Keys by PAR1AHWARE

Keys Privacy Policy

How the Keys Android keyboard handles information when you type, translate, dictate and personalize your keyboard.

Published and effective: .
App: Keys · Brand: PAR1AHWARE · Android package: com.par1ahware.keys
This policy describes the prepared 0.5.0-rc2 (build 17) candidate. Publishing this policy does not announce a public app release.

PAR1AHWARE is a product of PAR1AH DYNAM1CS. For privacy questions or requests, email par1ah.dynam1cs@gmail.com.

At a glance

Typing, clipboard insertion, photo backgrounds and selected-text translation are handled locally by Keys. Text you insert goes to the app you are using. Optional voice recognition uses your installed Android speech service. Google’s translation SDK can communicate with Google for models and diagnostics, so local translation does not mean zero network activity or zero data collection.

This candidate has no app accounts, advertising, purchases or PAR1AHWARE-operated text-upload service.

Keyboard text and clipboard

Keys uses Android’s input connection to insert what you type into your chosen app. It does not maintain a typing, password or keystroke history. The receiving app can store or transmit the text under its own privacy practices; Keys cannot control what happens after insertion.

Optional local vocabulary learning (0.6.0 and later): Learning is off by default and starts only when you enable it in Advanced and tap Apply. It stores up to 500 individual words typed or selected on this keyboard in private app storage, without document, phrase, app or keystroke history. Predictions and learning are disabled in password, no-personalized-learning, numeric, email, URL and no-suggestions fields. Turning learning off stops storage and use of saved words. Clear learned vocabulary deletes them immediately, independently of Apply/Discard. Vocabulary is excluded from Android backup and is not sent to a network service. Offline English swipe decoding, completions and common-phrase next-word suggestions use bundled data without a model download.

Paste reads the current plain-text clipboard when you deliberately tap Paste and inserts it into the active field. Keys does not maintain a clipboard history or background clipboard listener, and it does not resolve clipboard content URIs to read files. Android and the app where you paste have their own clipboard and content handling.

Editing and translation need access to the relevant field or selection. Keys disables voice and translation in fields Android identifies as passwords or private, and in numeric contexts. Field identification depends on the receiving app’s Android metadata; avoid putting secrets into translation or support requests.

Microphone and voice recognition

Dictation starts after you deliberately tap the microphone and grant Android microphone permission. Granting permission alone does not start recording. Keys requests Android’s on-device SpeechRecognizer and does not fall back to a remote recognizer when an on-device service is unavailable. A compatible installed service and language model are required.

The installed Android or device-maker speech service processes microphone audio. Keys receives recognition results for display and insertion; it does not save audio recordings or transcript files. Stop asks the service to finish recognition; Cancel discards pending speech and prevents a late insertion. Text already inserted is then handled by the receiving app.

The speech service is a separate provider. Its model downloads, diagnostics, processing and retention are governed by that provider and your device settings. Requesting an on-device recognizer does not establish every installed provider’s internal privacy practices. Check your device’s speech-service settings and provider policy.

English–Spanish translation and model downloads

This candidate uses Google ML Kit Translation 17.0.3 for English–Spanish translation. You select text, approve its translation and review the result before a separate replacement action. Keys does not automatically select or translate your typing in the background.

Google states that ML Kit processes input and results on the device rather than sending their contents to its servers. Keys does not call a cloud text-translation endpoint. This applies to translation content, not the SDK data described below. See Google’s ML Kit terms and privacy explanation.

Language models are downloaded from Google only through the app’s explicit model-download action, which requires Wi-Fi and consent to the disclosed SDK network activity. The download request does not include selected text. After installation, translation can work without connectivity. Closing the panel may not cancel an already requested SDK model download. Keys defers ML Kit initialization until an approved model or translation operation; this does not disable later SDK communications.

Google SDK diagnostics and identifiers

Google’s ML Kit data disclosure describes device and app information, installation identifiers and, where applicable, device identifiers; latency; API configuration and feature version; input/output sizes; initialization, download and other event types; error codes; and configured source/destination languages. Google uses this data for diagnostics and usage analytics. Translation uses Firebase Remote Config and Firebase Installations for remote-configuration diagnostics. These are distinct from the contents of your selected text.

Google documents HTTPS encryption for the SDK data listed in that disclosure and says it does not transfer that listed data to third parties. Its terms also describe model/update checks and performance and utilization metrics. Google’s processing is covered by its own privacy information; this statement is not a guarantee that every feature or provider on your device has identical practices.

