Privacy
A keyboard sees everything you write.
So here is exactly what SprintText does with it. Nothing on this page is a slogan — it is a description of how the software behaves, written so you can check it against what the app actually asks you for.
Four switches
Everything that could send or keep data is a separate setting, and all four ship off.
They are separate because they are genuinely different decisions. Bundling them into one “improve the product” toggle would be a way of not asking.
-
Continuous learning
Off by default. Until you turn it on, SprintText learns nothing from your ordinary typing. When it is on, it derives vocabulary and phrasing from what you write and folds them into the Brain on your device — through the filter described below, which drops anything that does not look like ordinary prose.
-
Raw typing retention
Off by default. This is the switch that would keep actual typed text rather than derived counts. The app says plainly that turning it on is rarely worth it, because it rarely is.
-
Cloud AI
Off by default — and, as things stand, unused: the AI actions that exist run on Apple’s on-device model, so invoking one sends nothing anywhere. The switch is there for a hosted option that is not wired up yet. If it ever is, it will send the passage you selected and the action you chose, and nothing while you are simply typing.
-
Brain sync
Off by default. When on, your shortcuts and Brain move between your own devices — encrypted on the device before they are uploaded, with a key our server never receives. It is not a backup service for anyone else to read, because there is nobody who could read it.
Full Access
You can type without granting Full Access.
iOS warns you about third-party keyboards for good reason: with Full Access, a keyboard can talk to the network. SprintText is built so the core of it does not need that permission at all.
- Without Full Access: typing, shortcut expansion, the suggestion bar and correction all work.
- Full Access is requested for: haptic feedback, and for syncing between your devices.
- It is never a precondition. Decline it and the keyboard remains fully usable.
What the Brain stores
- Counts of events: expansions, undos, suggestions taken or ignored
- Keystrokes saved
- Vocabulary tokens, only under continuous learning
What it has no field for
- The sentence surrounding a word
- Which app you were typing in
- A transcript of what you typed
Sync
The server holds your Brain and cannot read a word of it.
Sync moves your shortcuts and your learned Brain between your iPhone and your Mac. It is off until you turn it on, and it is built so that trusting us is not part of the deal.
On your device
- Your shortcuts and Brain records are encrypted before anything is uploaded
- The key is generated on the device the first time you switch sync on
- It is stored in the keychain, marked synchronisable, so iCloud Keychain carries it to your other Apple devices
On our server
- Ciphertext, and the housekeeping needed to sync it: which record, which device, which version
- No key — the key never passes through SprintText, so there is nothing to hand over, leak or be compelled to produce
On your other device
- The same key, arriving through iCloud Keychain rather than through us, decrypts the records
- Brain statistics merge rather than overwrite, so training done on your phone is not wiped by your Mac
- A record that cannot be decrypted is reported to you, not silently discarded
What learning refuses to learn
A keyboard sees your passwords too. This one drops them on the floor.
With Continuous Learning on, SprintText builds up a vocabulary from what you type. A word only reaches that vocabulary if it looks like ordinary prose on both sides.
- Prose neighbours only. A run of letters counts as a word when what surrounds it is whitespace or ordinary punctuation. A digit, an
@, a slash, a dot or an underscore beside it disqualifies it — that is the shape of passwords, API keys, order numbers, file paths, version numbers and email addresses. - No vowel, no learning. A letter run with no vowel in it is far more likely to be an acronym, an identifier or a fragment of a secret than a word you write.
- Length limits at both ends. Under three characters and over twenty-four are both refused.
- Rejected means rejected. An over-long run is never truncated to fit, because truncating a rejected secret would turn it into an accepted prefix of one.
- Secure fields never arrive at all. iOS switches to the system keyboard for password fields, so those keystrokes do not reach SprintText in the first place. The filter is the second line, not the first.
Sensitive fields
Some things should never reach a keyboard extension.
- Secure fields are handled by iOS, not by us. When you tap a password field, iOS switches away from third-party keyboards to the system keyboard automatically. SprintText never sees those keystrokes.
- Nowhere to put one anyway. Even if a secret reached the keyboard through an ordinary text field, the learning filter above refuses it, and the Brain has no field for a transcript to hide it in.
- No analytics on your content. We do not measure what you write about. Product analytics, where we use them, are about whether features are used, not what you used them on.
Questions
Privacy questions.
Does SprintText send what I type to a server?
Not while you are typing. Expansion, prediction, correction and learning all happen on the device, and so do the AI actions as they are currently built — they run on Apple’s on-device model. What does leave your device, once you switch sync on, is your shortcuts and Brain in encrypted form, to reach your other devices.
Do you sell data, or share it with advertisers?
No. There is no advertising business here to feed. SprintText is paid for by people who buy SprintText.
What happens to text sent for an AI action?
It is processed to produce the result you asked for and returned to you. It is not used to train general models. Retention periods are set out in the privacy policy.
Can I delete what has been learned?
Yes. Clearing the Sprint Brain removes the learned model from the device. If sync is on, clearing propagates to your other devices rather than leaving a copy behind.
Is the sync encrypted?
Yes, end to end. Records are encrypted on your device before they are uploaded, and the key is generated on your device and travels to your other Apple devices through iCloud Keychain rather than through us. Our server stores ciphertext it has no key for, and a test asserts that the stored ciphertext does not contain the plaintext.
What can SprintText see if it is served a warrant?
For synced data: ciphertext, and the housekeeping around it — which record, which device, which version, when. We do not hold the key, so we cannot produce your shortcuts or your Brain in readable form. We would rather tell you that now than discover it together later.