PRIVACY NOTICE · EFFECTIVE 18 JULY 2026

Privacy is structural.
Not a promise in small type.

SottoKey has no network path for what you type. Like every keyboard, it exchanges text with the app you are typing in; it does not send that text off the device. This page explains what the keyboard processes, stores locally, and disables.

Android app: no off-device network path
01 / YOUR TEXT

The meeting got moved to 3pm.

02 / KEYBOARDSottoKeySelection or bounded paragraph
03 / LOCAL MODELRewrites hereInside the app process
Current SottoKey rewrite panel showing a real device diff
04 / YOUR PHONE
NO NETWORK PATHBlocked by the app manifestINTERNET permission absent

THE GUARANTEES

What stays local, and what stays off.

These statements describe the Android application. Website operation is disclosed separately below.

01

No route to the internet

The Android production manifest does not request INTERNET. The keyboard contains no server client, analytics SDK, advertising SDK, remote logging, or background update check.

02

Temporary text stays temporary

The composing buffer lives in memory for the current word. A rewrite target lives for one request. SottoKey does not automatically write typed sentences to disk.

03

Sensitive fields switch off extras

Password-class inputs disable suggestions, learning, rewriting, and clipboard capture. Incognito flags disable personalized learning automatically.

04

Local data has controls

Preferences, learned words, touch offsets, local latency metrics, and explicitly saved snippets live in app-private storage and can be removed from settings.

05

Cloud backup disabled

Android backup and device-to-device extraction are disabled, so the personal dictionary and saved keyboard data do not migrate through Google backup.

06

Verified model packages

Model packages are SHA-256 verified before activation and switch atomically. A damaged or incomplete package cannot half-activate.

WHAT IS PROCESSED

The selected text, or the paragraph around your cursor.

An explicit selection is rewritten exactly when it fits the 2,000-character model budget. Without a selection, SottoKey captures the current paragraph. Longer paragraphs use a visible sentence-boundary window around the cursor; the remaining sentences stay untouched.

The model processes that text in memory. SottoKey checks the result, marks the changes, and waits for you to choose Keep original or Accept edit.

WHAT MAY BE STORED LOCALLY

Only the pieces that make a keyboard yours.

  • Theme, size, language, and behavior preferences.
  • Personal dictionary entries and learned word frequencies.
  • Per-key touch offset averages, without text.
  • Latency, backend, model version, and outcome codes—never text.
  • Clipboard snippets that you explicitly save.

Temporary clipboard history stays in memory, is capped, expires, skips sensitive clips, and can be disabled.

IMPORTANT LIMIT

The host app must identify a sensitive field.

SottoKey disables intelligence when Android identifies a password-class field. If another app fails to mark a payment or sensitive field correctly, no keyboard can reliably infer that missing classification. Incognito mode remains available as an explicit local override.

WEBSITE DATA

This website does not receive your keyboard text.

The guided demo is deterministic and does not accept arbitrary input. The launch website uses no advertising cookies, session replay, fingerprinting, or third-party font/script CDN. Standard infrastructure logs may temporarily contain request metadata such as time, path, and network address for security and operation.

If a beta or support contact method is added, its form will disclose the exact information and processor before submission.

DELETE YOUR DATA

Clear it locally, or uninstall completely.

Settings provides controls for learned words, saved snippets, clipboard history, and local keyboard data. Uninstalling SottoKey removes its app-private data because no account exists elsewhere.

See deletion instructions

QUESTIONS OR CONCERNS

Privacy questions should have a direct answer.

The permanent privacy contact channel will be published before the public Google Play release. Until then, the technical proof and current limitations remain available on this site.

KEEP THE CLOUD OUT OF THE CONVERSATION

Your keyboard sees enough.
It doesn't need a network.

Write, revise, and decide on your phone.