Klavi — Privacy Policy

The Klavi apps for Windows, Android, iPhone and Mac and the keyboard.antontarasov.pro website: voice typing, ✨ actions, quick replies and company data for employees.
Version of October 31, 2026.

1. Who we are

Seller and controller of personal data: ФОП Бойко Надія Олексіївна (Nadiia Oleksiivna Boiko, individual entrepreneur) (Ukraine), tax ID 2682213026. E-mail: support@klavi.app, phone: +380 50 741 45 46. Website: keyboard.antontarasov.pro.

If you use the app for yourself, we are the controller of your data. If a company gave you the app, the company is the controller of its team's data and we process it on the company's behalf (section 7).

2. What data there is

• Dictation audio — only while you have turned on 🎤 yourself; it goes to the speech service and comes back as text.
• Recognized text and the text for ✨ actions, translation and “Final text” — it goes to the AI service and comes back finished.
• What the keyboard has learned (your personal dictionary, replacements from your corrections), the clipboard and the dictation history — on your device. With an account, your quick replies and learned rules sync between your devices. If you turn on the shared clipboard, a copy goes through our server encrypted, only to the devices you tick that use the same e-mail, and lives for 1 hour; passwords and SMS codes are never sent.
• Account and licence: e-mail, name, Google or Apple ID, plan, devices, payment history. We never see your card details — the payment service handles them.
• Usage counters — numbers only: seconds, words, tokens, service; no text.
• Feedback you write yourself (section 10), and company data if you work in a team: quick replies, catalog, the list of employees (e-mails), service keys.
• Crash and slow-dictation reports — technical data only: the error's type and trace, timings, engine, network type, app version, system and device model; no text and no audio (section 11).
• Server technical logs: IP address, time and the address requested — no text and no audio.

If you tap “Sign in with Google”, the app receives only the basic account data: your email address and name (the openid, email, profile permissions). The app never sees your password — you sign in on Google's page or in Google's window. The app has no access to your mail, files, contacts or any other Google data.

If you sign in with Apple, the app receives your email address (or Apple's hidden address, if you chose that) and your name.

Signing in is needed for the licence and the trial, for working in a team and for syncing your quick replies and rules. Without signing in, the app works with your own keys or recognizes on the device.

We do not collect your contacts, location, SMS or files.

3. Where audio and text go, and why

To give you the result right now, audio goes to a speech service and text goes to an AI service: Soniox, OpenAI or ElevenLabs. With your own key, the app talks to them directly. With “our tokens” or a company key, requests to OpenAI pass through our server, and for Soniox the server issues a temporary 60-second key and the audio goes directly. Our server holds the audio and text only in memory while it waits for the answer; it never writes or stores them.

We do not train models on your data. OpenAI, Anthropic and Soniox do not train on data sent through their API. ElevenLabs may train on data by default — so we use it only with training turned off on our account; if you connected your own ElevenLabs key, turn training off in its settings.

• OpenAI: does not keep audio sent for recognition; keeps text for up to 30 days in abuse-monitoring logs, then deletes it. We ask OpenAI not to store responses.
• Soniox: does not keep streaming recognition; our server deletes “☁ Phrases” files at Soniox right after the answer, and with your own key Soniox deletes them itself after 30 days.
• ElevenLabs: only with training turned off; retention follows its policy.
• Anthropic (Claude): reviews the feedback you sent; keeps it for up to 30 days.
• Offline, recognition runs on the device and nothing is sent.

Other providers: Google Firebase (sign-in, your quick replies and “Klavi Cloud” data), Hetzner (our server in Germany). Payments are handled by Paddle, Monobank, the App Store and Google Play — as separate controllers, under their own policies.

4. What we keep, and for how long

On our side:

• audio, dictated text and ✨ texts — nowhere, 0 days;
• account, licence, plan — until you delete the account;
• payment records — 3 years (tax records);
• usage counters (numbers only) — 24 months, then monthly totals only;
• feedback — up to 2 years after it is closed, spam — 90 days;
• server logs: IP addresses — 14 days, the abuse-protection log — 24 hours;
• crash and slow-dictation reports — 90 days, then they are deleted;
• database backups — 30 days;
• your quick replies, learned rules and profile in Firebase — until you delete them; only you can see them;
• company keys — encrypted, until the administrator deletes them; nobody sees them in full.

5. What is stored on your device

• settings, your personal quick replies and dictionary, the activity log (contains recognized text);
• on Windows — the last 40 phrases as sound files, for tuning the quality; they can be deleted at any time;
• access keys and sign-in data — in the system's encrypted storage (Windows DPAPI, Android Keystore, Keychain on iPhone and Mac), available only to you on this device;
• a copy of the company's quick replies — also encrypted, to work without the internet.
• in password fields and “private” fields (browser incognito, banking apps) the keyboard remembers nothing, and there is no 🎤 in a password field.

