- No sign-in, no ads, no tracking. ReplyKey has no sign-in, shows no ads and contains no analytics or advertising SDKs. Our server knows your iPhone only by a random ID.
- Your chats stay on your iPhone. The people you talk to, your profile and your reply history are stored on your device only.
- Only what you ask about goes to the AI. When you ask for replies, the conversation on your screen (usually as text read on your iPhone) passes through our server to an AI provider to write them. Nothing is sent before you ask.
- Our server never stores your chats. It keeps only a random ID, usage counts and technical records of each request (which model, how many tokens, the cost), for 30 to 90 days. You can delete it all in the app.
- ReplyKey never sends a message for you. It only puts text in the message field. You press send.
Who we are
ReplyKey is made by Patryk Reba, an independent developer based in Poland (“we”, “us”). He is the controller of the personal data described here, responsible for the app and this policy. Questions or requests: hello@replykey.app.
The keyboard and Full Access
Once you add the ReplyKey keyboard you can type with it like any keyboard. iOS asks you to allow Full Access for the AI features. Full Access lets the keyboard connect to the internet and share files with the ReplyKey app on your iPhone; ReplyKey needs both to send a conversation to the AI provider and to show the replies in the keyboard.
Apple warns that a keyboard with Full Access could send what you type. ReplyKey does not log, store or send your keystrokes. The only text from the message field it sends is the draft you ask it to rewrite (for example with Shorter, Warmer or Translate).
iOS doesn’t let third-party keyboards into password fields; the system keyboard appears there.
Reading your screen
A keyboard cannot see the app it types into, so ReplyKey reads the chat in one of the ways you choose to set up:
- Live mode uses iOS screen broadcasting, limited to ReplyKey’s own broadcast extension. It only starts when you start it (Back Tap, another shortcut, Control Center or the app), and iOS shows the red recording indicator the whole time. Frames are kept in the extension’s memory on your iPhone and dropped when Live mode pauses or stops. Live mode turns itself off after 10 minutes without use.
- Remember profiles I look at (part of Live mode, on by default, can be turned off): screens that look like a profile or a chat are saved on your iPhone for at most 15 minutes, so a reply can know who you’re talking to. They are deleted when Live mode starts, pauses or stops, when you tap Forget now, or when you turn the setting off. Only profile screens that appear to belong to the person whose chat you ask about are used, and only together with that chat’s replies.
- Screenshots with the Action Button use the “ReplyKey Replies” Apple Shortcut, which takes a screenshot each time you press it and hands it to ReplyKey. These screenshots are scaled down, kept on your iPhone for at most 15 minutes and are not saved to your Photos.
While Live mode runs, the broadcast technically receives everything on your screen, including other apps and notifications, and the audio playing on your iPhone. ReplyKey only analyses what it needs, on your device, and sends nothing until you ask for replies.
What goes to the AI provider
When you ask for replies (Generate replies, the “ReplyKey Replies” shortcut, opening the keyboard after taking screenshots with it, or a reply that appears when you open the keyboard in Live mode because you turned that on), ReplyKey sends one request with:
- The conversation on screen. By default your iPhone recognises the text itself (Apple’s on-device text recognition) and only that text is sent. In some cases, for example when the keyboard is short of memory, the screenshot image is sent instead, scaled down to at most 1200 pixels.
- Profile screens of that person you looked at in the last 10 minutes, if Live mode remembered them.
- What ReplyKey remembers about that person (see below) and the short summary of your own profile from the You tab, so replies sound like you.
- Your instruction, if you gave one (typed or dictated), and the transcripts of voice messages you played (see Voice and audio).
- Recent messages the chat app shares with keyboards, where iOS provides them (a feature of iOS 18.4 and later that only some apps use).
For a rewrite, only the draft in the message field and your instruction are sent.
Who receives it
Every request takes the same path, encrypted (HTTPS) at each step:
- Your iPhone sends it to ReplyKey’s server, which runs on Convex in the United States (AWS, us-east-1). The server checks your daily allowance and passes the request on. It does not store the conversation, the screenshot, the audio or the replies.
