Privacy Policy

Effective October 27, 2026

Who we are

Rizz Keyboard is made by Collin Boler, an independent developer in New Jersey, USA ("we", "us"). There's no company behind it, just one person.

This policy covers the Rizz Keyboard iPhone app, the Rizz Keyboard keyboard that comes with it, and this website, rizzkeyboard.com. Under data protection laws like the GDPR, Collin Boler is the "controller" responsible for the personal data described here. You can reach us at 3 Shepherd Lane, Madison, NJ 07940, USA, by phone at (973) 533-8028, or by email at [email protected].

What the keyboard can access

The keyboard needs two permissions that only you can turn on in iOS Settings. Here's what it can reach and what we actually use it for.

• Full Access. iOS only lets a keyboard use the internet with Full Access, and Rizz Keyboard needs the internet to reach our relay server and get replies from the AI. It also lets the keyboard read Photos and share settings (like your Pro status) with the app. iOS warns that a keyboard with Full Access could send what you type. Rizz Keyboard doesn't log keystrokes, and it doesn't store or send what's in your text box.
• Full Photos access. This lets the keyboard see a screenshot the moment you take it. With "Limited" access, iOS hides new screenshots from it. While the keyboard is waiting, iOS tells it when items are added to your library, and it checks the dates of your newest images. It opens only the one image it's about to send, and doesn't browse, upload, or copy the rest of your library. But any new image counts, not just screenshots (see What's sent to the AI). If that image is stored only in iCloud Photos, iOS may download it from iCloud first.
• Clipboard. While the keyboard is waiting, it checks whether a new image has been copied, in any app (for example with "Copy & Delete" on the screenshot preview), and sends it. It reads copied text only when you tap "Paste text".
• Your text box. When you tap a reply, the keyboard reads the text around your cursor only so it can clear your current draft and put the reply in its place. That text isn't stored or sent anywhere.

The app itself checks, on your phone, whether Rizz Keyboard is in your list of enabled keyboards and whether Photos access is on, so it can show your setup progress. Its practice chat also notices when you take a screenshot (iOS tells the app a screenshot was taken, not what's in it) so the tutorial can move on. None of this leaves your phone.

What's sent to the AI, and when

Rizz Keyboard writes reply suggestions using an AI model from OpenAI. Nothing is sent until you've agreed to AI data sharing (see Your choice about AI data sharing). After that, the keyboard sends a request when:

• Any new image shows up in your Photos library while the keyboard is open and waiting. It's picked up and sent automatically, and it doesn't have to be a screenshot. That includes a photo you take with the camera, an image you save or AirDrop, media another app saves to Photos for you (some chat apps do this on their own), and a photo that arrives through iCloud from your other devices or a Shared Library. What counts is the image's date in Photos (usually when it was taken or created), not when it reached your library: it's picked up if it's dated after the keyboard started waiting, or up to about a minute before you opened the keyboard. An older photo you AirDrop, sync, or restore from Recently Deleted usually keeps its original date, so it isn't picked up on its own. If you step away from the keyboard (say, to edit a screenshot) and come back within about three minutes, the wait carries on, so an image made while you were away counts too. Each time you come back within three minutes, the wait carries on again, so it can last longer than that in total.
• An image is copied to your clipboard while the keyboard is waiting, including while you've briefly stepped away as above. It can be copied in any app, or arrive through Universal Clipboard from your Mac or iPad. Also picked up and sent automatically.
• You tap "Use last screenshot" (your newest screenshot, or your newest image if you have no screenshots).
• You tap "Paste text" (the image or text on your clipboard).
• You tap "gimme another" (the same image or text again, plus the replies already suggested, so the new one is different).

If you don't want an image sent, switch away from Rizz Keyboard (with the globe key) before you take photos, save images, or copy them, or turn off AI data sharing.

Each request from the keyboard contains:

• the image, shrunk to about 1,400 pixels on its longest side and compressed as a JPEG, or the copied text;
• any replies already suggested for that chat (for "gimme another");
• where it came from: a screenshot, another photo, your clipboard, or pasted text;
• a random install ID, created on your phone (see Our relay server);
• whether Help improve Rizz Keyboard is on, with a random ID for the chat (see What we keep); and
• an app key that's the same in every copy of Rizz Keyboard, so the relay can turn away traffic that isn't from the app.

