Privacy Policy

Effective 3 October 2026

Glyf is a keyboard for iPhone and Android, with an app that sets it up. It is made by Arpit Singh (“Glyf”, “we”). This page says what Glyf collects, why, who else handles it, and how to delete it. Questions: arpit@tryglyf.com.

The short version

• What you type stays on your phone unless you use a feature that needs our server: AI features, search and translation, and AI suggestions as you type if you agree to them.
• We don’t keep the text you send, unless you share it as a page. Our server logs that something ran and how long it took, never your words.
• Your saved details, notes, clipboard, contacts, calendar and learned words stay on your phone.
• We don’t sell your data, show ads, or track you across other apps.
• Google data (from Sign in with Google, Google Calendar and Google Meet) is used only for those features, is never sent to an AI model, and is never used to train one.
• AI requests go only to providers that don’t keep or train on what they are sent.
• You can have your account and its data deleted at any time.

What stays on your phone

These are kept on your device and never sent to us:

• Your vault: the details you save, such as your address or payment ID, encrypted on the device.
• Notes, shorthand, and the words the keyboard learns from your typing.
• Clipboard history, and the screenshots from the last two days it shows (with the photo permission).
• Contacts, when you let the keyboard search them.
• Your calendar, when you let the keyboard show it and add events to it.
• Dictation, which is turned into text on the device.
• Keyboard settings and game scores.

What the keyboard sends, and when

On iPhone a keyboard reaches the internet only with Full Access; on Android it can by default. Glyf uses it only for the features below; everything else you type stays on your phone. The app shows this list on a “What Glyf sends” screen before the keyboard is turned on, and nothing marked “only if you agree” is sent until you do.

• AI features you start. When you hold the space bar, tap Rewrite, ask Glyf, hold a Glyf key or translate, the text involved goes to our server and to an AI model to produce the result.
• AI suggestions as you type, only if you agree. When you pause while typing, the sentence you are typing (up to its last 120 characters) is sent to suggest one action, such as “Tidy this up”. It is sent with the kinds of details in your vault (for example “address”), never the details themselves. Never from password fields, and on Android never from a field that asks for no learning, such as an incognito tab. Turn it on or off in the Glyf app under Profile, Keyboard, AI suggestions as you type.
• Your saved details, only if you agree. With “Let AI use your saved details” on, each AI request you start carries the details you saved (your name, email, phone number, address, payment ID, links, social handles, company and bio) so an answer like “send them my address” can fill them in. Turn it off under Profile, Keyboard.
• Search. What you search in the keyboard’s Search, YouTube and Maps tabs goes to our server and our search providers to find results.
• Location. With Nearby search on, your approximate location (to about a kilometre) is kept on your phone and sent with searches that need it, like “coffee near me” or the weather. We don’t store it.

Before any text reaches an AI model, card numbers, one-time codes, passwords and keys in it are replaced with placeholders, and put back only in the answer you see. Results may be held in memory for up to a day so the same request isn’t run twice; they are never written to a database.

One exception: when you hold the space bar on a search for places and send the list, Glyf saves it as a page with a link, holding the words you typed as its title and the places found. Anyone with the link can open it.

Another: when you report an AI result with the flag beside it, we keep that result, what kind of request made it, your account and your phone’s random ID, so we can look into it and fix what went wrong.

Your account

You sign in with Apple or Google. We receive and keep your account ID from Apple or Google, your email, your name if you share it, how you signed in, your phone’s platform, app version, language, region and time zone, and when you joined and were last seen. We also keep your plan, the keyboard settings that aren’t private, the kinds of details in your vault and how many notes and shortcuts you have (never their contents), and app activity such as which screens you open, as names and counts, never text. We use this only to run your account, keep daily limits fair, and improve Glyf’s features.

Your phone also has a random ID, used to count requests when you are signed out and to keep the Glyfs you build. Glyfs you build are saved on our server; the ones you publish can be seen and added by others.

To stop one person using up the service, we count requests per account, or per phone when signed out, for a day. Those counts are deleted after two days.

