Privacy Policy

Who we are

• Who is responsible for your information: Derek Brown, sole trader, Australia. Our business address is available on request: email support@warmtype.com.
• Privacy contact: Derek Brown, support@warmtype.com. He handles every privacy request and question. In the UK and the EEA we are not required to appoint a data protection officer; where a country's law asks for one, see "Country notes".
• Our representative in the European Union: not appointed yet; please contact us directly at the email address in this policy.
• Our representative in the United Kingdom: not appointed yet; please contact us directly at the email address in this policy.
• Other local representatives: none appointed yet; wherever you live, you can contact us directly at the email address in this policy.

The short version

• Ordinary typing, word predictions, autocorrect and the words the keyboard learns stay on your phone.
• The AI features send only what they need, only when you use them, and only after you agree to a notice in the app.
• Text for the AI features goes to Anthropic (Claude). Speech goes to Deepgram through its Australian service. If a primary service is unavailable, rate limiting us or refusing our account, the same text request or voice clip may go to Groq as a backup. These are the AI companies that receive that content from our server.
• Our server passes ordinary AI requests on and does not store them. If you send a problem report, we keep it for 90 days.
• There are no accounts and no ads. We do not use a separate audience-tracking or advertising analytics service. We don't sell your information.

Why we use your information

• To run the AI features you ask for: replies, rewrites, email, compose and voice typing.
• To run the free daily allowance and stop abuse.
• To work out which country you are in, because our AI provider is only available in some countries.
• To run a subscription you buy.
• To fix crashes, and to handle problem reports you send.
• To answer your emails and privacy requests.

We do not use your information for anything else.

What stays on your phone

What you type, predictions, autocorrect, your personal dictionary, the names and email addresses saved in My details, clipboard history and saved messages stay on your phone. Your settings are stored on your phone; the language codes sent with AI requests are described below. Clipboard history saves the last 20 texts you copy while Warmtype is your keyboard, plus any you pin, until you remove them or use Delete all. It does not save copies an app marks sensitive (for example from a password manager), copies made while Incognito is on, or copies made while the keyboard is open in a password or private field. Scanning text with the camera, detecting a language and translating run on your phone using Google's ML Kit. The first time you download a translation language, ML Kit contacts Google: it sends an installation identifier, fetches settings, sends a usage log, and downloads the language file. Google sees your IP address. After that, translating, language detection and text scanning did not contact Google in our tests. Nothing is sent from password or other private fields, or while Incognito is on.

What the AI features send

Before your first AI use, the app shows a notice naming the AI companies. Choose "Not now" and we do not send your text or audio for cloud AI; the keyboard keeps working. Google's on-phone tools can still send the diagnostic and usage information described above, and the Subscription screen works as described under "Other things that leave your phone".

• Voice typing: your speech, after you tap the mic. If "AI tidy-up after dictation" is on in Settings (it is on unless you turn it off), the words are then sent for AI tidy-up (punctuation and paragraphs). If "Use context for dictation" is on, the last sentence or two you dictated is sent too.
• AI Reply: when you tap Generate, the messages you kept from the screen (each marked as theirs or yours), the chat's name, the kind of app you are in, anything you typed in the reply box and your reply choices. Regenerate also sends the drafts you were just shown.
• Email, Compose, Rewrite, Auto fix and other AI tools: the text you are working on and your instructions. Auto fix, while on and open, sends your draft each time you pause.
• With every AI request: a random install key made by the app (not your name, phone number or a hardware ID), and your IP address, which any internet server sees. We use them for the daily allowance, to stop abuse, and to check your country.
• Language settings: Reply, Compose and Email requests include your phone's language and region setting (for example en-AU). Newer versions also send whether your keyboard is set to English, Spanish or both, to choose the output language. Voice-typing requests include the speech-language code (for example en-AU).

