Privacy policy

What LingoKey does

LingoKey helps you learn vocabulary as you type, with typing and learning languages selected separately from 18 supported languages. Chinese conversion can compose sentence candidates; learning provides dictionary word translations, not sentence translation. Composition and dictionary lookup take place offline on your device.

Your typing

The keyboard temporarily processes the text needed for composition, current-word lookup, insertion, and deletion. Provisional pinyin, uncommitted keystrokes, and the surrounding document text are not saved to disk. This temporary text is cleared when the keyboard is dismissed or changes documents. Manually confirmed words can be retained as the local preferences described below. We do not upload your typing or document contents.

Local candidate ranking

Chinese composition can use a small bundled model to rank existing dictionary candidates. The model processes a bounded portion of nearby text on your device. Composition, model context, and candidate scores are temporary memory state; they are not saved as typing history or used to train a model. This processing does not contact an online AI service. Model state is cleared when the keyboard is dismissed or changes documents.

Local word preferences

Across the 18 supported languages, words or short phrases you manually select can influence later suggestions and related words. The local records contain the selected text, its reading when available, selection counts, and last-used times. Language records remain separate; Chinese script choices also remain separate. Automatic first-candidate commits from spaces or punctuation do not reinforce these preferences. Only a keyed HMAC value derived from bounded preceding context is retained for word associations, not the preceding text itself. These records do not contain full documents or a log of keystrokes and are not used to train the bundled neural model.

With Full Access, the keyboard can save these bounded preference records in the local App Group for use across keyboard sessions. Without Full Access, personal preferences remain in keyboard-session memory. The preference storage is excluded from device backups. No preference records, context values, or selected words are uploaded or synced to a server. You can clear saved word preferences from keyboard settings or the app's Help and support page without a Pro subscription. Session-only preferences can be cleared in that keyboard's settings.

Saved preferences

The containing app saves your input language, learning language, and keyboard layout in local App Group preferences. It also saves a local snapshot of verified subscription access and the signed purchase facts needed to check that access so the keyboard can read it offline. The keyboard reads these language and subscription records when shared storage is available and does not modify them. If it cannot read them, it uses its entry defaults and keeps basic typing available. Input language, learning language, and layout changes made inside the keyboard stay in memory for the current session. Key-sound and haptic preferences are saved as two Boolean values in each keyboard extension's own local preferences, not in the shared App Group. Local word preferences are stored separately as described above. No LingoKey account is created.

Optional Full Access confirmation

Full Access is optional. The containing app does not require this permission or its confirmation before use; its instructions in Settings can be skipped or dismissed. Purchase and restore remain accessible, and subscribers can use the app without enabling Full Access. Basic keyboard input, offline candidates, deletion, and switching keyboards also work without it. If you choose to enable and confirm Full Access, add a LingoKey keyboard, enable Allow Full Access in iOS keyboard settings, and select that keyboard in the app's verification field. Opening Settings alone is not confirmation. For each verification, the app creates a new random nonce in the local App Group. A LingoKey keyboard with Full Access can write a small confirmation receipt containing that nonce, the permission-check time, and its extension bundle identifier. The identifier names the keyboard extension, not a device or person. The handshake expires after five minutes, and an earlier receipt cannot confirm a new nonce. A missing, expired, unmatched, or otherwise unverified receipt is not treated as permission granted. This is the only additional shared data used for permission confirmation. It contains no typed text, document content, device identity, or input history, and is not sent to a server. The keyboard's permission receipt is a shared App Group write; language and subscription records remain read-only for the keyboard.

Subscriptions and purchases

LingoKey Pro is required to use the containing app and word-learning features. Basic keyboard typing remains free, including without a subscription or Full Access. Subscriptions are purchased through Apple's App Store. Apple handles payment, and LingoKey does not receive your payment-card details. The containing app uses Apple's StoreKit to load subscription plans, purchase, restore purchases, and verify subscription access. Purchases and restores require an internet connection. The local subscription snapshot contains verified access and its supporting purchase facts, including product and transaction identifiers, purchase and expiration dates, and Apple-signed transaction or renewal information. These facts are used to check subscription access. We do not send your typing or subscription information to a server operated by us.

