Privacy Policy — Whisper Keyboard
Last updated: 24 August 2026
Whisper Keyboard is a voice-first keyboard for Android. This policy describes exactly what the app does with your data. It is written from the source code rather than from intent, and the claims in it are checked automatically on every build by audit_privacy.py, which fails if the code stops matching.
The short version
- What you type stays on your phone. There is no keystroke log.
- Audio you dictate is sent to your own account's server, and nowhere else.
- There are no third-party services in this app. No advertising, no analytics brokers, no crash reporters, no SDKs of any kind.
- Nothing is sold, shared, or used to train anyone's model.
- Password fields are excluded from every feature that stores or sends anything.
What leaves your device
The app contacts exactly one server: the transcription service your account is on. Every request is authenticated with your API key and sent over HTTPS.
| What | When | Why |
|---|
| Audio you record | you tap the microphone | to transcribe it |
| A photo you take | you tap the camera key | to process it |
| A file you choose | you choose to upload it | to store it in your account |
| Text in the current field | only if you enable AI Text Fix and tap that key | to rewrite it |
| Usage counts | periodically, if enabled | to improve the app |
Everything above is started by you, except usage reporting.
About AI Text Fix
This is the only feature that sends text you have typed. It is off by default, it must be enabled in Settings, and it must then be invoked deliberately with a key. It never runs in a password field, or in any field an app has marked as not accepting suggestions.
About usage reporting
If left enabled, the app periodically sends a summary of how it was used. That summary contains counts, durations and error codes only:
- how many characters were typed or dictated, and over how long
- how many corrections were applied, and how many you undid
- how often suggestions appeared, and how often you took one
- how long transcriptions took, and why any failed
- which keyboard layout was in use
It contains no text of any kind — not words, not transcripts, not even the lengths of individual words. It does not identify you, your device, or which apps you were typing in. It is tied to a random identifier created at install that does not survive reinstalling.
You can turn it off in Settings at any time.
What stays on your device
Stored in the app's private storage, which other apps cannot read:
- your API key — encrypted with AES-256-GCM under a key held in the Android Keystore
- your recent sent messages — encrypted the same way
- recent recordings — the newest few keep their audio
- words and phrases the keyboard has learned from you
- your typing statistics — counts and durations only
Automatic backup is switched off. Android would otherwise copy app data to your Google Drive; this app opts out of both cloud backup and phone-to-phone transfer, so none of the above leaves your device that way.
Uninstalling the app deletes all of it.
What is never collected
- No keystroke log. The app does not record what you type.
- No touch coordinates.
- No contacts, location, phone number, or device identifiers.
- No advertising ID.
- No record of which apps you use. The app can tell whether a field expects an email address or a password — which is how it protects passwords — but it does not record which app the field belongs to.
Permissions
| Permission | Used for | If you refuse |
|---|
| Microphone | dictation | the keyboard works; dictation does not |
| Camera | the camera key | the keyboard works; that key does not |
| Internet | transcription and uploads | typing works offline |
| Vibrate | key press feedback | typing is silent |
There is no storage permission. Files you attach are chosen through Android's own picker, which grants access to that one file.
Your data on the server
Audio you dictate is processed by the account you hold with your provider. Retention, deletion and access on the server are governed by that account, not by this app, and are configurable there.
This app does not have a separate account of its own, and does not create one.
Children
Whisper Keyboard is not directed at children and is not designed for use by anyone under 13.
Changes
Material changes to this policy will be published here with an updated date above, and noted in the app's release notes.
Contact
Questions about this policy or your data: me@rnsu.net