Sensitive details. Chats and drafts can contain sensitive details, such as health, sex life or beliefs. We never ask for them. If the text you choose to send contains them, they go to Anthropic or Deepgram, or to Groq when it stands in, like any other text or audio. By agreeing to the AI notice, you give your own express consent to sending sensitive details about you. Your agreement covers only you, not the other person in your chat. You can withdraw it at any time in Settings, Privacy & data, Withdraw AI consent; the AI features then stop until you agree again. Please don't use Warmtype to send another person's health, sex-life or sexuality details you don't need for your reply: remove those lines before you tap Generate.

Your country

We use your IP address to work out which country you are in, because our AI provider is only available in some countries. We do not keep the country with your install key or your IP address. If we refuse a request because of your country, our server log notes the country (not your IP address) and keeps it for the log period, about 30 days. IP geolocation by DB-IP.com.

If someone used Warmtype on your chat

AI Reply and Email read the text on the user's screen, using Android's Accessibility permission, only at the moment they open them. Never in the background. The user sees what was read and can remove any line or the chat's name before tapping Generate. If you were in that chat:

• What we receive: the messages the user kept from the screen, which can include yours, and the chat's name, which is often your name.
• What happens to it: our server passes it to Anthropic (United States) to suggest replies (or, if Anthropic is unavailable, rate limiting us or refusing our account, it may pass it to Groq instead; see "Where your information goes"), and sends the suggestions back to the user. Our server does not store it. The recipient handles it as described under "What the AI companies do with it".
• Why: to give the user the reply help they asked for. In the UK and the EEA, our legal basis is our legitimate interest, and the user's, in offering that help (see "Legal bases").
• Your rights: you can ask us anything about this, or object, at support@warmtype.com. Because we keep nothing from the chat, we usually hold nothing to give you or delete.
• Health, sex life or sexuality: Your messages can show details like these. We do not ask for them, look for them or use them for anything except drafting the user's reply, and our server does not keep them. They reach us only because the user chose to send that chat to get help with their reply. You can object or ask us anything at the email address in the "Your choices and rights" section below.
• Complaints: you can also complain to the Information Commissioner's Office (UK) or the data protection authority where you live (EEA).

We cannot tell you directly that a user ran Warmtype on your chat, because we do not know who you are. This section is how we tell you. The user has to share only conversations they are entitled to share, and must never use the app to harass or deceive anyone.

Other things that leave your phone

• Crash and freeze codes: if the keyboard crashed or froze, the next start sends our server three numbers: the kind of stop, the app version and the minute it happened. Never what you typed. Sent only after you agree to the AI notice, and never while Incognito is on.
• Problem reports you choose to send: your reason, your note, the AI result if you tick the box, the feature, the app version and an older random install id made by the app. The app does not automatically attach your conversation; please avoid copying private conversation text into your note. We keep reports for 90 days.
• Subscriptions: Google Play handles payment. When you open the Subscription screen, the app connects to Google Play to show the plan and check for a purchase; this can happen before you agree to the AI notice. When you buy, restore, or already have a purchase, the app sends our server the purchase token and product ID with your install key, and our server checks the purchase with Google. We never see your name, email or card. Google receives a scrambled form of your install key to link the purchase to your phone.
• Google ML Kit: see "What stays on your phone". This is under Google's own terms.

What the AI companies do with it

• Anthropic (United States) provides the text features. Under its commercial terms it does not train its models on what we send. It deletes it after 30 days by default, but may keep content flagged for misuse for up to 2 years, safety scores for up to 7 years, and anything it must keep by law.
• Deepgram (a US company) provides speech. We send speech to its Australian service and tell it, on every request, not to keep or train on your audio. Deepgram says audio sent to its Australian service is handled in Australia and, because we opt out, is not kept. Deepgram says its records about each request (not the audio) and its billing are handled in the United States. Detailed records about each request (not the audio) can be retrieved for 90 days, and total usage figures can be kept longer.
• Groq (backup for text and speech). GroqCloud processes the request using a text model or transcribes the voice clip. Groq says inference inputs and outputs are not routinely retained, but may be logged for reliability or suspected abuse for up to 30 days, or longer where legally required. Groq collects usage metadata (not the content) to measure activity and performance. Under its Services Agreement, Groq does not train models on customer content without explicit permission; we do not give that permission. Groq stores data in the United States and may process it there or in other countries. Groq says it stores customer data with Google Cloud in the United States; its subprocessor list names the companies it uses.

