Last updated ·

Privacy Policy

OmuType is a Cantonese-first keyboard for typing and voice. It is made by Alano Tech Pte. Ltd., the company that also makes Omucloud; the two are sister products. This policy sets out what personal data OmuType handles, where it goes, how long it is kept, and what you can ask us to do about it. It is the notice we give under Singapore's Personal Data Protection Act 2012 and Hong Kong's Personal Data (Privacy) Ordinance (Cap. 486).

In short:

Typing stays on your phone. The letters you type are turned into words on the device, and we never receive a record of your keystrokes.

Emoji suggestions read your sentence, only when you ask for them and only after you have agreed. The first time, OmuType asks; if you agree, then when you open the emoji page, the sentence before your cursor is sent to an AI provider so it can suggest emoji that fit; after you dictate, the words you spoke are sent the same way. We do not keep that text.

Voice goes to the cloud, only when you use it. While you hold or tap the microphone, your voice is sent to speech-recognition providers to be turned into text. Some spoken requests, such as edits and rewrites, also send the text around your cursor to an AI provider. We do not keep your recordings or your text.

The ✦ check reads your sentence, only when you tap it and only after you have agreed (OmuType asks the first time). The sentence at your cursor, with the text around it and your keywords, is sent to an AI provider, which fixes words that make no sense and sends it back. We do not keep that text.

Keyword import sends only what you paste or choose. If you paste an answer from your own AI assistant, or a list of words (or choose a file such as another keyboard's dictionary), it is sent once to an AI provider to be sorted into keywords, without email addresses, links or numbers from a list. We do not keep it.

Private fields stay private. Passwords, numbers, phone numbers, dates, usernames and incognito fields get no voice and no AI and send nothing. Name and email fields, and bank and wallet apps, get voice without AI. Nothing typed in them teaches the keyboard.

There are no accounts, no advertising and no tracking. Our servers keep a random install ID and counts of how often the voice and AI features were used, never what you said or typed.

1. Who we are

OmuType is operated by Alano Tech Pte. Ltd. (UEN 202555886D), a company incorporated in Singapore. In this policy "we", "us" and "our" mean that company. We decide how the personal data described here is handled and are responsible for it: the "organisation" under Singapore's Personal Data Protection Act 2012 (PDPA) and the "data user" under Hong Kong's Personal Data (Privacy) Ordinance (PDPO).

Registered office: 60 Paya Lebar Road, #06-28, Singapore 409051.

OmuType is a sister product of Omucloud, made by the same company. The two do not share data. Using one does not give the other anything about you.

We have designated a person responsible for our compliance with the PDPA. Their business contact address is privacy@omucloud.co. Requests, questions and complaints about personal data may be sent there, and we monitor it for that purpose.

2. What a keyboard can see, and what OmuType does with it

When you turn on any third-party keyboard, Android warns you that it may be able to collect everything you type, including passwords and card numbers. That warning is accurate: the operating system gives every keyboard the characters you type and the text in the field you are typing into. What matters is what the keyboard does with them. This section answers that directly.

