs.
Retention: zero for typed text. Your text exists in our server's memory only for the duration of the request (typically under a second) and is never written to disk — by us or by our inference provider.
What we will never do with your typing
• We will never use your typed text to train AI models, and our providers' terms exclude your text from model training.
• We will never sell your data.
• We will never use anything you type for advertising.
• We will never share your text with anyone except the processors listed below, who act only on our instructions. (Legal requests can't reach what we don't store — see "Legal requests" below.)
No accounts, no identity
Typesfast has no sign-up. We identify your installation with:
• a random installation ID generated on your device,
• an Apple DeviceCheck token — an anonymous, Apple-encrypted token used to prevent free-quota abuse. Apple never reveals your device's identity to us; we can only read two true/false flags from it,
• if you subscribe, an App Store transaction record from Apple. Apple never shares your name, email, or payment details with us.
We couldn't tie your typing to your real-world identity even if we wanted to.
Analytics and crash reports
To understand how the keyboard is used and fix crashes, we collect pseudonymous usage data — things like "keyboard opened", session length, layout used, and whether a suggestion was accepted. Analytics events never contain the content you type. They're identified only by a random ID.
• PostHog (US): product analytics. You can turn this off entirely in Settings → Usage analytics.
• Google Firebase: crash reports (Crashlytics, kept 90 days), push notification delivery, and remote configuration.
• Google Analytics for Firebase: app usage statistics, retained 2 months (Google's default setting).
What stays on your device
• Your personal dictionary — words the keyboard learns from your typing — is stored locally and never uploaded.
• Downloaded dictionaries come from a public word-frequency dataset; that download sends no personal data.
Our processors
• Cerebras Systems — AI correction inference (US). No retention of inference inputs/outputs, per their privacy policy.
• Salesforce (Heroku) / AWS — server hosting (US). ISO 27001, SOC 2; Salesforce data processing terms.
• PostHog — product analytics (US). SOC 2 Type II; PostHog data processing terms.
• Google (Firebase) — crash reporting, push, config, analytics (global). ISO 27001, SOC 2; Firebase Data Processing Terms.
• Apple — DeviceCheck and App Store purchases. Platform provider.
Your choices and rights
• Turn off Full Access any time in iOS Settings → General → Keyboard — the keyboard keeps working on-device.
• Turn off analytics in the Typesfast app settings.
• Delete your data: contact privacy@typesfast.ai with your installation ID (shown at the bottom of the Typesfast app's Settings screen — tap it to copy) and we'll delete your server-side records (quota counters and subscription records — remember, we don't store your text).
• Depending on where you live (e.g., EEA/UK under GDPR, California under CCPA), you may have rights to access, correct, delete, or port your personal data, and to lodge a complaint with a supervisory authority. We honor these requests at privacy@typesfast.ai. We do not "sell" or "share" personal information as defined by the CCPA.
Legal requests
Like every company, we comply with valid legal process — subpoenas, warrants, and court orders. Here's what that means in practice:
We can only produce what we have. Because your typed text is not stored on our servers, it cannot be included in any disclosure — there is no historical record of your typing to hand over. The complete list of what a valid legal request could reach:
• your random installation ID and quota counters,
• subscription records from Apple (product, dates — never payment details),
• pseudonymous analytics events and crash reports described above.
None of these contain the content you type.
Compelled retention. In rare circumstances, a court or law-enforcement agency can require us to preserve information we hold. Typesfast is designed so that typed text is never stored in the first place — in most cases, the data sought simply does not exist on our systems. If the law ever required us to change what we retain, we would update this policy to reflect it.
We disclose only what we are legally required to provide.
Children
Typesfast is not directed at children under 13, and we do not knowingly collect personal information from them.
Changes
We'll post any changes here and update the effective date. Material changes will be announced in the app.
Questions? privacy@typesfast.ai