It doesn't include your name, an account, contacts, location, or your advertising identifier. Like any internet request, it also carries your IP address and basic technical details such as the app version.

The keyboard sends the request over an encrypted (HTTPS) connection to our relay server, not straight to OpenAI. The relay adds our instructions to the AI and sends OpenAI only the image or text, the earlier suggestions, and those instructions, also over HTTPS. It doesn't send OpenAI your install ID or IP address. OpenAI sends back suggested replies (and the other person's last message, as it reads it from the chat). The relay passes those back to the keyboard, which shows them to you.

When you tap a suggested reply, and Help improve Rizz Keyboard is on, the keyboard also tells the relay which one you tapped (not what's in your text box).

Unless you turn off Help improve Rizz Keyboard, our relay keeps what you send and the replies for up to 90 days (see What we keep to improve Rizz Keyboard). On your phone, replies live only in the keyboard's memory while you use it. For troubleshooting, the keyboard also keeps its last 30 requests and responses in memory (text only, no images). That list is never saved or sent, and it's gone when iOS closes the keyboard.

How OpenAI handles it. OpenAI processes requests on our behalf, as our service provider, to generate your replies. Under OpenAI's API policies, data sent to its API isn't used to train its models by default, and OpenAI may keep it for up to 30 days to monitor for abuse before deleting it, unless the law requires it to be kept longer. Those are OpenAI's commitments, not ours, and OpenAI can change them. See OpenAI's enterprise privacy page and OpenAI's policies.

In the app's practice chat, the keyboard shows built-in sample replies and doesn't send anything to the AI.

Our relay server

Every request for replies goes from the keyboard to a small relay server we run, and the relay forwards it to OpenAI. The relay keeps our OpenAI key off your phone and limits abuse. Here's everything it handles:

• Where it runs. The relay runs on Cloudflare Workers, usually at the Cloudflare location nearest you. Cloudflare processes the traffic, including your image or text, as our infrastructure provider, under Cloudflare's Privacy Policy. Like any web host, Cloudflare also handles technical information such as your IP address to route requests and protect against attacks.
• Your content. The relay reads your image or text to build the request to OpenAI, then passes the replies back to you. If Help improve Rizz Keyboard is on, it also keeps a copy (see What we keep). It never logs your images, text, or replies.
• Random install ID. The first time it's needed, your phone creates a random ID for your install of Rizz Keyboard and keeps it in the app's storage. The keyboard sends it with each request. It isn't derived from your name, email, Apple ID, phone hardware, or advertising identifier, and we don't link it to any of them or to you. The relay uses it to limit how many requests one install can send per minute, and, in scrambled form, to file what it keeps so it can be deleted when you ask.
• IP address. Your IP address reaches the relay with every request, as with any internet connection. The relay uses it only for the same kind of per-minute limit. For IPv6 addresses it uses just the first half of the address, the part that usually belongs to your home network or mobile connection.
• Rate-limit counters. The counts behind these limits are kept by Cloudflare's rate-limiting service for about a minute, then expire. We can't look them up, and they aren't combined with anything else.
• Technical logs only. For each request, the relay logs only whether it worked, an error code if it failed, how long it took, which AI model and version of our instructions it used, and whether it had to ask the AI twice. It doesn't log images, text, replies, IP addresses, install IDs, or request headers. Cloudflare keeps these logs for up to 7 days.
• What the relay doesn't handle. Your free-reply count and Pro status are checked on your phone, not by the relay. The relay never gets your name, email, Apple ID, subscription details, or payment details.

We use the install ID and IP address only to keep the relay working, to prevent abuse, and (the install ID) to find what we keep from your install. We don't use them to identify or track you.

What we keep to improve Rizz Keyboard

Unless you turn it off, our relay keeps a copy of what you send and what the AI writes back, so we can see how well replies work on real chats and make them better. The setting is Help improve Rizz Keyboard, under Settings › Privacy in the app. It's on by default, and you're told about it when you agree to AI data sharing.