Typing

  • Turning keys into words (Jyutping, Cangjie, Quick, Stroke and English) happens entirely on your phone, using dictionaries built into the app. Typing never needs the network.
  • At most once a day, the keyboard checks our server for newly added dictionary words and downloads them. This is a plain download: it sends no install code, nothing you typed and nothing about you, and each word list is signed so the app accepts only lists we published.
  • Your keystrokes are not sent to us or to anyone else, and we keep no log of them.
  • To offer what you copied as a one-tap paste and list it on the keyboard's clipboard page, the keyboard reads your phone's clipboard each time you copy something, also while the keyboard is not on screen (so several links copied one after another are all listed). What you copy is never sent to OmuType, except with 旅遊模式 on (see Translate below). The keyboard's clipboard page lists the text you copied in the last hour (at most 20 items), kept in OmuType's own storage on your phone and left out of Android's backup to your Google account; each item is deleted after an hour, and you can delete them sooner (清除最近). A copied password (a clip Android marks sensitive, or one copied or offered in a password field) is never listed, shows only as dots and cannot be pinned. Turn off 剪貼簿 in Settings and the keyboard never reads your clipboard; the recent list is deleted and your pins are hidden until you turn it back on.
  • If you pin a clip, OmuType saves it in its own storage on your phone until you delete it (or clear OmuType's storage, or uninstall it). Pins are never sent to us, and they are left out of Android's backup to your Google account. When you copy or pin a web address with 連結預覽 (link previews) on, your phone fetches that page once, directly from its own site, to read its title and picture, and keeps a small copy of the picture with the clip (a copy's picture is deleted with it, within the hour). For YouTube, TikTok, Spotify and SoundCloud links the phone asks that site's own preview service (oEmbed) for the title and picture instead, and the link itself is not opened. The site sees an ordinary request from your phone for that address; OmuType's server is not involved. When you tap into a web address in a text box (or select one) with 連結預覽 on, the keyboard shows that page where the keys are: your phone loads it directly from its site, as a mobile browser would, without your browser's cookies or logins. What sites store through these pages (their own cookies, such as a cookie-banner choice, and site data) stays in OmuType's storage on your phone so the next page remembers it; it is never sent to us. Clear it any time with 清除連結預覽資料 under 連結預覽 in Settings; turning 連結預覽 off clears it too. OmuType's server is not involved. Turn off 連結預覽 in Settings to copy, pin and tap into links without any fetch.
  • The keyboard learns only a little from your typing, and all of it stays on your phone. If you keep a word as you typed it instead of taking an English autocorrection, that word (3 letters or more) is added to your keywords, where you can delete it. While the keyboard is running it ranks the candidates you pick, and the stroke orders you complete in 筆劃, higher; that is held in memory only and forgotten when the keyboard restarts.
  • When you undo an English autocorrection with ⌫, the keyboard remembers that pair of words on your phone (up to 500 pairs) so that it does not make the same correction again. Nothing is remembered in the private fields described under “Private fields” below.
  • Swipes (swipe to delete, swipe typing, writing on the keys) are read as you make them and then forgotten: the keyboard keeps no record of your swipes. (Before version 1.0.9 it wrote each swipe to a file on your phone; that file never left the phone, and clearing OmuType's storage or uninstalling deletes it.)

Voice

  • Voice, the ✦ check, emoji suggestions, keyword import and the GIF tab are the only features that send anything off your phone, and each sends only when you use it. Voice works only after you have given OmuType the microphone permission, and it listens only while you hold the microphone key or while a tap-to-talk session you started is running. It does not listen in the background.
  • Your voice is streamed to a speech-recognition provider to be turned into text, and, with the accuracy check on, the finished recording is transcribed once more by a second provider. Section 6 names them.
  • When what you said is an instruction rather than words to insert, for example to change a date, make a message shorter, translate it or send it, the keyboard sends the words you spoke, plus the text before and after your cursor (up to 1,500 characters each way) and any selected text, to an AI provider so it can work out the edit. Text you type is only ever sent this way as part of the field at that moment, and only because you used voice.

The ✦ check

  • When you tap ✦, the keyboard sends the sentence at your cursor to an AI provider, which reads it the way the person receiving it would and fixes words that make no sense (for example a misheard name), keeping your wording and tone. The corrected sentence comes back and replaces the old one in the field; one tap undoes it.
  • With the sentence it sends: if the sentence came from voice, the other ways the speech recognisers heard it; the text before (up to 800 characters) and after (up to 300 characters) the sentence; up to 150 of your keywords; your one-line description, if you have one (section 3); the name and identifier of the app you are typing in and the kind of field and app (for example chat or email), so that the fix suits it; and your punctuation settings.
  • Nothing is sent unless you tap ✦. The first time you tap it, OmuType shows what will be sent and asks; if you choose 唔使 (no), nothing is sent and OmuType asks again the next time you tap ✦. You can change this in OmuType's settings under 私隱 (AI features).
  • Translate (譯做英文 / 譯做中文, and 轉書面語, which turns spoken Cantonese into written Chinese) is part of the ✦ check and counts as one. When you tap it, the keyboard sends the words you chose (a selection, the word at your cursor, or the whole message), up to about 1,200 characters of the message before and after them so that the translation keeps their meaning, and your keywords, to the same AI provider. Links and email addresses are replaced by placeholders before anything is sent. The translation comes back and replaces those words; 撤銷 undoes it. The same consent and the same AI switch apply.
  • 旅遊模式 (Settings › 翻譯, off by default) adds one travel language, Japanese or Thai, to translate into; for Thai it also sends the polite ending you chose (ครับ, ค่ะ or none). With 旅遊模式 and its 複製外文自動譯 switch on (on by default), when you copy text written in that language (Japanese with kana, or Thai), the keyboard sends the copied text, and nothing else, to the same AI provider, and shows it in Cantonese where the keys are; nothing is put into the box you are writing in. It does this only for a copy made in the last 10 minutes, only after you agreed to AI, never for a password or a clip Android marks sensitive, a verification code, a link or a number, and never in a password field. Each copy translated counts as one ✦ check. With 複製外文自動譯 off, a copy is sent only when you tap 譯做廣東話 beside it; with 旅遊模式 off, copied text is never sent. For Japanese it also sends the style you chose (です・ます or casual).

