Privacy Policy
Keywow is a keyboard. People type private things with a keyboard, so we built the product around a simple rule: your keystrokes stay on your phone.
This policy explains what the app does with data, what we receive on our side, and what we never do. It applies to the Keywow Android app (com.keywow.visualkeyboard) and to this website.
Contents
- Who we are and what this policy covers
- Short version
- Information we collect
- How we use information
- What we do NOT do
- Who we share information with
- International transfers
- How long we keep information
- Security
- Your choices and controls
- Your rights
- California privacy notice
- Children and age limits
- Purchases, chests and odds
- Links and third party services
- Changes to this policy
- Contact
- Last updated
1. Who we are and what this policy covers
Keywow is published by Black Black G (BBG), a French SAS (société par actions simplifiée).
- Registered office: 1 Allée des Frênes, 94290 Villeneuve-le-Roi, France
- Company number (SIREN): 902 612 043
- VAT number: FR49902612043
- Country: France
- Contact for privacy, support and legal matters: contact@keywow.app
BBG is the data controller for the personal data described in this policy. That means we decide why and how it is processed, and we are responsible for it.
This policy covers the Keywow Android app and the pages on keywow.app. It does not cover Google Play itself, your phone manufacturer’s software, or any other app you use. Those have their own policies.
We do not require an account. You can play without giving us a name, an email address or a password.
2. Short version
- Your keystrokes are processed on your device. We do not receive them and we do not store them.
- The keyboard ignores text in password and payment card fields, strings made only of digits, and strings containing ”@”.
- No account, no sign up, no email required to play.
- We receive purchase receipts and entitlement status through Google Play and RevenueCat. We never see card numbers.
- We use PostHog for product analytics: app events, device model, OS version, app version, language, coarse country, and a random installation ID.
- We do not sell personal data, we do not use data brokers, and the current version has no third party advertising SDK.
- Our hosting is in the European Union.
3. Information we collect
We collect very little, and each category below is short on purpose.
3.1 Typing and keystrokes
Keywow is an input method editor (IME). It draws effects on top of your keyboard, and each keystroke charges a small game: a samurai named SIKA charges a meter, cuts bamboo, finds keys and opens chests.
All of that happens on your device. The keystroke drives a counter and a visual effect locally. Keystroke content is not sent to our servers, is not stored by us, and is not used to build language models or profiles.
What the keyboard does not capture. The keyboard does not collect text from fields that Android or the app you are typing in marks as password fields or payment card fields. It also ignores two categories of strings, by design:
- strings made only of digits, which covers card numbers, PINs, one time codes and phone numbers;
- strings containing the ”@” character, which covers email addresses and most account identifiers.
This anti-capture rule exists to reduce the chance of touching credentials and financial data, even by accident. It applies before any processing, at the input level. If a string matches one of those rules, the game simply does not count it.
What the game does keep on your device. Your progress (charge level, bamboo cut, keys found, chests opened, weapons forged, upgrades unlocked), your settings (theme, effects, sound, vibration) and your local preferences. This is stored in the app’s private storage on your phone. Uninstalling the app deletes it. We cannot read it remotely.
Clipboard and suggestions. The keyboard does not read your clipboard, does not build a personal dictionary from your messages, and does not keep a history of what you typed. There is no cloud sync of typing data, because there is no typing data on our side.
3.2 Purchases
Purchases are handled by Google Play Billing, with RevenueCat as the subscription and entitlement layer.
When you buy something, we receive:
- the purchase receipt and the transaction identifiers provided by Google;
- the product identifiers you bought;
- your entitlement status (what is active, what expired, what was refunded);
- an anonymised app user ID generated for the app.
Purchases are tied to the Google Play account on the device. We never receive your name, your email address or your card number from Google. We never see or store payment card data. Google processes the payment, and Google’s own privacy policy applies to that step.
3.3 Analytics
We use PostHog to understand whether the app works and where people get stuck. The events are product events only, for example: app open, tutorial step reached, chest opened, purchase funnel step, session start, retention signal.