We use their standard business terms. If we change the AI companies, the app asks you to agree again.

What we keep, and for how long

• Ordinary AI requests (your messages, drafts, emails and audio): not stored by our server.
• Problem reports: the note and any AI result you chose to attach, 90 days.
• Server logs (time, feature, status, totals, crash codes, and the country when we refuse a request because of it; no message text, no IP address in refusal lines): about 30 days.
• Daily allowance counters, under scrambled forms of your install key and IP address: they reset at midnight UTC; the previous day's file is replaced the next time the server writes or restarts.
• Your country: not kept with your install key or IP address; only in refusal log lines, as above.
• Subscription records (purchase token, product ID, status, end date, scrambled install keys of linked phones): while needed to run your plan, restore it and handle refunds. Removing a phone's link does not delete Google's purchase record, and may not delete our purchase record.
• Server backups: Our hosting provider, OVHcloud, makes an automatic backup of our server each day. It keeps one copy, normally for about a day, until the next one replaces it. What deletion does to them is under "Deleting your data".
• Emails you send us: as long as needed to answer you.
• On your phone: clipboard history, the last 20 copies plus pins, until removed or Delete all.
• Everything on your phone: until you delete it or uninstall the app.

Where your information goes

Warmtype is run from Australia. If you live somewhere else, your information leaves your country. It may go to our server (hosted by OVHcloud: OVH Australia Pty Ltd, Sydney, Australia), Anthropic (United States), Deepgram (a US company; we use its Australian service, which handles your audio in Australia; its records about each request and its billing are handled in the United States), Groq (backup for text and speech) and Google (worldwide). Groq stores data in the United States and may process it there or in other countries. Privacy laws there may differ from yours. Sending your information to Australia and the United States is necessary to provide the service you ask for: the AI features cannot work without it. If Groq stands in, it may also be processed in other countries under the safeguards below. Anthropic, Deepgram, Groq and OVHcloud act as our service providers under their own terms. Google provides ML Kit and Google Play under its own terms.

• Anthropic: Anthropic Commercial Terms (effective 17 June 2025) with the Anthropic Data Processing Addendum (effective 24 February 2025), which includes the EU standard contractual clauses (Module 2), the UK Addendum and the Swiss Addendum; contracting party Anthropic, PBC.
• Deepgram: Deepgram Terms of Service (last updated 6 August 2026), contracting party Deepgram, Inc.
• Groq: its Services Agreement and incorporated Customer Data Processing Addendum, including EU standard contractual clauses and the UK transfer addendum where applicable.
• OVHcloud (OVH Australia Pty Ltd, our server host): OVHcloud Australia General Terms of Service (version of 17 January 2025), contracting party OVH Australia Pty Ltd.
• UK and EEA users: when you use Warmtype, you send your information directly to us in Australia, and we apply the UK and EU GDPR to it ourselves. The United States and Australia do not have a general EU or UK "adequacy" decision. When our server passes your information to Anthropic, we rely on the EU standard contractual clauses and the UK addendum in Anthropic's data processing terms. When it passes your information to Groq, we rely on the EU standard contractual clauses and UK addendum in Groq's data processing terms where applicable. For Deepgram: we have not yet confirmed which transfer safeguards apply under our Deepgram account terms. Your audio goes to its Australian service, which handles it in Australia and, because we opt out, does not keep it; Deepgram's records about each request and its billing are handled in the United States. For our host, OVH Australia Pty Ltd: we have not yet confirmed which transfer safeguards apply under our OVHcloud account terms. Our server only passes your information on to provide the AI features you ask for, and does not store ordinary AI requests.