Keyword import

  • Keyword import lets you ask your own AI assistant (for example ChatGPT or Gemini) to list the names and terms you use, and paste its answer into OmuType. The keyboard reads the answer on your phone first; it then sends the items it found (or, if it could not read the answer, the pasted text) once to an AI provider, which sorts them into keywords and writes a one-line description of your work and interests from them. You review the keywords before they are saved.
  • You can also import a list you already have: text you paste (for example from another keyboard's dictionary, your notes or a spreadsheet), or a file you choose or share to OmuType (such as Gboard's personal dictionary export, a .txt or a .csv file). The keyboard splits it into items on your phone and leaves out anything that looks like an email address, a link, or a phone or other number. It then sends the remaining items once to an AI provider, which may fix capital letters, split items that hold several words and drop notes in brackets, and sorts them. It cannot add a word that is not in your list. You review every keyword before it is saved.
  • Nothing is sent unless you paste an answer or a list, or choose a file, and start the import.

Emoji suggestions

  • Only if you have agreed (OmuType asks the first time you open the emoji page, and the choice can be changed in settings under 私隱): when you open the emoji page, the keyboard sends the sentence before your cursor (at most its last 60 characters, back to the last full stop, question mark, exclamation mark or line break), with up to 12 emoji the keyboard found for it on your phone, to an AI provider that puts the emoji most likely to fit first. Nothing is sent when there is no text before the cursor. The answer is remembered on your phone for that sentence, so opening the page again on the same text sends nothing.
  • Each of these requests also carries your last 10 emoji picks, each with the words you typed just before it (at most 30 characters), so the suggestions follow your own habit (for example ✅ after a finished task). These pairs are kept only on your phone and are recorded only in boxes where AI features are allowed (never in the type-only or voice-without-AI boxes below).
  • With the same agreement, after you dictate, the words you spoke (up to 500 characters) are sent the same way, so that emoji can be offered beside the result. Without it, emoji come only from the list on your phone.
  • Searching for emoji (搵 emoji) and the recent-emoji menu (hold the emoji key) work entirely on your phone and send nothing.

GIFs and 貼圖

  • The 貼圖 (Alano stickers) are stored in the app. Browsing, searching and sending them happens on your phone and sends nothing to us.
  • GIFs come from KLIPY, a GIF library. Opening the GIF tab or one of its tabs, or searching for a GIF, sends a request through our server: the words you typed in the GIF search (never the text of the box you are writing in). A search the keyboard cannot put into English itself is turned into English search words by an AI provider, and the search and its English are kept on our server, without your install ID, so the same search is not translated twice. KLIPY never receives your install ID: every request reaches it as OmuType.
  • The GIF tab is not offered in type-only fields. The small previews and the GIFs you send are downloaded from KLIPY's servers and kept on your phone for a short time; the last 24 GIFs and 20 stickers you sent are kept on your phone only.

Private fields

The keyboard sorts each field when it opens, from what the app tells it: the field's type (password, number, phone number, date, email address, a person's name), Android's no-personalised-learning flag (which incognito modes use), the field's label where the app gives one, and whether the app is a bank or wallet app on OmuType's list. The most private answer wins.