Along with those events we receive:
- device model;
- Android version;
- app version;
- app language;
- coarse country, derived from your IP address;
- a random installation identifier, created on first launch.
No keystroke content, no message content, no contact names, no clipboard content, and no advertising ID are sent to PostHog.
3.4 Crash reports and diagnostics
If the app crashes, we receive a technical report: the stack trace, the device model, the Android version, the app version and the state of the app at the moment of the crash. This is used to fix bugs. It is not used to identify you, and it does not contain what you typed.
3.5 Website
When you visit keywow.app, our hosting provider, in the European Union, records standard server logs: IP address, date and time, requested page, user agent, response code. We use these logs to keep the site online and to detect abuse. We do not run advertising trackers on this site.
3.7 Cookies and similar technologies
The website keywow.app sets no advertising cookie and runs no third party tracker. The game itself does not use cookies. The only identifier we create is the random installation identifier described in 3.3, stored on your device and used for product statistics.
If we later add a cookie or another tracking technology to the website, this policy changes first, and a consent banner appears wherever the law requires one. Your browser also lets you block or delete cookies; the site works without them.
Do Not Track. Browsers can send a Do Not Track signal. Because we run no cross-site tracking, we treat every visitor the same way, and the signal changes nothing on our side.
3.6 What we do not collect
We do not collect your contacts, your photos, your microphone, your precise location, your SMS, your call log, or your list of installed apps. The app does not request those permissions, so there is nothing to collect.
4. How we use information
| Purpose | Data used | GDPR legal basis |
|---|---|---|
| Run the keyboard and the game on your device | Keystrokes and progress, processed locally only | Not applicable, no transfer to us |
| Deliver what you bought and keep entitlements in sync | Purchase receipt, product identifiers, entitlement status, anonymised app user ID | Performance of a contract (Art. 6(1)(b)) |
| Understand usage and improve the game loop | Product events, device model, OS version, app version, language, coarse country, installation ID | Legitimate interests (Art. 6(1)(f)) |
| Fix crashes and technical faults | Crash reports, stack traces, technical logs | Legitimate interests (Art. 6(1)(f)) |
| Answer your messages and rights requests | What you write to us, your email address | Legitimate interests, or legal obligation for rights requests (Art. 6(1)(c)) |
| Meet accounting and tax duties | Purchase records and invoices | Legal obligation (Art. 6(1)(c)) |
| Keep the website online and secure | Server logs | Legitimate interests (Art. 6(1)(f)) |
| Send optional product news, if you ask for it | Email address | Consent (Art. 6(1)(a)), withdrawable at any time |
We do not use your data for automated decisions that produce legal effects. We do not build advertising profiles.
5. What we do NOT do
- We do not sell personal data, and we have never sold it.
- We do not share data with data brokers or audience resellers.
- We do not show third party advertising in the current version of the app. If we add advertising later, we will update this policy and collect consent where the law requires it, before any ad is served.
- We do not read, store or transmit the content of your messages, notes, search queries or documents.
- We do not collect passwords, PINs or payment card numbers.
- We do not read your contact list or your address book.
- We do not use third party social logins, and we do not ask you to connect a social network.
- We do not track you across other apps or websites.
- We do not require an account, an email address or a phone number to play.
6. Who we share information with
We share data only with the providers needed to run the app and the site. The list is complete.
| Provider | Role | Data concerned | Location |
|---|---|---|---|
| Google (Google Play, Play Billing, Play Console) | App distribution, payments, purchase validation, crash and vitals data | Purchase receipts, transaction identifiers, product identifiers, technical diagnostics | Global, with Google entities in the EEA and the United States |
| RevenueCat, Inc. | Subscription and entitlement management | Anonymised app user ID, purchase receipt, product identifiers, entitlement status | United States |
| PostHog | Product analytics | Product events, device model, OS version, app version, language, coarse country, installation ID | European Union or United States, depending on the configured region |
| Our hosting provider, in the European Union | Hosting of keywow.app and email delivery for contact@keywow.app | Server logs, messages you send us | European Union |
We may also disclose data if the law requires it, for example in response to a valid court order, or to defend our rights in a dispute. If BBG is involved in a merger, an acquisition or a transfer of assets, data may be transferred as part of that operation, and this policy will continue to apply until it is replaced.
