Skip to content

Legal

Privacy policy

A keyboard sees everything you write, so we built Root Keyboard to keep as little as possible. This policy explains what we collect, why, and the choices you have.

Last updated 27 October 2026

The short version

  • We never store what you type. Your keystrokes stay on your phone.
  • Text goes to an AI provider only when you tap an AI feature (Grammar, Tone, Translate, Ask AI, Assistants, voice cleanup or Clever Reply), and only the text that feature needs. We don’t log it or keep it on your account.
  • We keep the minimum to run the service: an account id, your name and e-mail if you sign in with Google or Apple, protected device hashes to prevent fraud, and usage counts and word balances.
  • We don’t sell your data or show ads.
  • You can delete your account at any time from the app or by e-mail. See Delete your account.

Who we are

Root Keyboard (Android package com.rootdevs.keyboard) is made by Root Devs (“we”, “us”). We are responsible for the personal data described in this policy. You can reach us at [email protected].

What we collect

DataWhy
Account id, created when you first open the app (as a guest or signed in)To keep your words wallet, settings and subscription together.
Name and e-mail address from your Google or Apple profile, only if you choose to sign in with themTo sign you in on a new phone, recover your account and answer support requests.
Device hashes: identifiers from your device that we combine with a secret (“pepper”) and hash before storingTo prevent fraud, such as claiming the one-time trial, the daily bonus or referral rewards repeatedly on the same phone. A peppered hash can’t be turned back into the original identifier.
Usage counts and word balances: which AI actions you used, how many words they used, your balances and wallet history, daily bonus claims and referral statusTo charge words correctly, show your history and improve features in aggregate.
Technical data: app version, platform, and timestamps of requestsTo keep the service reliable, secure and compatible.
Subscription status: plan, period and renewal stateTo give you the words your plan includes.
Messages you send usTo help you.

What we never collect

  • The text you type, letter by letter or otherwise. It is never sent to or stored on our servers.
  • Passwords or anything you type into password fields.
  • Your contacts, photos, location or other apps’ data.
  • Payment card details. Google Play handles payment.

Features such as clipboard history, themes (including photo themes), word suggestions and Bangla phonetic typing work on your phone. Their data stays on your device.

AI features

When you tap an AI feature, the keyboard sends the text that feature needs (for example the sentence you want to fix, the language you picked, or your question for Ask AI) through our servers to a third-party AI model provider, and returns the result to you.

  • Nothing is sent until you tap. Typing alone never sends text anywhere.
  • We do not log the text or the result, and we don’t save either to your account. We record only counts: which action, how many words, and whether it succeeded.
  • To answer identical requests faster, a result may be kept for a short time in a temporary cache, looked up by a one-way fingerprint of the request. The cache is not linked to your account and expires automatically. Ask AI conversations are never cached.
  • We work with AI providers through their business APIs. They process requests to produce the result and may keep them for a limited time for abuse monitoring under their own terms. We choose providers whose API terms don’t allow them to train their models on your requests.
  • AI voice typing: your phone’s speech recognition turns speech into text. When you use AI cleanup, only that text is sent, as above.

Clever Reply and the accessibility service

Clever Reply uses Android’s AccessibilityService API. This is the only purpose for which Root Keyboard uses it.

  • What it accesses: the text of the conversation currently on screen in supported messaging apps (WhatsApp, Messenger, Telegram and Gmail).
  • When: only at the moment you tap Clever Reply. It does not read your screen in the background.
  • What is sent: the last message in the conversation and, if you choose to expand a draft, your draft. It goes to the AI provider as described above to generate reply suggestions.
  • What it never does: store messages, read other apps, send messages for you, tap or change anything on screen, or share the content for advertising or any other purpose.
  • Your control: the permission is off by default. The app explains it and asks for your consent before sending you to Android Settings to turn it on. You can turn it off at any time in Settings → Accessibility → Root Keyboard. Every other feature works without it.

Purchases

Subscriptions are sold through Google Play. We use RevenueCat to manage subscription status. RevenueCat receives your account id and purchase information from Google Play (such as product, purchase date and renewal status) so we can grant your plan’s words. We never see your payment card.

How we use data

  • To provide the keyboard, AI features, words wallet, daily bonus and referral program.
  • To prevent fraud and abuse, including repeated trial or reward claims.
  • To process subscriptions.
  • To provide support and tell you about important changes to the service.
  • To understand usage in aggregate (for example, how often Translate is used) and improve the app.
  • To comply with the law.

Who we share it with

We share data only with service providers that help us run Root Keyboard, and only what they need:

  • AI model providers, for the text you send when you tap an AI feature.
  • RevenueCat and Google Play, for subscriptions.
  • Google and Apple, when you choose to sign in with them.
  • Hosting and infrastructure providers that store our databases securely.

We don’t sell personal data and we don’t share it for advertising. We may disclose data if required by law. Our providers may process data outside Bangladesh; we use providers that protect it with appropriate safeguards.

How long we keep it

  • Account, wallet and usage data: for as long as your account exists.
  • When you delete your account, we remove your personal data within 30 days. We may keep a peppered device hash, which does not identify you, so the same phone can’t claim the one-time trial again, and records we are legally required to keep about purchases.
  • Temporary AI result caches: minutes to hours, then they expire automatically.
  • Support e-mails: until your request is resolved, plus a reasonable period for follow-up.

Security

Data travels over encrypted connections (HTTPS). Secrets are encrypted at rest, sign-in tokens are short-lived and rotated, and access to production systems is limited to staff who need it. No system is perfectly secure, but we work to protect your information and will notify you if a breach affects you, as the law requires.

Your choices and rights

  • Use Root Keyboard as a guest without giving us a name or e-mail.
  • Don’t tap AI features if you don’t want text to leave your phone.
  • Turn the Clever Reply accessibility permission on or off at any time.
  • Ask us for a copy of your data, to correct it, or to delete it: e-mail [email protected].
  • Delete your account from the app: Settings → Account → Delete account. More about deletion.

Children

Root Keyboard is not directed at children under 13, and we don’t knowingly collect their personal data. If you believe a child has given us personal data, contact us and we will delete it.

Changes to this policy

We will post any changes on this page and update the date above. If a change is significant, we will also tell you in the app before it takes effect.


Questions? E-mail [email protected].