  • Type only: passwords and PINs, fields with the no-learning flag, number, phone-number and date fields, and fields labelled as a username, card number, security code, one-time code, ID number or account number. There is no microphone (its button shows a grey lock), no ✦ and no emoji suggestions. No text from the field is read for context or sent, and nothing typed there is remembered or recorded.
  • Voice without AI: fields for a person's name or an email address, and every field in a bank or wallet app on OmuType's list. Voice works: the recording and your keywords go to the speech-recognition providers, but no text from the field goes with them, spoken commands are off, and nothing is sent to an AI provider (no ✦ and no emoji suggestions). Nothing typed there is remembered or recorded.
  • All other fields (messages, notes, search boxes, addresses, web addresses) work as described in the rest of this section.

OmuType can only go by what the app tells the keyboard. Web pages in Chrome, for example, do not pass a field's label to the keyboard, so a website's name, username or card-number field that is not marked with its type is treated as an ordinary field: nothing is sent while you type, but if you use voice or ✦ there, the recording and the text in the field can be sent as described above.

3. What we collect

The following list is complete as at the date shown above.

Kept only on your phone

  • Your keywords: the words, names and codes you add yourself, from the keyboard's "加入 Keywords" (add to keywords) button, from the text-selection menu ("Add to OmuType keywords"), in settings, or by keyword import, words you kept as typed instead of an autocorrection, plus a short starter list of common Hong Kong apps and brands that you can delete. Each keyword carries where it came from and the date it was added.
  • Your one-line description (「關於你」 in settings): a sentence about your work and what you talk about, written by keyword import from your keywords. You can edit or clear it at any time.
  • Autocorrections you undid: up to 500 pairs of words.
  • The counts behind 你嘅效率 (in Settings: how many taps and how much time voice saved you): for each day, how many characters of the messages you sent voice wrote and how many you typed, the keys and mic presses, how long you spoke, and how many of voice's sentences you sent unchanged, kept for 120 days; and your typing rate (keys per character and characters a minute), learnt from messages you typed. The text of your messages is not kept, nothing is counted in the private fields described in section 2, and the counts are never sent to us.
  • Your 32 most recently used emoji, and your last 10 emoji picks each with the words typed just before it (at most 30 characters; not recorded in the type-only or voice-without-AI boxes).
  • Your settings (punctuation style, Chinese input method, haptics, spacing, keyboard height, the accuracy check).
  • A random install ID, created when the app is first opened. It is not derived from your phone, your SIM, your Google account or anything else about you. (Inviting friends, below, uses a separate scrambled phone code.)
  • While you are speaking, the recording of that one utterance, held in memory (at most about 60 seconds) so it can be resent if the connection drops. It is discarded when the utterance ends and is never written to storage.

If your phone backs up app data to your Google account, Android may include these items in that backup. That backup is between you and Google; we cannot see it.

Sent from your phone when you use voice

  • Your voice, as audio, while the microphone is on.
  • Spelling hints, so that names come out right: up to 50 of your keywords, and names written in Latin letters that are already in the field. When you put the cursor in a field and the microphone permission is on, the keyboard opens the connection to the speech provider in advance so that voice starts instantly, and the hints are sent then. No audio is sent until you press the microphone, and the connection closes after 30 seconds of not being used.
  • When the backup speech provider is in use, the last 48 characters before your cursor, to help it continue the sentence.
  • With the accuracy check on, your one-line description (at most 120 characters), if you have one, with the recording, so that the second transcription knows the kind of words you use.
  • For spoken instructions only: the words you spoke; the text before and after your cursor (up to 1,500 characters each way) and any selected text; the kind of field (search, chat, email or other) and the identifier of the app you are typing in (for example com.whatsapp), so that the result suits it; and up to 100 keywords.

Sent through our server when you tap ✦

  • The sentence at your cursor and, for a sentence that came from voice, the other hearings of it; the text around it; up to 150 keywords; your one-line description; the app's name and identifier, the kind of field and app; and your punctuation settings, as section 2 describes.

Sent through our server when you import keywords

  • The items the keyboard found in the answer you pasted, or the pasted text if it could not read it, and your existing keywords (so that the one-line description covers all of them).
  • For a list or a file: the items the keyboard found in it, without email addresses, links and numbers. Your existing keywords are not sent with it.

