Privacy Policy

Effective September 29, 2026

Who we are

Rizz Keyboard is made by Collin Boler, an independent developer in New Jersey, USA ("we", "us"). There's no company behind it, just one person.

This policy covers the Rizz Keyboard iPhone app, the Rizz Keyboard keyboard that comes with it, and this website, rizzkeyboard.com. Under data protection laws like the GDPR, Collin Boler is the "controller" responsible for the personal data described here. You can reach us at 3 Shepherd Lane, Madison, NJ 07940, USA, by phone at (973) 533-8028, or by email at collinboler@gmail.com.

What the keyboard can access

The keyboard needs two permissions that only you can turn on in iOS Settings. Here's what it can reach and what we actually use it for.

• Full Access. iOS only lets a keyboard use the internet with Full Access, and Rizz Keyboard needs the internet to reach our relay server and get replies from the AI. It also lets the keyboard read Photos and share settings (like your Pro status) with the app. iOS warns that a keyboard with Full Access could send what you type. Rizz Keyboard doesn't log keystrokes, and it doesn't store or send what's in your text box.
• Full Photos access. This lets the keyboard see a screenshot the moment you take it. With "Limited" access, iOS hides new screenshots from it. While the keyboard is waiting, iOS tells it when items are added to your library, and it checks the dates of your newest images. It opens only the one image it's about to send, and doesn't browse, upload, or copy the rest of your library. But any new image counts, not just screenshots (see What's sent to the AI). If that image is stored only in iCloud Photos, iOS may download it from iCloud first.
• Clipboard. While the keyboard is waiting, it checks whether a new image has been copied, in any app (for example with "Copy & Delete" on the screenshot preview), and sends it. It reads copied text only when you tap "Paste text".
• Your text box. When you tap a reply, the keyboard reads the text around your cursor only so it can clear your current draft and put the reply in its place. That text isn't stored or sent anywhere.

The app itself checks, on your phone, whether Rizz Keyboard is in your list of enabled keyboards and whether Photos access is on, so it can show your setup progress. Its practice chat also notices when you take a screenshot (iOS tells the app a screenshot was taken, not what's in it) so the tutorial can move on. None of this leaves your phone.

What's sent to the AI, and when

Rizz Keyboard writes reply suggestions using an AI model from OpenAI. Nothing is sent until you've agreed to AI data sharing (see Your choice about AI data sharing). After that, the keyboard sends a request when:

• Any new image shows up in your Photos library while the keyboard is open and waiting. It's picked up and sent automatically, and it doesn't have to be a screenshot. That includes a photo you take with the camera, an image you save or AirDrop, media another app saves to Photos for you (some chat apps do this on their own), and a photo that arrives through iCloud from your other devices or a Shared Library. What counts is the image's date in Photos (usually when it was taken or created), not when it reached your library: it's picked up if it's dated after the keyboard started waiting, or up to about a minute before you opened the keyboard. An older photo you AirDrop, sync, or restore from Recently Deleted usually keeps its original date, so it isn't picked up on its own. If you step away from the keyboard (say, to edit a screenshot) and come back within about three minutes, the wait carries on, so an image made while you were away counts too. Each time you come back within three minutes, the wait carries on again, so it can last longer than that in total.
• An image is copied to your clipboard while the keyboard is waiting, including while you've briefly stepped away as above. It can be copied in any app, or arrive through Universal Clipboard from your Mac or iPad. Also picked up and sent automatically.
• You tap "Use last screenshot" (your newest screenshot, or your newest image if you have no screenshots).
• You tap "Paste text" (the image or text on your clipboard).
• You tap "gimme another" (the same image or text again, plus the replies already suggested, so the new one is different).

If you don't want an image sent, switch away from Rizz Keyboard (with the globe key) before you take photos, save images, or copy them, or turn off AI data sharing.

Each request from the keyboard contains:

• the image, shrunk to about 1,400 pixels on its longest side and compressed as a JPEG, or the copied text;
• any replies already suggested for that chat (for "gimme another");
• a random install ID, created on your phone (see Our relay server); and
• an app key that's the same in every copy of Rizz Keyboard, so the relay can turn away traffic that isn't from the app.