- The server passes it to the Convex AI Gateway, which forwards it to the AI model’s maker. Our provider keys stay on the server; your iPhone never talks to the AI providers directly.
- The model’s maker writes the reply, which comes back the same way.
| Model maker | What for |
|---|---|
| Anthropic (Claude) | Reading the chat and writing replies (the default) |
| Google (Gemini) | Reading the chat when the default is unavailable |
| OpenAI (GPT) | Writing replies when the default is unavailable; turning speech into text |
They process the request to produce the reply, under their own privacy terms (linked above). The AI providers receive the content of the request only, not your ReplyKey ID. Anthropic, Google and OpenAI may not use it to train their models. How long they may keep it:
- Convex AI Gateway: keeps usage and billing records (model, tokens, cost). Convex doesn’t publish a retention period for the content of requests passing through the gateway.
- Anthropic: deletes requests and replies within 30 days, unless they are flagged for breaking its usage policy; then it may keep them for up to 2 years.
- Google: may keep requests for up to 55 days to detect abuse.
- OpenAI: may keep requests for up to 30 days to detect abuse. Speech-to-text requests are not kept for this.
ReplyKey keeps the replies it receives on your iPhone; the screenshots themselves are never stored by ReplyKey.
Nothing is sent when you just type, or while Live mode runs without you asking for replies.
What our server keeps
ReplyKey’s server stores no chat text, screenshots, audio, transcripts or replies. To run the service and its daily allowance it keeps:
| What | Why | How long |
|---|---|---|
| A random install ID made by the app, and a session token (stored only as a one-way hash) | To know that requests come from the same install, without an account | Until you delete your data, or 12 months after your last request |
| App version, language setting, and whether Apple’s DeviceCheck confirmed a genuine iPhone | Compatibility, and to stop the free trial being claimed again and again | The same |
| Daily usage counts: replies, rewrites and requests per day, and what they cost us | The daily allowance and limits that protect the service | 90 days |
| A record of each AI request without its content: time, what for (reply, rewrite, reading, speech), model, number of images, tokens, cost, speed, and whether it worked | Limits, cost control, fixing problems | 30 days |
| Your IP address, in a counter that limits how often new sessions can start | Protection against abuse | Deleted within a day after your last request |
| Technical logs: status codes, models, timings and token counts, and your random ID when a daily limit is reached (never the content, never the AI provider’s error messages) | Fixing problems | Convex keeps only a short, rolling history of recent logs, with no fixed period |
Daily totals per model with no user ID (for example “1,200 requests to model X on 3 March”) are kept longer, for our accounts. We ask Apple’s DeviceCheck to remember two yes/no flags for your iPhone (whether it already had a free trial); Apple stores them, not us, and they contain nothing about you.
Accounts not used for 12 months are deleted automatically, together with everything above.
What stays on your iPhone
This is stored in the app’s private storage on your iPhone (shared only between the ReplyKey app and its own extensions). We never receive it.
- Chats: the people you talk to, as text: their name, the app, what their profile said, short descriptions of their photos (never the photos), and up to 400 recent messages.
- You: what you tell ReplyKey about yourself and how you text.
- History: which replies were shown, inserted or rewritten, so you can find them again and so ReplyKey can learn which ones you prefer.
- Words you keep after undoing an autocorrection, in iOS’s own on-device spelling dictionary.
- Settings and a technical log of AI requests (time, model, speed, cost; not the content).
- Short-lived screens and audio: remembered screens, auto screenshots and voice-message clips, each deleted after 10–15 minutes at most.
If you back up your iPhone, these files can be part of your iCloud or computer backup, under Apple’s terms.
Voice and audio
- Dictation (🎤 in the keyboard): a keyboard can’t use the microphone, so the ReplyKey app records instead. While Voice is on, the microphone stays open (iOS shows the orange dot), but only what you say between tapping 🎤 and stopping is kept. That recording is turned into text and deleted. Voice turns off by itself after 15 minutes without use.