Sent through our server when you search for GIFs

  • The words typed in the GIF search, or the GIF tab you opened. Our server keeps each search with the English it was searched in, and a count of searches per install, never the words with your install ID.

Sent through our server when you use emoji suggestions

  • When you open the emoji page: the sentence before your cursor and up to 12 candidate emoji, as section 2 describes.
  • After dictation: the words you spoke, up to 500 characters.
  • With either: your last 10 emoji picks, each with the words typed just before it (at most 30 characters).

When you invite friends or use a friend's invite

  • Your invite code (five letters and digits) and, for a friend's invite, which code you used, whether it came from the link or was typed, and when you first used the keyboard. Using the keyboard means one voice turn or 20 typed characters; only that it happened is sent, never what you said or typed.
  • A scrambled phone code: a one-way SHA-256 hash of the number Android gives this app on your phone (Android's ANDROID_ID, which differs for every app and cannot be turned back into it). It is sent only for invites, so that the same phone reinstalled cannot claim an invite again or count as a new friend. It is not linked to your name, SIM, Google account or anything you type.
  • The VIP days that invites give, against the install ID, and how many of your friends counted.
  • The invite link opens Google Play with your code attached; Google Play passes it to the app once, when it is first opened.

When you subscribe to OmuType VIP

  • Google Play (on Android) or the App Store (on iPhone and iPad) takes the payment. We never see your name, card or payment details.
  • Through RevenueCat (section 6), we receive for your install ID: which plan was bought, when it was bought, renews, is cancelled or ends, the store's order and purchase identifiers, the price and currency, and the country of the store. This purchase history is linked to the install ID, not to your name or email address.

Kept on our servers

  • Your install ID, the app version, the language setting of your phone (for example zh-HK), the platform (Android), and when that install ID was first and last seen.
  • For a VIP subscriber: the plan and the date it runs until, against the install ID.
  • One row for each backend call and each use of the microphone: the install ID, which service was called, the kind of result (for example "dictate" or "rewrite"), how many characters went in and came out, the size or length of the audio, which model answered, how long it took, and whether it succeeded, with the error message if it did not.

These rows never contain your audio, what you said, the text in your field or your keywords. They exist so we can count usage, keep costs and abuse in check, and find faults.

Our hosting provider also keeps short-lived technical logs of requests to our servers, which may include your IP address. We do not copy IP addresses into our own records.

4. What we do not collect, and do not do

Each statement in this section is a representation as to our current practice and may be relied on as such.

  • No accounts. We do not ask for your name, email address or phone number to use OmuType.
  • No keystroke logging, on our servers or anyone else's.
  • No storage of your recordings, transcripts, field text or pasted imports by us. They pass through our servers where section 6 says they do, and are discarded once the answer is returned.
  • No advertising, no advertising identifiers, no analytics or crash-reporting SDKs, no tracking across other apps or websites, and no profile of you. The one third-party SDK in the app, RevenueCat's, is used only to make, restore and check purchases of OmuType VIP.
  • No sale or rental of personal data, in any form, to anyone.
  • No use of your voice or text to train AI models, by us, or by our providers under the terms we use them on.
  • No location, contacts, photos or files, except a keyword file you choose to export or import yourself, or a list you choose to import.

5. Why we use it

  • to turn your voice into text, and to carry out the edits and rewrites you ask for by voice;
  • to check and fix a sentence when you tap ✦;
  • to turn an answer you paste into keywords and a one-line description;
  • to suggest emoji that fit what you are writing;
  • to get your names and terms right, using your keywords;
  • to count use of the voice features per install, so we can manage cost, set fair limits and detect abuse of our servers;
  • to find and fix faults and measure speed; and
  • to comply with the law and with lawful orders and directions.

That list is complete. We will not use your personal data for any other purpose without first asking for your consent.

6. Who else receives your data

Voice, the ✦ check, keyword import and emoji suggestions need a small number of service providers. They process your data on our behalf, under written agreements, and may not use it for their own purposes, such as training their models. Under the PDPA we remain responsible for what they do with it for us, and under the PDPO we use contractual means to protect it. They are held to protection at least equal to this policy.