• What's kept. Screenshots, meaning only images iOS marks as screenshots. A camera photo, a saved or AirDropped image, or an image from your clipboard is never kept, even when the keyboard sends it to the AI. Also kept: text you paste, the replies the AI suggested and its short read of the chat (including the other person's last message as the AI read it), the replies already suggested for that chat, which reply you tapped, our instructions to the AI, which AI model answered, how long it took, and when.
• How it's filed. Under a scrambled (hashed) form of your random install ID, and a random ID for each chat, so everything from one install can be found and deleted. Your IP address isn't kept, and we never have your name, email, or Apple ID to file it under.
• What we use it for. Only to improve Rizz Keyboard's replies: reading examples, testing and comparing our instructions and AI models, and possibly fine-tuning an AI model that writes Rizz Keyboard's replies. We don't sell it, share it for advertising, use it to build profiles, or try to identify or contact anyone in it.
• Who can see it. Only us. It's stored in Cloudflare R2, Cloudflare's storage service, acting as our service provider, and it's encrypted at rest. If we fine-tune a model with a provider such as OpenAI, examples go to that provider only for that purpose, under its API terms.
• How long. Each item is deleted automatically 90 days after it's saved.
• Turning it off. Stops anything more from being kept, and deletes everything already kept from your install the next time you open the keyboard. (Only the keyboard talks to our relay, so it does the deleting.) If you delete the app before then, what was kept still expires after 90 days.

Your choice about AI data sharing

You're asked before anything is sent. When you start the app, you agree to the Terms of Use and this policy, and the same screen says we keep screenshots and replies to improve Rizz Keyboard unless you turn that off. During the app's setup, a screen explains that new screenshots and images you save or copy while the keyboard is open go to OpenAI automatically, plus any screenshot or text you pick, and that they can include the other person's messages. It asks you to agree. If you skip setup or tap "Not now", the keyboard asks the same thing before you first use it, with an "Agree" button. Your choice is saved on your phone. If you delete and reinstall the app, you're asked again.

Until you agree, nothing is sent, including images the keyboard would otherwise pick up automatically, and the keyboard can't suggest replies. Only images added after you agree are picked up automatically. An image you added earlier is sent only if you tap "Use last screenshot" or "Paste text".

You can turn AI data sharing off (or back on) at any time in the app under Settings › Privacy › AI data sharing. Turning it off stops the keyboard from sending anything more. It can't recall what was already sent to OpenAI. To delete what we kept, turn off Help improve Rizz Keyboard (see What we keep). You can also turn off Full Access or Photos access in iOS Settings whenever you like.

Other people in your screenshots

Chat screenshots usually show someone else's name, messages, and maybe their photo, and a photo the keyboard picks up automatically can show other people too. Only send what you have the right to share. You're responsible for making sure you're allowed to share it.

Your agreement covers your own choice to send it. It isn't consent from the people in it, so we limit what happens to their information. It's used to write the replies you asked for and, if Help improve Rizz Keyboard is on, kept for up to 90 days only to improve replies (see What we keep). We don't use it to build profiles, identify or contact anyone, or try to infer anything about them. Chats can also reveal sensitive things, like someone's sexual orientation, health, or beliefs. Those get the same limits.

Tip: tap the screenshot preview to crop out anything you'd rather not share before it's saved, or copy just their message and use "Paste text".

Data stored on your phone

The app and keyboard keep a few small settings on your phone. None of it is sent to us, except the random install ID, which goes with each request to our relay. PostHog also keeps its own random ID in the app (see Analytics and session recordings).

To delete it: remove Rizz Keyboard in iOS Settings › General › Keyboard › Keyboards, then delete the app. iOS deletes the data the app and keyboard stored along with them. Deleting the app doesn't delete what our relay kept to improve Rizz Keyboard: turn off Help improve Rizz Keyboard and open the keyboard once first, or it expires after 90 days (see What we keep). Deleting the app doesn't cancel a subscription (see below).

Purchases and Apple

Rizz Keyboard Pro is an auto-renewing subscription sold through the App Store. Apple handles payment and billing under Apple's Privacy Policy. We never see your name, Apple ID, or payment details. The app checks whether your subscription is active on your phone using Apple's StoreKit, and shares only the date your current subscription period ends with the keyboard. When a free trial or subscription starts, renews, is canceled, expires, or is refunded, Apple notifies our relay, and we record that event in PostHog (see Analytics): the plan, its price and currency, your App Store country, the dates, and Apple's transaction ID for the subscription. That ID isn't your name, Apple ID, or payment details, and we don't link it to the app's analytics ID. We use these events to count trials, subscriptions, and revenue. Apple also gives developers sales reports that don't identify you. Manage or cancel your subscription in iOS Settings › [your name] › Subscriptions.