- Voice messages in Live mode: when you play a voice message while Live mode runs, ReplyKey turns it into text so the reply knows what was said. This happens only after you agreed in the app to send chats to the AI provider; if you don’t want it, don’t play voice messages while Live mode runs. Clips are kept on your iPhone for at most 10 minutes and deleted when Live mode starts, pauses or stops.
- Where speech becomes text: by default the audio goes the same way as a reply request (our server, then the Convex AI Gateway) to an OpenAI speech-to-text model, and only the text comes back. Our server doesn’t store the audio or the text.
What we don’t collect
- No account, name, email or phone number (unless you write to us). Our server knows your iPhone only by the random ID described above.
- No analytics, crash reporting, advertising or tracking SDKs, and no tracking across other companies’ apps and websites.
- No location, contacts or photo library access.
- No keystroke logging.
If you email us, we use your email address and message only to answer you.
Other people in your chats
The conversations and profiles you ask ReplyKey about contain other people’s messages, names and photos. They are processed only to write your reply, in the way described above, and what ReplyKey remembers about them stays on your iPhone. Please use ReplyKey only for conversations you are part of, and respect the terms of the apps you chat in.
Deleting your data
Everything at once: Settings → About → AI and your chats → Delete my data. This deletes your account on our server (the random ID, usage counts and request records) and everything ReplyKey remembers on your iPhone (people, chats, your profile, history, snippets, saved screens and audio). Your settings stay. It can’t be undone. If you stop using ReplyKey, our server deletes your account by itself after 12 months.
Or delete parts of it on your iPhone:
- One person: Chats → the person → Delete (or Clear conversation), or swipe the person left in Chats.
- Everyone: Chats → Delete all chats.
- Your profile: You → More (…) → Clear Profile.
- History: Chats → History → Clear.
- Remembered screens and audio: Settings → Live mode → Forget now. Stopping Live mode deletes remembered screens and voice-message clips too.
- Everything on your iPhone: delete the ReplyKey app. This removes all of its data from your iPhone (use Delete my data first to also delete it from our server).
Our server never had your chats, so there is no copy of them to delete. The AI providers keep requests only as their terms above describe. You can also ask us by email to delete your data; because we only know your iPhone by a random ID, the button in the app is the surest way.
Your rights and legal basis
If you are in the EU, the UK or a similar jurisdiction, you have the right to access, correct, delete, restrict or object to the processing of your personal data, to data portability, and to complain to your data protection authority. Because ReplyKey keeps your data on your device, you can exercise most of these directly in the app. Settings → About → AI and your chats → Delete my data deletes everything our server holds about you. For anything else, write to hello@replykey.app.
We process the conversations you send to the AI provider to provide the service you ask for (performance of a contract) and because you agreed to it in the app’s “AI and your chats” screen. Chats, especially dating chats, can reveal sensitive information such as your sexual orientation, health or beliefs; we process that only on the basis of your explicit consent given there. You can withdraw it at any time in Settings → About → AI and your chats → Withdraw my OK; after that nothing more is sent.
Messages and profiles of the other people in your chats are processed on the basis of a legitimate interest, yours and ours, in letting you write your own replies, limited to what that requires: they pass through our server to the AI provider without being stored there.
We keep the usage counts and request records described in “What our server keeps” for our legitimate interest in running the service within its limits, protecting it from abuse and controlling its cost, for the periods given there.
International transfers
Our server (Convex, on Amazon Web Services) and the AI providers are in the United States, so if you use ReplyKey from the EU, the UK or Switzerland, your requests are transferred to the US. We rely on the European Commission’s Standard Contractual Clauses (and the UK and Swiss equivalents) in our providers’ data processing terms, and on the EU-US Data Privacy Framework where a provider is certified under it.
Age
ReplyKey is meant for adults. You must be 18 or older to use it, and we don’t knowingly process data of anyone younger.
Changes
If ReplyKey changes what it collects or where it sends data, we will update this page and the date above before the change reaches the app, and point it out in the app for significant changes.
Contact: hello@replykey.app