  • Alibaba Cloud (Model Studio, Singapore region) — live speech recognition. Your voice and the spelling hints are streamed straight from your phone to it, using a short-lived access code our server issues, so our servers never see that audio. It is also an AI provider for spoken instructions (via our server), and is the one used first for them at the date of this policy; and it is the backup provider for the ✦ check.
  • OpenAI (United States) — the accuracy check: when a recording ends, it is sent once through our server to OpenAI to be transcribed again, with up to 50 spelling hints and your one-line description. OpenAI is also the AI provider used first for the ✦ check, the AI provider for keyword import and for putting GIF searches into English, and a backup AI provider for spoken instructions. Under its API terms, OpenAI does not train on this data and may keep it for up to 30 days to detect abuse before deleting it. You can turn the accuracy check off in OmuType's settings; voice then uses Alibaba Cloud's result alone.
  • ElevenLabs (United States) — backup speech recognition, used only if Alibaba Cloud cannot be reached. Your voice, the spelling hints and the 48 characters before the cursor are sent straight from your phone. On our current plan ElevenLabs keeps a log of requests under its own retention terms, which we cannot switch off.
  • Anthropic and Google (United States) — backup AI providers for spoken instructions. Neither is in use at the date of this policy. If we switch one on, it will receive what section 3 lists for spoken instructions, only under API terms that do not permit training on it, and we will update this list first.
  • TypeSafe AI (United States) — emoji suggestions: the sentence or the words you dictated, with the candidate emoji and your last 10 emoji picks with the words before each, are sent through our server to its Jev model, which orders the emoji. Under its customer agreement TypeSafe does not train its models on this data. It may keep requests for a period under its own retention terms, for operations and abuse prevention; on our current plan we cannot switch that off.
  • KLIPY (United States) — the GIF library: the English search words (or the tab opened) are sent through our server, as OmuType and without your install ID; the GIF previews and the GIFs you send are downloaded from its servers.
  • Supabase (servers in Seoul, South Korea) — hosts our backend: the functions that issue access codes, pass spoken instructions, accuracy checks, ✦ checks, keyword imports and emoji suggestions to the providers above, and store the usage rows in section 3.
  • RevenueCat (United States) — manages OmuType VIP subscriptions. The app sends RevenueCat your install ID and, when you subscribe or restore, the purchase record from Google Play or the App Store; RevenueCat checks it with Google or Apple and tells our server whether the install has VIP and until when. It keeps the purchase history in section 3 under its own retention terms. It never receives your voice, your text or your keywords.
  • Google Play (Google, United States) — sells and bills OmuType VIP on Android under Google's own terms and privacy policy. Google shares no payment details with us.
  • Apple App Store (Apple, United States) — sells and bills OmuType VIP on iPhone and iPad under Apple's own terms and privacy policy. Apple shares no payment details with us.
  • Google ML Kit (Google, United States) — only if you choose 手寫 (handwriting): the handwriting model is downloaded from Google once, and your handwriting is recognised on your phone. Your ink and the text it becomes are never sent. ML Kit sends Google usage metrics under Google's terms: device and app information, an installation identifier, performance figures and the recogniser's settings.

Beyond these, we disclose personal data only where the law requires it, where a court order or lawful direction compels it, or where disclosure is necessary to protect someone from harm. If the operation of OmuType passes to another company, the small amount of data we hold (section 3) passes with it; we will announce that in the app before it takes effect, and the new operator will be bound by this policy.

7. Data sent outside Singapore and Hong Kong

We are a Singapore company, and our providers process data in Singapore, South Korea and the United States, as listed in section 6. Wherever you are, including Hong Kong, using voice, ✦, keyword import or emoji suggestions therefore sends your data outside your own territory.

Section 26 of the PDPA permits this only where the recipient is bound to a standard of protection comparable to the Act's. We rely on our written agreements with each provider, which impose those obligations. For users in Hong Kong, we apply the same safeguards so that data transferred outside Hong Kong is protected to a standard comparable to the PDPO.