Email support@warmtype.com for a copy of the parts of these terms that protect your information.

How we protect it

Every connection is encrypted. The AI-company keys live only on our server. Our logs leave out what you write and say. The app turns off Android's cloud backup for its data. No system is perfectly secure. If a breach is likely to cause you serious harm, we will tell you, and we will tell the regulator where the law requires it.

Legal bases

Where a law asks for a legal basis (for example in the UK, the EEA, Switzerland, San Marino and Moldova), these are ours:

• The AI features you use, and your own text and audio: to provide the service you asked for (contract).
• The other person's messages in a chat you send: our legitimate interest, and yours, in giving you reply help. You can object (see "If someone used Warmtype on your chat").
• Your install key, IP address, daily allowance, country check and abuse limits: our legitimate interest in a fair, secure service that follows our AI provider's rules.
• The safety check on chats sent for AI Reply (signs of self-harm, or that the other person is under 18): our legitimate interest, and the public's, in protecting children and people at risk. The check runs as the request arrives and keeps no words from the chat.
• Sensitive details about you in what you send: your explicit consent, given in the AI notice. You can withdraw it at any time.
• Crash and freeze codes: your consent, given with a separate switch in the AI notice that stays off unless you turn it on. Withdraw AI consent turns it off again.
• Subscriptions: to provide the plan you bought (contract), and to keep records the law requires (legal obligation).
• Problem reports and emails: our legitimate interest in fixing problems and answering you.

You do not have to give us anything. Ordinary typing works without it; the AI features cannot work without what they send. We make no automated decisions with legal or similarly significant effects: the AI only drafts text for you to choose from.

Your choices and rights

You can turn the AI features off at any time: choose "Not now", use Withdraw AI consent in Settings (Privacy & data), switch off Accessibility for Warmtype, or use Incognito. Wherever you live, you can ask what we hold about you, ask for a copy (in a common format), a correction or deletion, ask us to limit or stop using it, object to uses based on legitimate interests, withdraw your consent, or complain to us. To complain, email support@warmtype.com with the subject "Privacy complaint". We confirm we have it within 30 days and tell you what we did as soon as we can. You can also complain to a regulator at any time (see below). Email support@warmtype.com. We aim to answer within 30 days. We may ask a question to check the request is yours, but never for a password or ID document. To delete your data, see "Deleting your data".

If you are not happy with our answer, you can complain to the privacy regulator where you live: in the UK, the Information Commissioner's Office (ico.org.uk); in the EEA, the data protection authority where you live or work. In Australia, the Office of the Australian Information Commissioner (oaic.gov.au) may consider a complaint if the Privacy Act covers our business; it also provides privacy guidance.

Age

Warmtype is for people aged 13 and over, in every country where we offer it (14 in South Korea; in Kyrgyzstan and The Gambia some younger users need a parent's consent: see the Terms, section 1). We do not ask your age in the app: Google Play's age rating and its age tools apply. Some EEA countries set a higher age, up to 16, for agreeing to the use of your information; if you are under that age where you live, please use the AI features only with a parent's or guardian's agreement, because the AI notice asks for your consent for sensitive details about yourself and offers crash codes. If you are 13 to 17, please go through this policy with a parent or guardian before using the AI features. The app is not for children under 13. We don't knowingly collect information from children under 13. If we learn that a user is under 13, from an email, a report or any other way, we delete the server data we hold for that install, using our deletion process. If you think a child has used the AI features, email us. Our Safety page says what Warmtype does to keep young people safe.

Country notes

• Australia: this policy is our privacy policy and collection notice under the Australian Privacy Principles.
• United States, including California: we don't sell or share personal information, as California law defines those terms, and we don't use it for targeted advertising or profiling.
• Japan: we send the seller's name, address and phone number by email without delay when you ask at support@warmtype.com.
• Singapore, the Philippines, Sri Lanka, Kenya, Nigeria and other countries that ask for a named privacy contact or data protection officer: that is Derek Brown, support@warmtype.com.
• Brazil: our privacy contact is Derek Brown, support@warmtype.com. You can also complain to the ANPD (gov.br/anpd).
• Brunei Darussalam: the person responsible for our compliance with the Personal Data Protection Order is Derek Brown, support@warmtype.com.
• Everywhere else: you have the rights in "Your choices and rights", and any further rights your local law gives you.