Who else handles your data

• AI providers. The text you choose to run an AI feature on, and with Suggestions on the sentence you are typing, is sent through OpenRouter to the model that answers: Qwen, Ling or Gemini, served by providers such as Alibaba Cloud, Novita and Google. Every request tells OpenRouter to use only providers that don’t keep or train on what they are sent, and Glyf uses no free AI tiers. They process it only to return the result to you. No Google user data is ever sent to an AI provider.
• Search and maps. Your search goes to providers such as Google (Places and YouTube), Geoapify and Wikipedia to find results.
• GIFs and stickers. Searches in the emoji board go from your phone straight to KLIPY, with a random ID of their own so KLIPY can show the GIFs you used recently.
• Booking. When you book a time on someone’s Cal.com page, the name, email and guests you enter are sent to Cal.com through our server, and Cal.com emails the invitations.
• Google Calendar and Meet. If you connect Google, the keyboard adds events to your Google Calendar and makes Meet links directly from your phone; see Google user data below.
• Temporary email. A throwaway address comes from mail.tm, which your phone reaches directly: it receives only the address and password Glyf made up for it, and the inbox is read onto your phone.
• Prices. A cashtag such as $SOL, or a wallet address you copy, is looked up for its price through our server, which asks Jupiter. Exchange rates for money in the strip are the European Central Bank’s, which our server fetches from Frankfurter with nothing of yours attached.
• Wallet. If you use Glyf’s wallet, signing is handled by the wallet app you choose, such as Phantom; Glyf never holds your keys. Transactions you sign go to the Solana network through our server, which passes them on without storing or logging them; swaps you start go from your phone to Jupiter, and private sends to MagicBlock. Blockchain transactions are public by nature.
• Hosting. Our server runs on Railway, our database on Neon, and this website on Vercel.

We share data with these services only to provide the feature you are using.

Google user data

Glyf asks Google for access only when you turn on a feature that needs it:

• Sign in with Google: your Google account ID, name and email address, to create your Glyf account and sign you in.
• Google Calendar (permission to see, create, change and delete events on calendars you own): to add the events you create in the keyboard to your Google Calendar, invite the guests you name, and change or delete those events when you ask.
• Google Meet (permission to create Meet conferences): to make a Meet link when you ask for one, for an event or for a message.

How Glyf handles it:

• Calendar and Meet requests go straight from your phone to Google, and the access Google grants is stored only on your phone. Glyf’s servers never receive your calendar events or your Meet details.
• Glyf uses Google user data only to provide and improve these features for you. It is not used for advertising, it is not sold, and it is not used to build a profile of you.
• Glyf never sends Google user data to any AI model or AI provider, and never uses it, raw, aggregated or derived, to develop, improve or train AI or machine-learning models.
• Glyf does not transfer Google user data to anyone, except as part of a feature you ask for (such as an event’s details put into your message) or where the law requires it. No person reads it.
• You can turn Calendar or Meet off at any time in the Glyf app under Profile, Connected tools, and remove Glyf’s access at myaccount.google.com/permissions.

Glyf’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. The use of raw or derived user data received from Google Workspace APIs will adhere to the Google Workspace API User Data and Developer Policy, including the Limited Use requirements.

The waitlist

If you join the waitlist on this website, we keep your email and where you signed up, to tell you when Glyf launches. Email us to be removed.

Deleting your account and data

Email arpit@tryglyf.com from the address on your account and we will delete your account, its settings and its activity from our server within 30 days, or send you a copy. What is stored on your phone stays until you delete the app.

Children

Glyf is not meant for children under 13, and we don’t knowingly collect their data. If you think a child has given us data, email us and we will delete it.

Security

Everything Glyf sends travels over encrypted connections, your vault is encrypted on your device, and sessions are signed so only you can use them. No system is perfectly secure, but we keep what we hold to the minimum.

Your rights

Depending on where you live, you may have the right to see, correct, delete or take a copy of your data, and to object to how it is used. Email arpit@tryglyf.com and we will answer within 30 days.

Changes

If this policy changes, we will update this page and the date at the top, and tell you in the app when the change matters.