8. How long we keep it

  • Recordings, transcripts, field text, pasted imports, keywords and your one-line description sent for voice, ✦, keyword import or emoji suggestions: not kept by us. They are processed and discarded as soon as the answer is returned. Section 6 states what each provider may keep, and for how long.
  • Purchase history for OmuType VIP (section 3): kept by RevenueCat and in our install record while we operate OmuType, and after that for as long as tax and accounting law requires.
  • Install record and usage rows: kept while we operate OmuType, to count usage over time and investigate abuse. They are not currently deleted on a timed basis. You can have the rows for your install deleted at any time (section 10).
  • Hosting logs: kept by our hosting provider for a short period under its own schedule, which we do not control.
  • Everything on your phone: kept until you delete it (keywords can be removed one by one in settings), clear OmuType's storage, or uninstall the app.

If we withdraw OmuType, the purpose for which the server records are held ends with it, and we will delete them within 30 days of the service closing.

9. Keeping it safe

All traffic between your phone, our servers and our providers is encrypted in transit. Provider API keys are held only on our servers and never ship in the app; the phone receives only short-lived access codes. Our database tables can be reached only by our own server functions, never directly from the internet. We keep no copy of voice content, so there is none to leak from us.

No service can promise it will never suffer a data breach. If a breach is likely to cause you significant harm, or affects 500 or more people, Part 6A of the PDPA requires us to assess it, notify the Personal Data Protection Commission within 3 calendar days of that assessment, and notify you where we can reach you. We will do so.

10. Delete your data

On your phone, without contacting us

  • Remove single keywords in OmuType's settings, under keywords.
  • Remove everything: Android Settings → Apps → OmuType → Storage → Clear storage, or uninstall OmuType. This deletes your keywords, your one-line description, undone autocorrections, any swipe log from before 1.0.9, emoji, link-page cookies and site data, settings and the install ID.
  • Stop voice from sending anything: turn off OmuType's microphone permission in Android Settings. Typing keeps working.
  • Stop the ✦ check and emoji suggestions from sending anything: turn off AI features in OmuType's settings under 私隱 (or choose 唔使 when asked). Keyword import sends nothing unless you paste an answer or a list into it, or choose a file.
  • Stop emoji suggestions from sending anything: pick emoji from the recent-emoji menu (hold the emoji key) or from search, which work on your phone alone, rather than opening the emoji page.

On our servers

Email privacy@omucloud.co with the subject "OmuType data deletion" and include your install ID, which OmuType shows in its settings, under About. We will delete the install record and every usage row for that ID within 30 days and confirm by reply. We ask for nothing else, and we do not need your name.

Please ask before clearing storage or uninstalling: that deletes the install ID from your phone, and without it no one, including us, can tell which records were yours. If you have already removed the app, tell us roughly when you used voice, your app version and your phone model, and we will delete any records we can match.

Recordings and text are not held by us, so there is nothing of that kind for us to delete. Copies a provider keeps under section 6 expire on that provider's schedule.

11. Your rights

You may ask us for a copy of the personal data we hold about you, for information about how it has been used or disclosed in the past year, and to correct anything inaccurate. You may also withdraw your consent to any use at any time. Write to privacy@omucloud.co, with your install ID so we can find your records.

Singapore (PDPA)

We respond as soon as reasonably practicable. If we cannot respond within 30 days, we will tell you within that period when we will. Correction requests are free. For access requests we may charge a reasonable fee; if so we will give you a written estimate first. If you withdraw consent, we will tell you the likely consequences first; withdrawing consent to voice processing means voice can no longer be used, while typing continues to work.

Hong Kong (PDPO)

You may make a data access request and a data correction request under sections 18 and 22 of the PDPO. We will comply within 40 days of receiving it, and any fee for access will not be excessive. We will use your data only for the purposes in section 5 or directly related purposes, and will not use it in direct marketing. If you are not satisfied, you may complain to the Office of the Privacy Commissioner for Personal Data.

Elsewhere

If you live in the European Economic Area, the United Kingdom, California or another place that gives you rights over your personal data, such as rights to erasure, restriction, objection or portability, we will honour them for the data described here, and you may complain to your local data protection authority. We do not sell or share personal data for cross-context behavioural advertising.