It doesn't include your name, an account, contacts, location, or your advertising identifier. Like any internet request, it also carries your IP address and basic technical details such as the app version.

The keyboard sends the request over an encrypted (HTTPS) connection to our relay server, not straight to OpenAI. The relay adds our instructions to the AI and sends OpenAI only the image or text, the earlier suggestions, and those instructions, also over HTTPS. It doesn't send OpenAI your install ID or IP address. OpenAI sends back suggested replies (and the other person's last message, as it reads it from the chat). The relay passes those back to the keyboard, which shows them to you.

We don't store your images, text, or replies, on a server or anywhere else. Replies live only in the keyboard's memory while you use it. For troubleshooting, the keyboard also keeps its last 30 requests and responses in memory (text only, no images). That list is never saved or sent, and it's gone when iOS closes the keyboard.

How OpenAI handles it. OpenAI processes requests on our behalf, as our service provider, to generate your replies. Under OpenAI's API policies, data sent to its API isn't used to train its models by default, and OpenAI may keep it for up to 30 days to monitor for abuse before deleting it, unless the law requires it to be kept longer. Those are OpenAI's commitments, not ours, and OpenAI can change them. See OpenAI's enterprise privacy page and OpenAI's policies.

In the app's practice chat, the keyboard shows built-in sample replies and doesn't send anything to the AI.

Our relay server

Every request for replies goes from the keyboard to a small relay server we run, and the relay forwards it to OpenAI. The relay keeps our OpenAI key off your phone and limits abuse. Here's everything it handles:

• Where it runs. The relay runs on Cloudflare Workers, usually at the Cloudflare location nearest you. Cloudflare processes the traffic, including your image or text, as our infrastructure provider, under Cloudflare's Privacy Policy. Like any web host, Cloudflare also handles technical information such as your IP address to route requests and protect against attacks.
• Your content passes through and isn't kept. The relay reads your image or text only to build the request to OpenAI, then passes the replies back to you. It has no database or other storage, and it doesn't log your images, text, or replies.
• Random install ID. The first time it's needed, your phone creates a random ID for your install of Rizz Keyboard and keeps it in the app's storage. The keyboard sends it with each request. It isn't derived from your name, email, Apple ID, phone hardware, or advertising identifier, and we don't link it to any of them or to you. The relay uses it only to limit how many requests one install can send per minute.
• IP address. Your IP address reaches the relay with every request, as with any internet connection. The relay uses it only for the same kind of per-minute limit. For IPv6 addresses it uses just the first half of the address, the part that usually belongs to your home network or mobile connection.
• Rate-limit counters. The counts behind these limits are kept by Cloudflare's rate-limiting service for about a minute, then expire. We can't look them up, and they aren't combined with anything else.
• Technical logs only. For each request, the relay logs only whether it worked, an error code if it failed, and how long it took. It doesn't log images, text, replies, IP addresses, install IDs, or request headers. Cloudflare keeps these logs for up to 7 days.
• What the relay doesn't handle. Your free-reply count and Pro status are checked on your phone, not by the relay. The relay never gets your name, email, Apple ID, subscription details, or payment details.

We use the install ID and IP address only to keep the relay working and to prevent abuse. We don't use them to identify or track you.

Your choice about AI data sharing

You're asked before anything is sent. During the app's setup, a screen explains that new screenshots and images you save or copy while the keyboard is open go to OpenAI automatically, plus any screenshot or text you pick, and that they can include the other person's messages. It asks you to agree. If you skip setup or tap "Not now", the keyboard asks the same thing before you first use it, with an "Agree" button. Your choice is saved on your phone. If you delete and reinstall the app, you're asked again.

Until you agree, nothing is sent, including images the keyboard would otherwise pick up automatically, and the keyboard can't suggest replies. Only images added after you agree are picked up automatically. An image you added earlier is sent only if you tap "Use last screenshot" or "Paste text".

You can turn AI data sharing off (or back on) at any time in the app under Settings › Privacy › AI data sharing. Turning it off stops the keyboard from sending anything more. It can't recall what was already sent, which we don't keep anyway. You can also turn off Full Access or Photos access in iOS Settings whenever you like.

