Privacy Policy

1. Scope

This policy applies to the MOJIKEY app and keyboard, including Chinese and English input, suggestions, the user dictionary, input preferences, clipboard text and local clipboard history, user-triggered text AI features such as Reply, Rewrite, Super Talk, Opening, and Translate, account registration and sign-in, verification, device security, and the infrastructure required to operate these services. Third-party apps, websites, and services are governed by their own privacy policies.

2. Features not available in the first release

The first public release does not enable speech-to-text, microphone recording, image upload, photo or media-library access, image recognition, Read TA image analysis, AI sticker generation, or a local AI sticker library. It therefore does not request microphone or photo/media permissions for these features and does not collect or upload voice recordings, photos, or images through them. Ordinary local image copy, paste, or sharing is handled by Android and the destination app and does not mean that MOJIKEY uploads the image to its AI service. We will update this policy and obtain any consent required by law before enabling these features in the future.

3. Keyboard input

Ordinary keystroke processing, candidate generation, Chinese and English input, the user dictionary, and input preferences are processed primarily on your device. Text is not uploaded merely because you open or use the keyboard. Text leaves the device only when you deliberately invoke a text AI feature, when transmission is necessary to complete a service you explicitly request, or when required by law. Text AI, clipboard, and activity-reporting behavior is restricted in password fields and private input mode.

4. Clipboard

MOJIKEY may read text from the Android clipboard to provide copy, paste, local clipboard history, and Reply. Clipboard history is stored locally and can be viewed, deleted, or cleared by you. Product settings may limit the number of saved entries or automatically remove information identified as sensitive. Clipboard text is sent to online AI services only after you select it and deliberately invoke a text AI feature. Do not submit passwords, verification codes, payment-card details, identity numbers, medical data, trade secrets, or other sensitive information that you do not want a third party to process.

5. Text AI

When you deliberately use Reply, Rewrite, Super Talk, Opening, Translate, or a similar text feature, we may process the text you enter, select, or choose from the clipboard; translation direction; selected tone, style, persona, or relationship context; and technical parameters needed to complete the request. The content is sent through the MOJIKEY service at mojikey.app to DeepSeek for language-model inference. The MOJIKEY server is designed not to retain your AI prompt text or the generated response body, but may retain non-content operational records such as an opaque request ID, use case, model and prompt-template version, input and output token counts, latency, cost, cache status, errors, rate-limit or security events, and pseudonymous account or device metrics. DeepSeek may process request content under its own policies and applicable law. Only submit content that you are entitled to provide. AI output may be inaccurate or unsuitable; review it before sending, publishing, or relying on it.

6. Reporting AI content

You can report AI-generated content that you believe is illegal or violates our content rules from the More tab of the app, without leaving it. When you report, we may process the category you select, your description, the app version, a device identifier, and, when you are signed in, your account identifier. We use this information only to review and handle the report, investigate violations, and take measures where required by law or our rules. Reports are reviewed by people, and we respond within the period required by applicable law. Please do not include personal information about yourself or anyone else in the description.

7. Account and security information

When you register or sign in, we may process your email address, user ID, verification code and status, language preference, device ID and public key, platform and app version, session and refresh credentials, sign-in time, rate-limit records, and necessary security-event information. Passwords are not stored in plain text. Password verification information is securely derived, while credentials and signing keys on your device are protected using Android Keystore or encrypted storage. We use this information for registration, sign-in, authentication, session management, account protection, and service security.

8. Keyboard activity status

For a signed-in user, opening the keyboard outside password fields and private mode may send an empty activity request at most once per day. It does not contain typed text, clipboard content, editor content from the current app, images, or audio. The server may record the latest keyboard and device activity time to maintain the service, account state, and necessary usage statistics.

