Privacy Policy

Effective date: July 20, 2026 · Last updated: July 20, 2026

1. Who we are

LipiFlow ("the app," "we," "us") is an AI-powered keyboard for Android developed and operated by Dev Pixels Studio LLC, a company registered in Wyoming, United States.

This policy explains what information LipiFlow collects, how it is used, who it is shared with, and the choices you have. By using LipiFlow you agree to this policy.

2. A note about keyboard apps

When you enable any third-party keyboard, Android shows a standard system warning that the keyboard "may be able to collect all the text you type, including personal data like passwords and credit card numbers." This warning appears for every keyboard app — it describes what a keyboard could technically do, not what LipiFlow actually does.

Here is what LipiFlow actually does:

• Normal typing is processed entirely on your device. The words you type are used locally — on your phone — to show suggestions, run autocorrect, and learn your vocabulary. This data is never transmitted to us or anyone else.
• Nothing is sent anywhere in the background. There is no ambient collection, no keystroke logging, and no automatic AI processing of what you type. Text leaves your device only as a direct result of you tapping an AI action button.
• Secure fields are excluded. Password, PIN, and OTP fields are automatically detected and excluded from suggestions, learning, clipboard capture, and all AI features.

3. Information we collect

3.1 Text you explicitly send to AI features

When you tap Grammar Fix (✨), Tone, or Fix & Translate, the text you selected (or the message you composed, in a short chat field) is sent over an encrypted connection to our backend, which forwards it to OpenAI (our AI processing provider) to generate the correction, rewrite, or translation. This happens only when you tap the button — never automatically.

• We do not store the content of your AI requests on our servers. Our backend passes your text to OpenAI and returns the result; our own database records only usage metadata (see 3.3), never the text itself.
• OpenAI does not use API data to train its models. Per OpenAI's API policy, content submitted through the API is not used for model training. OpenAI may retain API content for up to approximately 30 days for abuse and misuse monitoring, after which it is deleted (except where retention is legally required).
• Our backend infrastructure is provided by Supabase and hosted in the Asia-Pacific (Mumbai) region.

3.2 Account information

• Anonymous account: When you first use the app, we create an anonymous account identifier so AI usage limits work. It contains no personal information.
• Google Sign-In (optional, required for AI features): If you sign in with Google, we receive your name, email address, and profile picture from Google. We use these to identify your account, sync your plan across reinstalls, and prevent abuse of free AI quotas.

3.3 Usage and diagnostic data

When you use an AI feature, we record usage metadata: which feature was used, when, whether it succeeded, and the number of processing tokens consumed (a technical measure of request size used for fair-use limits and billing). This metadata never includes the text you typed.

3.4 Subscription and payment data

If you purchase LipiFlow Pro, payment is processed entirely by Google Play Billing. We never see or store your card number, UPI ID, or any payment credentials. We receive only subscription status (plan, active/expired, trial state) via RevenueCat, our subscription management provider, so the app knows to unlock Pro features.

3.5 What stays on your device (and only on your device)

• Your personal dictionary, learned words, and next-word prediction data
• Clipboard history (kept in memory only, auto-expires, never written to our servers)
• Keyboard settings, themes, and preferences
• Recent emoji, GIF favorites, and sticker history

This data is deleted when you uninstall the app. We have no access to it.

4. How we use information

• To provide AI text processing (grammar fixes, tone rewrites, translations) when you request it
• To enforce free-tier usage limits and provide Pro subscription benefits
• To maintain, debug, and improve the service (using aggregate usage metadata, never your text)
• To respond to support requests you send us
• To prevent fraud and abuse of the service

We do not sell your personal information. We do not use your data for advertising. We do not use your typed text to train AI models.

5. Who we share data with (subprocessors)

We share data with these providers only to operate the service, under their respective data processing terms. We may also disclose information if required by law, or to protect the rights, safety, and security of our users and service.

6. Data retention and deletion

• AI request text: not stored by us at all; retained by OpenAI up to ~30 days for abuse monitoring, then deleted.
• Usage metadata and account records: retained while your account exists.
• On-device data: under your control; deleted when you clear app data or uninstall.

Deleting your account

You can permanently delete your LipiFlow account at any time from inside the app: Profile → Delete account. This immediately and permanently deletes your account, usage records, and subscription records from our systems. You can also request deletion by emailing support@lipiflow.app from the address associated with your account.

7. Security

• All communication between the app and our servers uses TLS encryption.
• AI provider credentials are held server-side only — never in the app.
• Session data on your device is stored using Android's encrypted storage.
• Our database enforces row-level security; user data is not accessible to other users.

8. Children's privacy

LipiFlow is not directed at children under 13 (or the equivalent minimum age in your jurisdiction), and we do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us at support@lipiflow.app and we will delete it.

9. Your rights

Depending on where you live (including under the GDPR in the EU/UK and the CCPA/CPRA in California), you may have the right to:

• Access the personal information we hold about you
• Delete your personal information (see Section 6 — you can do this yourself in-app)
• Correct inaccurate information
• Object to or restrict certain processing
• Data portability — receive a copy of your data in a usable format

To exercise any of these rights, email support@lipiflow.app. We respond to all requests within 30 days. We do not discriminate against you for exercising your rights.

10. International data transfers

Our backend is hosted in the Asia-Pacific (Mumbai) region, and our AI provider (OpenAI) processes data in the United States. By using LipiFlow you understand that your AI request text is processed in these regions, protected by encryption in transit and the safeguards described in this policy.

11. Google Play data safety

The information in this policy is consistent with the Data Safety section of our Google Play listing. In Play's categories: LipiFlow collects Personal info (name, email — only if you sign in with Google) and App activity (AI feature usage metadata); AI-submitted text is processed ephemerally and not stored by us. Data is encrypted in transit, and you can request deletion.

12. Changes to this policy

We may update this policy as the product evolves. Material changes will be announced in the app or by email before they take effect. The "Last updated" date at the top always reflects the current version.

13. Contact us