Other people in your screenshots

Chat screenshots usually show someone else's name, messages, and maybe their photo, and a photo the keyboard picks up automatically can show other people too. Only send what you have the right to share. You're responsible for making sure you're allowed to share it.

Your agreement covers your own choice to send it. It isn't consent from the people in it, so we limit what happens to their information. It's used only to write the replies you asked for, and then it's gone. We don't keep it, use it to build profiles, identify or contact anyone, or try to infer anything about them. Chats can also reveal sensitive things, like someone's sexual orientation, health, or beliefs. Those get the same limits.

Tip: tap the screenshot preview to crop out anything you'd rather not share before it's saved, or copy just their message and use "Paste text".

Data stored on your phone

The app and keyboard keep a few small settings on your phone. None of it is sent to us, except the random install ID, which goes with each request to our relay.

To delete it: remove Rizz Keyboard in iOS Settings › General › Keyboard › Keyboards, then delete the app. iOS deletes the data the app and keyboard stored along with them. Turning AI data sharing off in Settings changes only that one choice. Deleting the app doesn't cancel a subscription (see below).

Purchases and Apple

Rizz Keyboard Pro is an auto-renewing subscription sold through the App Store. Apple handles payment and billing under Apple's Privacy Policy. We never see your name, Apple ID, or payment details. The app checks whether your subscription is active on your phone using Apple's StoreKit, and shares only an on/off Pro setting with the keyboard. Your subscription status isn't sent to us or to our relay. Apple gives developers sales reports that don't identify you. Manage or cancel your subscription in iOS Settings › [your name] › Subscriptions.

If you've turned on sharing with app developers in iOS (Settings › Privacy & Security › Analytics & Improvements), Apple may give us crash reports and usage statistics that don't identify you.

Emails and this website

If you email us, we get your email address and whatever you include, and we use it only to answer you. We keep support emails only as long as we need them to help you, and we'll delete them if you ask.

This website has no analytics, ads, or tracking cookies, and no scripts of its own. It's hosted on Cloudflare Pages. Like any web host, Cloudflare processes technical information such as your IP address and browser type to deliver pages and protect against attacks, under Cloudflare's Privacy Policy. If Cloudflare needs to check for automated traffic, it may set a strictly necessary security cookie (such as __cf_bm or cf_clearance), used only for that check.

What we don't do

• No accounts or sign-ups. The app never asks for your name or email.
• No analytics, crash-reporting, or advertising SDKs. The app uses only Apple's own frameworks.
• No ads, and no tracking across other companies' apps or websites. The app doesn't use your advertising identifier (IDFA), so it never asks for tracking permission.
• We don't sell your personal information or share it for cross-context behavioral advertising, and we don't work with data brokers.
• No keystroke logging.
• We don't use your images or text to train AI models.

How long data is kept

• On your phone: until you delete the app.
• Images and text you send: not kept by us or our relay. OpenAI may keep them for up to 30 days under its policies.
• Suggested replies: only in the keyboard's memory while you use it.
• Install ID and IP address at our relay: used while handling each request and not stored by us. Cloudflare's rate-limit counters expire after about a minute.
• Relay logs: technical details only (whether a request worked, error codes, timing), with no content, IP addresses, or install IDs. Cloudflare keeps them for up to 7 days.
• Support emails: as long as needed to help you, then deleted.
• Website visits: we keep no logs; Cloudflare keeps standard logs under its policy.

Security

Requests to the AI travel over HTTPS, which encrypts them in transit (TLS). We don't keep a database of images, text, replies, names, emails, install IDs, or IP addresses, so there's none of that to be breached. Our relay has no storage of its own, and our OpenAI key lives only on the relay, not in the app. On your phone, the app's data is protected by iOS's sandboxing and encryption. No system is perfectly secure, which is why we collect as little as we can.