Para pais e responsáveis (Brasil)

O Warmtype é um teclado para pessoas com 13 anos ou mais. A digitação comum fica no aparelho. Os recursos de IA na nuvem (respostas, reescrita, e-mail e ditado por voz) só funcionam depois que a pessoa aceita um aviso no app, e enviam o texto ou a voz escolhidos para a Anthropic (Estados Unidos) e a Deepgram; se o serviço principal estiver indisponível, limitar nossas solicitações ou recusar nossa conta, a Groq poderá receber a mesma solicitação de texto ou áudio como alternativa. A Groq armazena dados nos Estados Unidos e pode processá-los lá ou em outros países. Riscos: a IA pode errar ou sugerir algo inadequado; quem usa decide o que enviar. Nosso servidor não guarda as conversas. As respostas de IA são bloqueadas quando a conversa menciona automutilação ou suicídio, ou quando a outra pessoa diz ter menos de 18 anos. Com o Google Family Link, você pode aprovar ou recusar o download do Warmtype. Para desligar a IA na nuvem: no aviso, toque em "Not now"; ou abra as configurações do Warmtype, "Privacy & data", "Withdraw AI consent". A digitação continua funcionando. Dúvidas: support@warmtype.com.

Deleting your data

There are no accounts, so there is no account to delete.

On your phone

Open Warmtype Settings, then Privacy & data, then Delete all my data. This clears your learned words, My details, clipboard history, saved messages, unsent reports, your consent choices and the older random install id. Some settings and a downloaded voice model stay until you uninstall.

It keeps your random install key on purpose: that key links your subscription to this phone, and a new key could count as another phone against the 2-phone limit. Our server's data is not removed by this button. To remove it, send a deletion request (below). Uninstalling the app removes the key from your phone.

On our server

Send the request before you clear your phone, so both codes are still available:

• In Warmtype Settings, open Privacy & data, then Request deletion of my server data. It opens an email with two codes: one for your install key and one for the older install id. They let us find your records. The codes are one-way scrambles; we see your email address only to answer you.
• Or email support@warmtype.com with the subject "Delete my data".

We aim to finish within 30 days and will reply to tell you what we deleted.

What is deleted

• Problem reports you sent (otherwise kept 90 days).
• Daily allowance counters filed under your codes.
• The link between your phone and any subscription. This does not cancel the subscription: cancel it in Google Play. Google keeps its own purchase record, and we may keep the purchase record needed to handle refunds and restores.
• Copies in our backups: We cannot edit a single record inside a backup copy, so it stays there until the next backup replaces it, about a day later. If we ever restore that copy, we first delete again anything you asked us to delete after it was made.

What cannot be deleted by us

• Server logs hold no message text and are deleted automatically after about 30 days.
• Daily allowance counters reset at midnight UTC on their own.
• What was already sent to Anthropic, Deepgram, Groq or Google is handled under their terms (Anthropic deletes after 30 days by default).
• Our server never stored your ordinary AI requests (messages, drafts or audio), so there is nothing of that to delete.

This website

This website uses no cookies, analytics, ads or tracking, and serves its own fonts. Our web host, Cloudflare Pages (Cloudflare, Inc.), sees your IP address, as with any website.

Changes and contact

If our data handling changes, we update this page and its date. If a change affects what the AI features send or who receives it, the app asks you to agree again. Warmtype is made by Derek Brown, sole trader, ABN 79 314 389 399, Australia. Our business address is available on request: email support@warmtype.com. Email support@warmtype.com. See also our Terms, Support and Safety pages.