6. What only you turn on

• The keyboard learns from your corrections on the device only.
• “Send to improve” is off by default. Only if you turn it on: “AI review of my corrections” — only the corrected words with a few words around them are sent, numbers and contacts are hidden, nothing is stored; “Anonymous quality stats” — numbers only, no text.
• You can turn it off at any time with one tap in the settings, the “Privacy” section. Paid features work the same with or without this consent.
• We do not sell data or share it for advertising; the app has no ads and no third-party analytics. The QR-code scanner on Android (Google ML Kit) sends technical metrics to Google under Google's rules.

7. Companies

If a company gave you the app, the team's data (quick replies, catalog, the list of employees, dictation through the company's keys, reports) belongs to the company: it is the controller, we are the processor and act only on its instructions. Company data is kept in the company's own Firebase or in “Klavi Cloud”. The company's administrator does not see your personal rules or dictation. A request about company data that reaches us is passed on to the company.

• to delete your email from the company's list and log, contact the company's administrator or write to support@klavi.app.

8. Your rights and deleting your data

• You have the right to get a copy of your data, correct it, delete it, restrict or object to its processing, move it elsewhere and withdraw your consent — at any time; withdrawal does not affect what was already done.
• You can have your account and all data deleted now by writing to support@klavi.app from the account's address: we will answer and delete within 30 days. “Download my data” and “Delete account” buttons in the app and in “My account” are coming soon.
• After deletion only payment records remain — for 3 years, as tax law requires; an active subscription is cancelled. Backups are cleared within 30 days.
• You delete your feedback yourself: “My account” → “My feedback”.
• You can complain to the data-protection authority of your country; in Ukraine it is the Ukrainian Parliament Commissioner for Human Rights.

• “Sign out” in the app's settings deletes the sign-in data and the copy of the company's quick replies;
• uninstalling the app removes all local data (on Windows, also the %APPDATA%\UkrainianVoiceTyping folder);
• to revoke the app's access to your Google account — on the myaccount.google.com/permissions page; to your Apple ID — in the Apple ID settings, the “Sign in with Apple” section;

9. Transfers outside the EU

We operate from Ukraine; our server is in Germany. The speech and AI services run mostly in the USA. Data is transferred to carry out your request (our contract with you), under the data-processing agreements and EU standard contractual clauses these providers offer.

10. Ideas and problems you send us

If you send an idea or a problem (“Have an idea or a problem?” in the app or in “My account”), we keep the text you wrote, your account email, the app and its version, and device details (model, system, language) only if you tick the box. Dictated text, the activity log and text from other apps are never attached. When an entry arrives, a small OpenAI model sorts it automatically by type and urgency (OpenAI processes the text on our behalf, does not store it for us and does not train on it); entries are then reviewed with the help of Claude (Anthropic processes them on our behalf).

Your text is never published: voting and the release notes show only our neutral summary, and a name only the one you typed yourself and only if you agreed (you can take this back at any time). Entries are kept for up to 2 years after they are closed; spam and rejected ones for 90 days. You can delete your entries at any time in “My account” → “My feedback”.

11. Crash reports and slow dictation

So that the app stays stable, it keeps a small technical log on your device — starts, settings screens opened, the start and end of a dictation, the engine and a switch to a backup or to recognition on the device, network errors — and sends our server reports about crashes, dictation that took too long or came back empty, and switches to a backup. A report holds only the event type, times in milliseconds, the length of the audio, the engine, the network type (Wi-Fi, mobile, none), the error's technical trace, the app version, the system, the device model, the interface language and a random installation ID. It never holds the dictated text, the audio, the contents of fields, your contacts or your e-mail, and our server does not keep your IP address.

The “Send crash and slow dictation reports” box in the settings, the “Privacy” section, is on by default; one tap turns it off, and nothing is sent after that. After a crash, at the next start the app asks “The app closed because of an error. Send a report?” with “Send”, “Don't send” and “Always send”; a crash report leaves the device only after you have answered at least once.

Legal basis: our legitimate interest in keeping the app you use stable (GDPR Art. 6(1)(f)); you can object at any time by turning the box off. Reports are kept on our server in Germany (Hetzner) for 90 days and then deleted; we do not use third-party crash services. “Delete sent reports” in “Privacy” removes your device's reports from our server at once; you can also ask for it by e-mail.

12. Children

The app is made for work and is not intended for children under 16 (under 13 where the age of consent is lower). We do not knowingly collect children's data; if we learn of such data, we delete it.

13. Security

Keys on the device are kept in the system's encrypted storage. Every connection uses HTTPS only. On the server, the databases are closed to the internet, company keys are encrypted and only administrators have access. Text and audio never get into the logs.

14. Incidents and vulnerabilities

If a breach happens, we stop it, inform companies within 48 hours, the data-protection authority within 72 hours if people are at risk, and you if the risk is high. Report a vulnerability to support@klavi.app (see security.txt).

15. Google's user data policy

The app's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

16. Contacts and changes

Privacy questions and data requests: support@klavi.app.

Changes to this policy are announced on this page with the date of the new version, and important ones also in the app or by e-mail.