Where data is processed

We're based in the United States. Our relay runs on Cloudflare's network, usually at the location nearest you, which may be in another country, and OpenAI processes requests in the United States. OpenAI, Cloudflare, and our other providers may process data in the United States and other countries. If you use Rizz Keyboard from outside the US, including from the EEA, the UK, or Switzerland, what you send is transferred to the US for processing. Where the law requires it, these transfers rely on safeguards such as the Standard Contractual Clauses in our providers' data processing terms.

Your rights (EEA, UK, and everywhere)

If you're in the European Economic Area, the UK, or Switzerland, these are our legal bases for using your data:

• Consent for sending your images and text through our relay to OpenAI to get replies. If what you send reveals sensitive information about you, we rely on your explicit consent to use it, only to write your replies. You can withdraw consent at any time in the app's Settings.
• Contract for providing the app, the keyboard, your free replies, and your subscription (which is checked on your phone).
• Legitimate interests for handling other people's information that appears in what you send (only to write the replies you asked for, with the limits in Other people in your screenshots), using the install ID and IP address briefly for per-minute rate limits, answering support emails, and keeping the relay and website secure and free of abuse.
• Legal obligation where the law requires us to keep or disclose something.

Wherever you live, you can ask to access, correct, or delete your personal data, get a copy of it, restrict or object to how we use it, and withdraw your consent (this doesn't affect anything done before you withdrew). In the EEA, UK, or Switzerland, you can also complain to your local data protection authority, such as the UK Information Commissioner's Office.

How requests work. Email collinboler@gmail.com. Since there are no accounts and we keep no images, text, replies, install IDs, or IP addresses, we usually hold nothing about you except any email you sent us. The data on your phone is in your control (see Data stored on your phone). Our relay stores nothing, and Cloudflare's rate-limit counters expire within about a minute, so there's nothing there for us to look up or delete. Requests reach OpenAI from our relay and carry no name, account, or install ID, so neither we nor OpenAI can usually link them to you, and OpenAI deletes them on its own schedule. If you'd like, we'll pass your request on to OpenAI or tell you how to contact them. We'll reply within 30 days and may ask for details to confirm the request is from you.

US state privacy rights

Residents of California, New Jersey, and other US states with privacy laws have the right to know what personal information we collect and why, to access, correct, and delete it, to get a copy of it, and to opt out of its sale, its use for targeted advertising, and profiling. We honor these requests from anyone, whether or not a particular law applies to us.

In the past 12 months, the only personal information we have handled is:

• Content you send or that the keyboard picks up automatically (images, usually screenshots, and text, which may include personal and sensitive information about you and others), used only to write your replies and disclosed only to our service providers: OpenAI, and Cloudflare, which runs our relay.
• Identifiers: a random install ID and your IP address, used by our relay only for per-minute rate limits and to prevent abuse. We don't store them, and Cloudflare's rate-limit counters expire after about a minute.
• Technical information such as the app version and your browser type, received briefly by our relay and our web host (both run on Cloudflare) to deliver the service and prevent abuse.
• Subscription status, from Apple, checked only on your phone and not sent to us.
• Your email address, only if you email us.

We don't sell or share personal information as those laws define it. We use sensitive personal information only to provide the replies you ask for, and never to infer characteristics about you or anyone else. We don't do profiling that has legal or similarly significant effects. We don't track anyone, but we'd treat a Global Privacy Control signal as an opt-out request. You can use an authorized agent, and we won't treat you differently for exercising your rights.

Appeals. If we turn down your request, you can appeal by replying to our answer with "appeal". We'll respond within 45 days. If you're still not satisfied, you can contact your state attorney general.

Children

Rizz Keyboard is for adults 18 and over. It isn't directed to children, and we don't knowingly collect personal information from anyone under 18. Because we don't keep images or accounts, there's usually nothing stored to delete, but if you believe a child has used the app, contact us and we'll help.

Changes to this policy

If we change this policy, we'll post the new version on this page and update the effective date. If a change significantly affects how your data is used, such as a new AI provider, we'll let you know in the app or on this site before it takes effect, and ask for your agreement again where the law requires it.

Contact

Collin Boler
3 Shepherd Lane, Madison, NJ 07940, USA
Phone: (973) 533-8028
collinboler@gmail.com