9. Device permissions

The first public release may use Internet access for accounts, verification, text AI, security checks, and service communication; notification permission for necessary account or service notices; and vibration permission for keyboard haptic feedback. It does not request microphone permission or photo/media access for image AI. You can review or disable permissions in Android settings. Disabling a permission may prevent the dependent feature from working but does not affect unrelated functions.

10. Local storage and system backup

Input settings and preferences, the user dictionary, clipboard history, basic account state, credentials, caches, and security material may be stored locally. If Android backup or device migration is enabled, some settings, dictionary data, and preferences may be backed up or transferred by Android or Google according to your system configuration and the policies of those services. You can remove local data through MOJIKEY settings, Android app settings, clearing app data, or uninstalling the app.

11. Third-party services

We may use Cloudflare for network access, server infrastructure, databases, email delivery, security protection, and anonymous or pseudonymous operational analytics; DeepSeek for user-triggered text AI inference; and Android, Google, or an app-distribution platform for backup, device migration, installation, updates, and distribution depending on your device and installation channel. We provide only information necessary for the relevant service and use reasonable contractual, security, or configuration controls. An independent provider may also process data under its own privacy policy. We do not sell your personal information.

12. Retention

We retain personal information only as long as needed for the purposes described here or as required by law. Local settings, dictionary data, and clipboard history remain until you delete them, clear app data, or uninstall the app. Account information remains until account deletion or service termination. Sessions and security credentials remain until expiry, sign-out, or revocation. Verification and rate-limit data is retained briefly and removed under server cleanup rules. Non-content metering, security, and audit records are retained only as necessary for statistics, billing, security, disputes, or legal duties. When retention ends, information is deleted or anonymized.

13. Security

We use reasonable safeguards such as encrypted transmission, password hashing, encrypted credential storage, Android Keystore, access control, rate limiting, anomaly detection, security auditing, and pseudonymization or de-identification of selected metrics. No Internet service can guarantee absolute security. If an incident may affect your rights, we will take remedial measures and provide notice as required by applicable law.

14. Your rights

Subject to applicable law, you may request access, a copy, correction, deletion, account closure, withdrawal of consent, restriction or objection to certain processing, and an explanation of our processing rules. Withdrawal does not affect processing lawfully completed before withdrawal. You may use available device or app controls or contact us below. We may verify your identity before fulfilling a request.

15. Account deletion

To delete your MOJIKEY account, visit the account deletion page or email support@mojikey.com. After verification, we will delete or anonymize your email address, password verification information, active sessions, device credentials, and other deletable account data. We may retain anonymized statistics and evidence necessary for billing, security auditing, fraud prevention, disputes, or legal obligations. Account deletion does not automatically remove local data; clear the app data or uninstall MOJIKEY if you also want to remove local settings, dictionary data, and clipboard records.

Request Account Deletion

16. Children

MOJIKEY does not independently offer accounts or text AI services to children under [Applicable age, for example 13 or 14]. If you are below the applicable age, use the service only after your guardian has read and agreed to this policy. A guardian who believes information was provided without appropriate consent may contact us to request handling or deletion.

17. International data transfers

Cloud infrastructure or AI providers may process data outside your country or region. Where this constitutes a regulated cross-border transfer, we will provide required notice, obtain separate consent where required, enter required contracts, conduct security assessments, or take other legally required measures. Before a public launch in Mainland China, [Cross-border recipients, locations, purposes, information categories, and rights-request methods] must be confirmed against the actual server and provider arrangements.

18. Policy updates

We may update this policy because of product, service, or legal changes. For changes that may materially affect your rights, we will provide notice through the app, a pop-up, the website, or another appropriate channel. We will not use an update to expand processing beyond the disclosed scope without obtaining any additional authorization required by law.

19. Contact us

Personal information controller: [Full legal name of operator]
Address: [Registered or contact address]
Privacy email: support@mojikey.com
Account deletion: https://mojikey.app/account-deletion.html
Website: https://mojikey.app

After verifying your identity, we will respond within the period required by applicable law.