Network and permissions

Keyboard typing, composition, and dictionary lookup are offline. The containing app's Full Access setup is optional and can be skipped or dismissed. Full Access enables optional key sounds and haptics and the local shared-state writes described above, which depend on the device and system keyboard-feedback and Silent Mode settings. This permission permits network access, but LingoKey does not make keyboard network requests, process input online, or upload what you type. Basic keyboard typing, candidates, deletion, keyboard switching, and offline dictionary processing remain available without Full Access. Shared preferences and subscription records are read when available; unavailable shared storage does not block basic typing. Word-learning access is determined only by Pro subscription access; Full Access does not grant Pro. The keyboard does not request contacts, location, microphone, or photo access. The containing app communicates with Apple's App Store through StoreKit for subscriptions. Apple's handling of App Store account, purchase, and payment information is governed by Apple's App Store privacy notice. LingoKey does not transmit your keystrokes or document contents to Apple. There are no ads, analytics, tracking identifiers, or third-party telemetry services in LingoKey. If you choose to open a source, policy, or subscription-management link, it opens in the relevant Apple interface or your browser, and that service's privacy policy applies.

Offline data

Bundled dictionaries come from CC-CEDICT, Wiktionary via Kaikki, JMdict/EDRDG, jieba word frequencies, and original core vocabulary. Dictionary and bundled model data are not user data. Source credits, applicable licenses, and exportable derived dictionaries are available in About.

Public website

LingoKey's website, privacy policy, service terms, and support instructions are hosted at https://topdeck.games/lingokey/. Other product pages on this domain are separate from LingoKey. Opening a page connects your browser to the website server and supplies ordinary connection information such as your IP address and requested URL. The hosting server may keep ordinary access logs for site operation. These pages contain no advertising or analytics scripts and cannot read your keyboard input, local language preferences, subscription snapshot, or permission-handshake data.

Removing preferences

Use Clear learned word preferences in keyboard settings or Help and support to remove saved manual-selection habits and word associations for all languages. A failed clear is reported so you can try again; clearing word preferences does not change your subscription or language settings. Deleting LingoKey removes the app's local preferences, including saved word preferences, subscription snapshot, and permission-handshake data according to iOS app and App Group storage rules. No remote copy exists with us. Deleting the app does not cancel an App Store subscription. Manage or cancel subscriptions in your App Store account; Apple's purchase records remain subject to Apple's policies.

Changes and contact

For support or privacy requests, contact littlehumangroup@gmail.com. If you contact us, we use the email address and information you voluntarily provide to respond to your request. This is separate from the keyboard, which does not send us your input.

Policy changes are included with app updates. Help and support in the LingoKey app provides offline setup and subscription instructions. Any configured support website or email is shown in the app. If you choose to email support, your mail app sends only the information you choose to include. LingoKey does not attach document contents, typing history, or keyboard diagnostics.

中文说明

支持与隐私问题请联系 littlehumangroup@gmail.com。我们只使用你主动提供的邮箱与问题信息来处理请求；这些信息与键盘分开，键盘不会向我们发送输入内容。

LingoKey 支持 18 种语言之间的词汇学习。中文转换可生成整句候选，学习功能提供词典译词，不提供整句翻译。键盘的打字、组字和词汇查询全部在设备上离线完成，不上传输入内容。临时拼音、尚未确认的按键和周围文档原文不写入磁盘；组字与当前词的临时状态在键盘收起或切换文档时清空。手动确认的词可能作为下述本机选词习惯保留。

完全访问是可选权限。容器 App 不把开启或核验该权限作为使用前提；设置中的说明可跳过或关闭，购买和恢复购买始终可访问，订阅后未开启完全访问也可使用 App。基础键盘输入、离线候选、删除和切换键盘均不依赖完全访问。若自愿开启并确认权限，可添加 LingoKey 键盘，在 iOS 键盘设置开启“允许完全访问”，并在 App 核验输入框切换到实际 LingoKey 键盘；仅打开设置页面不代表已授权。每次核验时，App 在本机 App Group 中生成新的随机 nonce。拥有完全访问权限的 LingoKey 键盘可以写入一份小型回执，仅包含该 nonce、权限检查时间和键盘扩展 bundle 标识。该标识指向键盘扩展，不标识设备或个人。握手有效期为 5 分钟，旧回执不能确认新的 nonce；缺失、过期、不匹配或无法核验时，不视为已授权。权限确认新增共享的数据仅限这份短时握手，不包含键入文本、文档内容、设备身份或输入历史，也不发送到服务器。扩展会写这份 App Group 权限回执，但不会修改共享语言设置或订阅记录。