No Google Analytics or automatic crash-reporting product is intentionally integrated by Keys. ML Kit’s own telemetry remains relevant even without those products. See also Firebase’s data disclosures and Google’s Privacy Policy.

Selected photos, settings and shortcuts

Choosing a background uses Android’s document picker. Keys requests a local image, reads the image you select and saves a resized PNG copy in its private app storage. It does not keep the source URI or copy the original file’s EXIF metadata into the saved image. The original gallery image is not changed. Keys does not upload the imported background. Your selected picker or photo provider has its own practices.

Appearance, sound and feedback choices, setup progress and deliberately saved text shortcuts are stored in private app preferences. Shortcuts retain the text you choose to save; they are not a history of everything you type. Studio drafts are temporary until applied. Setup and Studio sample fields, selected translation text and results are not deliberately written to app text-history files.

The candidate disables Android app backup. It has no app-account synchronization or automatic settings transfer between packages. The older com.pariahware.keys preview has separate app storage.

Support correspondence

If you email par1ah.dynam1cs@gmail.com, your address, message, attachments and correspondence metadata are processed to answer your request and handle follow-up. Email is handled through Gmail and the email providers involved, under their own security and retention practices. This is information you choose to send, not an automatic feed from the keyboard.

Include only information needed for support. Do not send passwords, private typing, recordings or personal photos unless you have reviewed what you are sharing. Public GitHub issues can be seen by others and are handled under GitHub’s privacy statement; use email for private inquiries.

Permissions and security

  • Microphone (RECORD_AUDIO): optional deliberate dictation, with Android runtime permission.
  • Internet and network state: model downloads and Google SDK communications; network state supports Wi-Fi download requirements.
  • Input-method access: Android lets you enable/select Keys as a keyboard. The BIND_INPUT_METHOD service permission restricts service binding to the system.
  • Internal receiver permission: an app-specific signature-protected permission used by AndroidX; it is not a user data-access prompt.

The candidate does not request contacts, location, advertising ID, broad photo/storage or AccessibilityService permissions. Picking one image provides scoped access rather than broad gallery access.

Local settings and image copies use Android’s private app-storage boundary. This is not a claim of additional app-level encryption or immunity from device compromise. The release candidate is non-debuggable. Keys’ own diagnostic logging is limited to developer metadata rather than deliberately logging typing, clipboard contents, selected text, transcripts, audio or photo URIs. SDK diagnostics are a separate flow.

Google documents HTTPS for the listed ML Kit telemetry. This policy page is served over HTTPS; web hosting/CDN providers can process ordinary requests and network information separately from keyboard data. See our general website privacy notice and Cloudflare’s Privacy Policy. No software, email or storage system can be guaranteed completely secure.

Retention, deletion and your choices

  • Local app data: saved settings, shortcuts, imported image copies and SDK-managed models can remain in app storage until removed or Android app storage is cleared. Drafts and pending operations are temporary; text already inserted belongs to the receiving app’s workflow.
  • Full local reset: Android Settings → Apps → Keys → Storage → Clear storage removes this package’s local app data, preferences and models. Uninstalling also removes app-private data. These actions are destructive, not a migration or update method. They do not remove originals in your gallery, text already sent to other apps, or information held separately by service providers.
  • Partial choices: change or remove saved shortcuts through the app, revoke microphone permission in Android settings, switch to another keyboard, or avoid translation/model downloads. Restore defaults or choosing a different background is not a promise that every orphaned image or SDK file has been deleted.
  • Provider data: Google and the installed speech provider control retention and deletion of data they hold. Clearing Keys’ storage does not promise deletion of previously transmitted diagnostics; consult the linked provider policies and privacy controls.
  • Correspondence: support messages may remain in the support mailbox for the request and follow-up. No fixed deletion schedule is stated. Contact the privacy email to ask about or request deletion of correspondence you supplied; email providers may retain separate copies under their own policies.

Keys has no app account to delete. To ask about access, correction or deletion of information you supplied directly to PAR1AHWARE, email the privacy contact with enough context to identify the request, without sending unnecessary sensitive material. We cannot remotely erase the contents of another app or your device’s private Keys storage.

Third-party information and updates

Relevant provider information: ML Kit terms and privacy, ML Kit Android data disclosure, Firebase data disclosure, and Google Privacy Policy. Refer to your installed speech service and picker provider for their policies.

This policy will be updated when the described practices change; the publication/effective date appears above. Contact par1ah.dynam1cs@gmail.com with privacy questions about Keys.