If you've turned on sharing with app developers in iOS (Settings › Privacy & Security › Analytics & Improvements), Apple may give us crash reports and usage statistics that don't identify you.

Analytics and session recordings

We use PostHog, a product analytics service in the United States, to learn how people use the Rizz Keyboard app and this website, so we can fix confusing screens and improve setup.

• In the app (not the keyboard): PostHog records which screens you open and what you tap, basic device information (model, iOS version, app version, language), and screen recordings of your time in the app. In recordings, every image and every text field is covered over before it leaves your phone, so they show the app's own buttons and text, not your photos or anything you type.
• The keyboard has no analytics. Nothing about your chats, screenshots, replies, or typing is sent to PostHog.
• On this website: PostHog records pages viewed, clicks, and screen recordings of the visit. It stores its data in your browser's session storage, which is cleared when you close the tab, and it doesn't set cookies. It respects your browser's Do Not Track setting.
• Subscriptions: Apple's notices about your trial or subscription (see Purchases and Apple) are recorded in PostHog under Apple's transaction ID for that subscription, separately from the app's analytics.
• Identifiers: PostHog uses a random ID it creates for your app install or browser tab. It isn't tied to your name, email, Apple ID, or advertising identifier, and we don't combine it with anything that identifies you. PostHog drops your IP address from what it stores.
• Not for ads or tracking: this data is used only to improve Rizz Keyboard. It isn't sold, shared for advertising, or combined with data from other companies' apps or sites.

Emails and this website

If you email us, we get your email address and whatever you include, and we use it only to answer you. We keep support emails only as long as we need them to help you, and we'll delete them if you ask.

This website has no ads or tracking cookies. It uses local scripts for the interactive demos and PostHog analytics (see Analytics and session recordings). It's hosted on Cloudflare Pages. Like any web host, Cloudflare processes technical information such as your IP address and browser type to deliver pages and protect against attacks, under Cloudflare's Privacy Policy. If Cloudflare needs to check for automated traffic, it may set a strictly necessary security cookie (such as __cf_bm or cf_clearance), used only for that check.

What we don't do

• No accounts or sign-ups. The app never asks for your name or email.
• No advertising or crash-reporting SDKs. The app's only third-party SDK is PostHog analytics, and the keyboard has none.
• No ads, and no tracking across other companies' apps or websites. The app doesn't use your advertising identifier (IDFA), so it never asks for tracking permission.
• We don't sell your personal information or share it for cross-context behavioral advertising, and we don't work with data brokers.
• No keystroke logging.
• We don't let OpenAI or anyone else train their own AI models on what you send. What we keep is used only to improve Rizz Keyboard (see What we keep).

How long data is kept

• On your phone: until you delete the app.
• Screenshots, pasted text, and suggested replies: with Help improve Rizz Keyboard on, kept by our relay for 90 days, or until you turn it off and open the keyboard. Other images are never kept. OpenAI may keep what it receives for up to 30 days under its policies.
• Install ID and IP address at our relay: the IP address isn't stored, and the install ID is stored only in scrambled form with what we keep, for as long as that's kept. Cloudflare's rate-limit counters expire after about a minute.
• Relay logs: technical details only (whether a request worked, error codes, timing), with no content, IP addresses, or install IDs. Cloudflare keeps them for up to 7 days.
• Support emails: as long as needed to help you, then deleted.
• Analytics: PostHog keeps screen recordings for 30 days. Usage events are kept for as long as we use them to improve the app, and we delete them if you ask.
• Website visits: besides PostHog analytics, we keep no logs; Cloudflare keeps standard logs under its policy.

Security

Requests to the AI travel over HTTPS, which encrypts them in transit (TLS). What we keep to improve Rizz Keyboard is stored in Cloudflare R2, encrypted at rest, reachable only through our Cloudflare account, and deleted after 90 days. We don't keep names, emails, or IP addresses, and install IDs only in scrambled form. Our OpenAI key lives only on the relay, not in the app. On your phone, the app's data is protected by iOS's sandboxing and encryption. No system is perfectly secure, which is why we collect as little as we can.

Where data is processed

We're based in the United States. Our relay runs on Cloudflare's network, usually at the location nearest you, which may be in another country, and OpenAI processes requests in the United States. OpenAI, Cloudflare, PostHog, and our other providers may process data in the United States and other countries. If you use Rizz Keyboard from outside the US, including from the EEA, the UK, or Switzerland, what you send is transferred to the US for processing. Where the law requires it, these transfers rely on safeguards such as the Standard Contractual Clauses in our providers' data processing terms.