12. On iPhone and iPad

OmuType for iPhone and iPad is distributed through the App Store. This policy applies to it as written, with these differences. On iOS a keyboard cannot reach the network unless you turn on "Allow Full Access" for it in Settings. Typing works without Full Access and is processed on the device; Full Access is used only for the voice, ✦, keyword import and GIF features described in this policy: the same data, the same providers, the same limits. An iOS keyboard cannot record sound itself, so starting voice input opens the OmuType app, which holds the microphone for the voice session and sends the recording as described above. The keyboard reads the clipboard only when you open its clipboard page or tap to paste. On iOS the scrambled phone code for invites is a one-way SHA-256 hash of the number iOS gives this developer's apps on your phone (identifierForVendor), and it is used the same way; an invite code is typed or pasted instead of passed by the store. If you enter an Android phone's device code to share its OmuType VIP, that code is sent once to link the two installs. Where this policy mentions Android's backup to your Google account, on iOS it is the device's iCloud or computer backup, which is between you and Apple.

13. OmuType for Mac

OmuType for Mac (the offline edition) is a separate input method for macOS, downloaded from omutype.co. It collects nothing and sends nothing: it has no permission to use the network and contains no code that connects to the internet, so none of the data described in sections 3 to 8 is created for it. What you type is processed on your Mac only and is never saved: the characters you pick are kept in memory only while it runs. It has no account, no analytics and no crash reports, and it does not update itself. When you download it from omutype.co, the website adds one to a count of downloads for that day and version; nothing about you, your device or your browser is recorded with it. Separately, omutype.co uses DataFast, a web analytics service, in its cookieless mode to count visits and clicks on the download buttons: it sets no cookies and tells visitors apart by a code worked out from your IP address and browser with a key that changes every day, so your visits on different days are not linked. Its one link, in its settings, opens our website in your browser, where the website's own terms apply. macOS shows a notice when you add any third-party input method that it can read what you type; OmuType for Mac reads your keys only to type them and has no way to send them anywhere.

OmuType for Mac 語音版 (the voice edition) is a second, separate download. Its typing works exactly as above: what you type is processed on your Mac only and is never sent. When you hold its voice key and talk, it records your voice for as long as you hold it and handles it as the OmuType keyboard on your phone does (sections 3 to 8): the audio goes to our servers and our speech-recognition and AI providers to become text, together with the keywords you keep for voice, and the audio is not kept. The install has a random install ID and a device code, and our server counts its voice time for the weekly free voice and VIP, as for a phone. It sends nothing while you only type. You can link it to a phone's VIP by entering that phone's device code in its settings; the two installs then share one plan and one weekly allowance. macOS asks your permission before it uses the microphone, and the microphone is on only while you talk. If you also allow it Accessibility in System Settings, then while you hold the voice key it reads, on your Mac, the text in the box you are typing in around the cursor (up to 200 characters before it, up to 200 selected and up to 100 after it) and the uncommon words shown on screen, such as names, companies and brands. The box text and up to 10 of those words are sent with the audio so the result spells them the way they are written; neither is kept. It never reads password fields, and it reads nothing while you only type.

14. Children

OmuType is for adults aged 18 and over (see our Terms) and is not directed at children or teenagers. Because it has no accounts, we do not know the age of anyone using it and we do not knowingly collect personal data from anyone under 18. If you are a parent or guardian and believe your child has used voice features, write to privacy@omucloud.co with the child's install ID and we will delete the records for it.

15. Changes to this policy

We may update this policy. If a change materially affects how we handle your personal data, such as a new kind of data or a new provider, we will tell you in the app before it takes effect, and the date at the top will change. Where the law requires your consent, we will ask for it rather than assume it from continued use.

16. Contact and complaints

Questions, requests and complaints about personal data go to privacy@omucloud.co, or by post to Alano Tech Pte. Ltd., 60 Paya Lebar Road, #06-28, Singapore 409051. We will acknowledge and investigate any complaint and tell you the outcome.

If you are not satisfied, you may complain to the Personal Data Protection Commission of Singapore at pdpc.gov.sg or, in Hong Kong, the Privacy Commissioner for Personal Data at pcpd.org.hk. Nothing in this policy limits your right to do so.

Alano Tech Pte. Ltd. · 60 Paya Lebar Road, #06-28, Singapore 409051 · info@omucloud.co