We do not share data with anyone else, and we do not allow providers to use it for their own marketing.
7. International transfers
Our hosting is in the European Union. Some providers above are established in the United States: Google and RevenueCat, and PostHog depending on its configured region.
When data leaves the European Economic Area, we rely on the safeguards those providers put in place, in particular the European Commission’s Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework. You can ask us for more detail on the safeguard used for a specific transfer by writing to contact@keywow.app.
Transfers are limited to what each provider needs for its role. Payment card data never reaches us, so it is not part of any transfer we organise.
8. How long we keep information
| Data | Retention | Why |
|---|---|---|
| Keystrokes | Not stored, not received | Processed in memory on your device only |
| Game progress and settings | Until you uninstall the app or clear its data | Stored locally, under your control |
| Purchase and entitlement records | 10 years from the transaction | French accounting and tax obligations |
| Analytics events | 24 months, then deleted or aggregated | Product analysis and retention measurement |
| Installation identifier | Until you uninstall, or 24 months without app use | Counting installs and sessions without an account |
| Crash reports | 90 days | Fixing bugs, then no longer useful |
| Server logs | 12 months | Security and abuse detection |
| Messages sent to contact@keywow.app | 3 years after the last exchange | Handling your request and proving we did |
| Rights requests and their outcome | 5 years | Proving compliance with GDPR obligations |
When a period ends, we delete the data or turn it into aggregated statistics that no longer identify anyone.
9. Security
We apply reasonable technical and organisational measures, proportionate to a small team and to the small amount of data we hold:
- encryption in transit (HTTPS and TLS) for the app, the site and provider calls;
- access to dashboards limited to the people who need it, with individual accounts;
- secrets kept in a managed environment, not in the code or in shared files;
- minimal collection: the best protection is data we never receive;
- regular review of the provider list, to remove anything unused.
No system is perfectly secure. If a breach affects your data and carries a risk for you, we will notify the competent authority and the affected people as required by applicable law, without undue delay.
10. Your choices and controls
You stay in control, mostly through Android itself.
- Remove the keyboard. Android Settings, then System, then Languages and input, then On-screen keyboard. You can switch back to another keyboard at any time, and Keywow stops receiving input immediately.
- Uninstall the app. This deletes the local game data, settings and the installation identifier on the device.
- Clear app data. Android Settings, then Apps, then Keywow, then Storage, then Clear data. Same effect as a fresh install, without removing the app.
- Turn off analytics if the option is offered. Where the app or your region requires consent for analytics, you can refuse or withdraw it, and the app keeps working with local-only data.
- Manage purchases. Subscriptions are managed in Google Play, under Payments and subscriptions. Refunds follow Google Play rules.
- Control notifications and sound. In the app settings, or in Android notifications settings.
- Block tracking identifiers. Android lets you reset or delete your advertising ID. We do not use it, but this setting also affects other apps.
- Write to us. For anything the settings do not cover, contact@keywow.app.
Removing the keyboard or refusing analytics never blocks a purchase you already made. Your entitlements stay tied to your Google Play account.
11. Your rights
If you are in the European Economic Area, the United Kingdom or Switzerland, you have the following rights over your personal data:
- Access: get a copy of the data we hold about you.
- Rectification: have inaccurate or incomplete data corrected.
- Erasure: ask us to delete your data, where no legal obligation requires us to keep it.
- Restriction: ask us to limit how we use your data while a question is being resolved.
- Portability: receive your data in a structured, machine readable format, or have it sent to another controller where technically feasible.
- Objection: object to processing based on our legitimate interests, in particular analytics.
- Withdrawal of consent: withdraw a consent you gave earlier, at any time, without affecting what was done before.
- Complaint: lodge a complaint with a supervisory authority.