Your rights (EEA, UK, and everywhere)

If you're in the European Economic Area, the UK, or Switzerland, these are our legal bases for using your data:

• Consent for sending your images and text through our relay to OpenAI to get replies. If what you send reveals sensitive information about you, we rely on your explicit consent to use it, only to write your replies. You can withdraw consent at any time in the app's Settings.
• Contract for providing the app, the keyboard, your free replies, and your subscription (which is checked on your phone).
• Legitimate interests for keeping what you send to improve Rizz Keyboard (you can object at any time by turning off Help improve Rizz Keyboard, which also deletes it), for handling other people's information that appears in what you send (only to write the replies you asked for and to improve replies, with the limits in Other people in your screenshots), using the install ID and IP address briefly for per-minute rate limits, answering support emails, and keeping the relay and website secure and free of abuse.
• Legal obligation where the law requires us to keep or disclose something.

Wherever you live, you can ask to access, correct, or delete your personal data, get a copy of it, restrict or object to how we use it, and withdraw your consent (this doesn't affect anything done before you withdrew). In the EEA, UK, or Switzerland, you can also complain to your local data protection authority, such as the UK Information Commissioner's Office.

How requests work. Email [email protected]. There are no accounts, so apart from any email you sent us, the only thing we may hold is what we kept to improve Rizz Keyboard. It's filed under a scrambled install ID, not your name or email, so we can't find it from an email; the quickest way to delete it is to turn off Help improve Rizz Keyboard and open the keyboard. Everything else expires within 90 days. The data on your phone is in your control (see Data stored on your phone), and Cloudflare's rate-limit counters expire within about a minute. Requests reach OpenAI from our relay and carry no name, account, or install ID, so neither we nor OpenAI can usually link them to you, and OpenAI deletes them on its own schedule. If you'd like, we'll pass your request on to OpenAI or tell you how to contact them. We'll reply within 30 days and may ask for details to confirm the request is from you.

US state privacy rights

Residents of California, New Jersey, and other US states with privacy laws have the right to know what personal information we collect and why, to access, correct, and delete it, to get a copy of it, and to opt out of its sale, its use for targeted advertising, and profiling. We honor these requests from anyone, whether or not a particular law applies to us.

In the past 12 months, the only personal information we have handled is:

• Content you send or that the keyboard picks up automatically (images, usually screenshots, and text, which may include personal and sensitive information about you and others), used to write your replies and, unless you turn it off, kept for up to 90 days to improve them. It's disclosed only to our service providers: OpenAI, and Cloudflare, which runs our relay and stores what we keep.
• Identifiers: a random install ID and your IP address, used by our relay for per-minute rate limits and to prevent abuse. The IP address isn't stored. The install ID is stored only in scrambled form, to file what we keep. Cloudflare's rate-limit counters expire after about a minute.
• Technical information such as the app version and your browser type, received briefly by our relay and our web host (both run on Cloudflare) to deliver the service and prevent abuse.
• Subscription status, from Apple, checked only on your phone and not sent to us.
• Your email address, only if you email us.

We don't sell or share personal information as those laws define it. We use sensitive personal information only to provide and improve the replies you ask for, and never to infer characteristics about you or anyone else. We don't do profiling that has legal or similarly significant effects. We don't track anyone, but we'd treat a Global Privacy Control signal as an opt-out request. You can use an authorized agent, and we won't treat you differently for exercising your rights.

Appeals. If we turn down your request, you can appeal by replying to our answer with "appeal". We'll respond within 45 days. If you're still not satisfied, you can contact your state attorney general.

Children

Rizz Keyboard is for adults 18 and over. It isn't directed to children, and we don't knowingly collect personal information from anyone under 18. If you believe a child has used the app, turn off Help improve Rizz Keyboard and open the keyboard to delete what we kept, or contact us and we'll help.

Changes to this policy

If we change this policy, we'll post the new version on this page and update the effective date. If a change significantly affects how your data is used, such as a new AI provider, we'll let you know in the app or on this site before it takes effect, and ask for your agreement again where the law requires it.

Contact

Collin Boler
3 Shepherd Lane, Madison, NJ 07940, USA
Phone: (973) 533-8028
[email protected]