完全访问用于可选的按键声音、触感及上述本机共享数据写入，反馈还受设备、系统键盘反馈和静音设置影响。此权限允许联网，但 LingoKey 键盘不发起网络请求，不在线处理输入，不上传输入内容。未开启完全访问仍可基础打字、选择离线候选、删除和切换键盘。共享语言设置、订阅记录只在可访问时读取；无法读取时使用该键盘入口的默认设置，不阻止基础输入。词汇学习权限只由 Pro 订阅决定；完全访问不会授予 Pro 权限。

中文组字可使用随 App 提供的小型本地模型，为已有词典候选排序。模型只在设备上处理有限的邻近文本，不连接在线 AI 服务。组字、模型上下文与候选分数仅作为临时内存状态，不保存为输入历史，也不用于训练模型；键盘收起或切换文档时清空模型状态。

18 种语言均可使用手动选词习惯调整后续候选词与关联词。本机记录包括手动确认的词或短语、可用的读音、选择次数和最近使用时间；各语言相互隔离，中文简繁体也分别保存。空格、标点触发的默认首选词上屏不会自动强化这些偏好。词关联只保留由有界前文生成的带密钥 HMAC 值，不保存这段前文原文；不保存文档全文或逐键输入日志，也不用于训练本地神经模型。

开启完全访问后，键盘可将有数量限制的选词偏好保存到本机 App Group，供后续键盘会话使用；未开启时只保留在键盘会话内存中。这份偏好存储排除设备备份，不上传选词记录、上下文值或选中的词，也不向服务器同步。可在键盘设置或 App 的“帮助与支持”中清除所有语言的已保存选词习惯与关联词，无需 Pro 订阅；仅保留在会话内存中的偏好可在该键盘设置中清除。清除失败会显示提示，不会虚报成功。

容器 App 使用 Apple StoreKit 与 App Store 通信，以获取订阅方案、购买、恢复购买和核验订阅权限。购买和恢复购买需要联网。付款由 Apple 处理，LingoKey 不接收付款卡资料，也不会把输入内容发送给 Apple。App Store 账户、购买与付款资料由 Apple 按其隐私政策处理。

使用容器 App 和词汇学习功能需要 Pro 订阅；键盘基础打字始终免费，未订阅或未开启完全访问也可使用。容器 App 在本机保存输入语言、学习语言、键盘布局，以及已核验的订阅权限和用于核验的购买凭据，供键盘在共享存储可访问时离线只读；无法读取时使用键盘入口的默认设置，不阻止基础输入。订阅凭据包括商品与交易标识、购买与到期时间，以及 Apple 签名的交易或续订资料，仅用于检查订阅权限。键盘内的输入语言、学习语言和布局切换仅在当前会话生效；按键声音与触感偏好作为两个布尔值保存于各键盘扩展的本机偏好，不写入共享 App Group。我们不设置自有账户，不向自有服务器发送输入内容或订阅信息，也不含广告、分析或追踪服务。

清除选词习惯不会修改订阅或语言设置。删除 LingoKey 后，本机偏好（包括已保存的选词偏好）、订阅快照及短时权限握手数据按 iOS App 和 App Group 存储规则移除，我们没有其远程副本。删除 App 不会取消 App Store 订阅，请在 App Store 账户中管理或取消。主动打开的外部链接由对应 Apple 界面或浏览器处理，其隐私政策适用。词库及本地模型的署名、许可与可导出的词库数据位于“关于”页面。

LingoKey 官网、隐私政策、服务条款与帮助页面位于 https://topdeck.games/lingokey/，同域名下其他产品页面与 LingoKey 分开。打开网页时，浏览器向网站服务器提供 IP 地址、请求网址等普通连接信息；服务器可能保留用于网站运行的普通访问日志。LingoKey 这些页面没有广告或分析脚本，无法读取键盘输入、本机语言设置、订阅快照或权限握手数据。

App 的“帮助与支持”提供离线说明，并在已配置时展示支持网站或邮箱。主动发送支持邮件时，仅由邮件 App 发送你选择填写的信息；LingoKey 不会附带私人文档、输入历史或键盘诊断。