How to exercise them. Write to contact@keywow.app with the subject “Privacy request”. Tell us what you want, and which data or which period it concerns. Because there is no account, we may need an identifier to locate your data, for example a purchase order number from Google Play, or the approximate date of your installation. We answer within one month, and we may extend that by two months for complex requests, in which case we tell you.
Complaint. You can contact the CNIL, the French data protection authority, at cnil.fr, or the supervisory authority of your country of residence. We would appreciate the chance to look at your issue first.
12. California privacy notice
This part applies to California residents, under the CCPA as amended by the CPRA.
Categories of personal information we collect: identifiers (installation identifier, purchase transaction identifiers), commercial information (what you bought, entitlement status), internet or network activity (app events, device model, OS version, app version, language), and coarse geolocation (country derived from IP). We do not collect sensitive personal information as defined by the CPRA, and we do not collect biometric data, precise geolocation, health data, or the content of your communications.
Sources: your device and the app, Google Play, and RevenueCat.
Purposes: providing the app and the purchases, analytics to improve the game, security, and legal compliance. Details are in section 4.
Sale and sharing. We do not sell personal information, and we do not share it for cross-context behavioural advertising. There is no advertising SDK in the current version, and no advertising identifier is collected. No opt out signal is needed, because there is nothing to opt out of.
Your rights: to know what we collect, to access it, to delete it, to correct it, to limit the use of sensitive personal information, to opt out of sale or sharing, and to be free from discrimination for exercising these rights. We do not treat you differently if you exercise them.
How to exercise: write to contact@keywow.app with the subject “California request”. We verify your request using the identifiers you can provide, since we hold no account. An authorised agent may act for you with written permission. You can also appeal a refusal by replying to our answer.
Minors. We do not sell the personal information of anyone, including consumers under 16.
13. Children and age limits
Keywow is not directed to children under 13. The minimum age to use the app is 13. Below the age of digital consent in your country, a parent or guardian must agree to the use of the app. In France, that age is 15.
If you are a parent and you believe a child under 13 created a purchase, contact us and also use the Google Play refund process.
We do not knowingly collect data from children under 13. If we learn that we did, we delete it. Because we hold no account and no contact details, this mostly concerns purchase records, which we delete when we can, subject to accounting obligations.
14. Purchases, chests and odds
This section is here because the game has random content, and that deserves plain words.
- Real money never buys keys or chests. Keys are earned by playing: typing charges the meter, the samurai cuts bamboo, keys are found.
- Real money buys deterministic content only: choice cards, the compass with a minimum rarity guarantee, boosters, forge materials, cosmetics, comfort features, and the subscription.
- Odds are published. The rates screen in the app shows the probability of each chest rarity, with two decimals, plus the state of the pity counter. It is visible before you open a chest, not after.
- Published odds are part of the deal. If we change them, we say so in the app before the change takes effect.
The random content is a game mechanic, not a gambling product, and it is never sold for real money.
15. Links and third party services
The app and this site may link to other services, for example Google Play, or a support page. Once you follow such a link, the privacy policy of that service applies, not ours. We do not control what those services collect.
The app relies on Android and Google Play services. Their processing is governed by Google’s privacy policy. We do not embed third party social plugins, advertising networks or tracking pixels.
16. Changes to this policy
We may update this policy when the app changes, for example if we add a feature that processes new data, or if the law changes.
When we do, we update the “Last updated” date at the top and at the end of this page. If the change is significant, we say so in the app or on this page before it takes effect. If a change requires your consent, we ask for it, and we do not apply the change until you agree.
Previous versions are available on request at contact@keywow.app.
17. Contact
Black Black G (BBG) 1 Allée des Frênes 94290 Villeneuve-le-Roi France
SIREN: 902 612 043 VAT: FR49902612043
Email: contact@keywow.app
Use this address for privacy questions, rights requests, support, legal notices and infringement reports. We answer in French or English. We do not charge a fee to handle a rights request.
18. Last updated
This policy was last updated on 25 October 2026.
It applies to the current version of the Keywow Android app and to later versions, until a new version of this policy is published.