Privacy policy.

1. Information we collect

1.1 Text you send to a shortcut

When you tap a shortcut in the PromptPad keyboard, the keyboard reads the text in the field you're typing in so it can rewrite, translate, summarize or reply to it. What happens next depends on the model selected in Settings:

• On-device model (default): processing happens entirely on your iPhone using Apple's on-device model. The text is not sent to us or anyone else.
• Cloud model: the text, together with the shortcut's instruction, is sent over an encrypted connection to our server, which forwards it to the AI provider and returns the result. Our server does not store or log your text. The AI provider processes it under its own terms (see Section 4).

The "Try it" sample in the shortcut editor works the same way and uses the model shown there.

When you tap Apply or use instant replace, the keyboard replaces the text in your field with the result. PromptPad does not copy your text or results to the clipboard.

1.2 Your shortcuts and settings

Your shortcuts (name, emoji, instruction, color, folder, order, on/off state) and your app settings (for example key sound, haptics, shortcut action, AI model and keyboard languages) are stored on your iPhone.

If you sign in, they are also stored in your account so they can be backed up and synced across your devices.

1.3 Account information (only if you sign in)

PromptPad uses Sign in with Apple. When you sign in, Apple provides us with a user identifier and, depending on your choice, your email address or an Apple private relay address. We use this only to create and run your account. We do not receive your Apple ID password.

1.4 Device and usage identifiers

• App install identifier: a random ID created by the App and kept in your iPhone's Keychain. It is not linked to your name and is used to count free cloud AI runs, apply fair-use limits and prevent abuse. Because it is stored in the Keychain, it can persist if you reinstall the App.
• Purchase identifier: an anonymous ID created by RevenueCat, our subscription provider, used to check whether you have PromptPad Pro.

1.5 Cloud AI usage records

Each cloud AI request creates a usage record containing: the install identifier, your account ID (if signed in), the model used, whether the request succeeded, Pro status, token counts, estimated cost, response time, app version, platform, an error code (if any) and the time. Usage records never contain your text, the result, or your shortcut's instruction. We use them to enforce free-plan and fair-use limits, prevent abuse and manage costs.

1.6 App analytics

We use TelemetryDeck, a privacy-focused analytics service, to understand how the App is used. It collects anonymized signals, including:

• app sessions and new installs;
• onboarding steps viewed and completed, and your answer to the "How was that?" question;
• whether the keyboard is enabled and has Full Access;
• shortcuts added or deleted (and whether they came from the library), and how many shortcuts you've run in total;
• paywall views, purchases and restores;
• settings you change;
• when a review prompt was requested;
• standard technical details such as app version, iOS version, device model, language and region.

TelemetryDeck uses an anonymized identifier, not your name, email or account ID. Analytics never include what you type, and the keyboard extension sends no analytics.

1.7 Purchases

Subscriptions are processed by Apple through the App Store. We do not receive your payment details. RevenueCat receives your anonymous purchase identifier and App Store transaction information so we can unlock Pro features.

1.8 Support and feedback

• If you email us (for example through Contact Us), we receive your email address and whatever you include in your message.
• Request a feature opens our feedback board, hosted by Featurebase. Anything you post there is handled under Featurebase's privacy policy.

1.9 Information we don't collect

We don't collect your location, contacts, photos, health data, advertising identifier or browsing history. We don't track you across other companies' apps or websites.

2. Keyboard Full Access

iOS asks you to allow Full Access for the PromptPad keyboard. Full Access is required so the keyboard can:

• reach the internet when you choose a cloud AI model; and
• share your shortcuts and settings between the PromptPad app and the keyboard.

The keyboard only reads the text in a field when you tap a shortcut. It does not record your keystrokes, does not send anything while you're simply typing, and does not use the clipboard.

3. How we use information

We use the information above only to:

• run the App and its features, including producing shortcut results;
• back up and sync your shortcuts and settings when you're signed in;
• check your subscription and apply free-plan and fair-use limits;
• prevent abuse and keep the service secure;
• understand, in aggregate, how the App is used so we can fix problems and improve it;
• respond to your support requests.

We do not sell your personal data, share it for advertising, or use your text to train AI models.

4. Service providers we use

We share information only with providers that help us run the App:

According to OpenAI's API data policy, data sent through its API is not used to train its models by default. Each provider processes data under its own privacy policy and terms.

We may also disclose information if required by law, or to protect the rights, safety or security of our users or the App.

5. Where your data is stored

Your synced data and usage records are stored with Supabase in the European Union (Ireland). Some providers, such as OpenAI, RevenueCat, TelemetryDeck and Featurebase, may process data in the United States or other countries. Where data leaves your country, we rely on our providers' safeguards for international transfers, such as Standard Contractual Clauses.

6. How long we keep data

• Text you send to a shortcut: not kept. It is discarded as soon as the result is returned.
• Shortcuts and settings: kept on your iPhone until you delete them or the App. In your account, kept until you delete them or your account.
• Account information: kept while your account exists and deleted when you delete your account.
• Cloud AI usage records: kept for up to 24 months, then deleted. When you delete your account, your account ID is removed from them, leaving records that are no longer linked to you.
• App install identifier and run counter: kept to enforce free-plan limits, and not linked to your account after you delete it.
• Analytics: retained by TelemetryDeck under its retention policy, in anonymized form.
• Support emails: kept as long as needed to help you, then deleted.

7. Your choices and rights

• Use PromptPad without an account. Signing in is optional.
• Keep your text on your iPhone by choosing the on-device model in Settings > AI > Model.
• Delete your account: Settings > Data > Delete account. This deletes your account and your synced shortcuts and settings from our servers, and the shortcuts on that iPhone. Usage records are kept without any link to you, as described above. Keyboard preferences stay on your device until you delete the App.
• Delete local data: when signed out, Settings > Data > Delete all data removes the shortcuts on your iPhone.
• Export your shortcuts: Settings > Data > Export my data.
• Turn off Full Access at any time in iOS Settings > General > Keyboard > Keyboards > PromptPad. Cloud AI will stop working without it.
• Cancel a subscription in your Apple account settings. Deleting your PromptPad account does not cancel it.

Depending on where you live (for example under the EU/UK GDPR or California law), you may have the right to access, correct, delete, restrict or object to the use of your personal data, to receive a copy of it, and to complain to your local data protection authority. To make a request, email hello.promptpad@gmail.com. We'll respond within 30 days.

Legal bases (EU/UK users): we process your data to provide the App you asked for (contract), for our legitimate interests in securing, improving and preventing abuse of the App (analytics, usage records, fair-use limits), and to meet legal obligations.

8. Security

Data is sent over encrypted connections (HTTPS/TLS). Our database restricts access so that only our server can read usage records, and your synced data is accessible only through your account. No system is perfectly secure, but we work to protect your information and keep what we collect to a minimum.

9. Children's privacy

PromptPad is not directed at children under 13 (or the minimum age in your country), and we don't knowingly collect their personal data. If you believe a child has given us personal data, contact us and we'll delete it.

10. Changes to this policy

We may update this policy as the App changes. We'll update the "Last updated" date above and, for significant changes, let you know in the App or on this page.

11. Contact us

Ali Naranjisani (PromptPad) Email: hello.promptpad@gmail.com