中文

OSGKeyboard Privacy Policy

Last updated: July 3, 2026 · v0.2.1

OSGKeyboard is a custom iOS keyboard that turns your voice into text. It runs as a Custom Keyboard Extension on iOS 26 and later, and uses Apple's on-device SpeechAnalyzer + DictationTranscriber for transcription. This policy explains what data the app processes and how it is used.

What we collect

• Voice audio — captured only while you actively record. In the local engine, audio is transcribed on-device with Apple's SpeechAnalyzer + DictationTranscriber; raw audio is not uploaded by OSGKeyboard.
• Transcribed text — in Cloud polish mode, the final text (not audio) is sent to the LLM provider you configure (e.g. DeepSeek) for punctuation and formatting. The local engine is ASR-only by default; you must explicitly opt in to cloud polish.
• API credentials — your LLM API key is stored in the iOS Keychain on your device and is read by the keyboard extension only at the moment it makes an LLM request. It is shared with the main app through a shared Keychain group, never through UserDefaults.
• App preferences — engine mode, language, on-device model choices, and keyboard settings are stored in App Group UserDefaults on your device so the main app and keyboard extension can stay in sync.
• Voice history — the host app may keep a local list of recent successful transcripts in its History tab, on-device only, capped at 500 entries.

What we do not collect

• We do not log or upload ordinary keystrokes you type with the keyboard.
• We do not operate analytics, crash reporting, or advertising SDKs.
• We do not upload raw audio to any server, including the LLM provider.
• We do not sell personal data.

How the keyboard extension talks to the host app

OSGKeyboard uses a long-lived "Flow session" hosted in the main app. The keyboard extension writes tiny "start / stop" signals into an App Group, the main app processes the audio and writes the polished transcript back. Nothing leaves your device unless you've explicitly enabled cloud polish, in which case only the transcript (never the audio) is sent to the LLM provider you chose.

Permissions

• Microphone (NSMicrophoneUsageDescription) — required for voice input and the long-lived voice session.
• Speech recognition (NSSpeechRecognitionUsageDescription) — required for on-device transcription via Apple's APIs.
• Full Access — required so the keyboard can reach the microphone, read your API key from the shared Keychain, and request the polished transcript from the host app. Full Access does not grant us access to everything you type; we do not exfiltrate keystrokes.

Third parties

When you enable cloud polish, transcribed text is sent to the OpenAI-compatible API endpoint you configured in Settings (e.g. OpenAI, DeepSeek, Qwen DashScope, Moonshot, Zhipu, or your own self-hosted server). That provider's privacy policy applies to those requests. OSGKeyboard does not proxy, log, or aggregate your requests.

Data retention

Settings and API keys remain on your device until you delete the app or reset settings. Transcription results are passed to the host app you are typing in and are not stored long-term by OSGKeyboard. Voice history is kept locally (up to 500 entries) and is never uploaded; you can clear it at any time from the History tab or by resetting settings.

Children's privacy

OSGKeyboard is not directed to children under 13 and does not knowingly collect personal data from children.

Changes to this policy

We may update this policy as the app evolves. The "Last updated" date at the top will always reflect the current version. Material changes will be called out in the project CHANGELOG.

License

OSGKeyboard is distributed under the OSGKeyboard Source Available License — personal learning and non-commercial local use only. No commercial use, redistribution, or public forks without permission.

Contact

Questions or privacy requests: open an issue at github.com/hkgood/OSGKeyboard, or email rocky.hk@gmail.com.

OSGKeyboard 隐私政策

更新日期：2026 年 7 月 3 日 · v0.2.1

OSGKeyboard 是一款 iOS 自定义键盘，可将语音转为文字。它以自定义键盘扩展的形式运行，需要 iOS 26 及以上系统，转写全程使用 Apple 端侧的 SpeechAnalyzer + DictationTranscriber。本政策说明应用处理哪些数据及用途。

我们处理的数据

• 语音音频 — 仅在你主动录音时采集。本地模式下音频在设备端通过 SpeechAnalyzer + DictationTranscriber 转写，OSGKeyboard 不会上传原始录音。
• 转写文字 — 云端润色模式下，最终文字（非音频）会发送到你配置的 LLM 服务商（默认 DeepSeek）以整理标点和格式。本地引擎默认仅做 ASR，云端润色需显式开启。
• API 凭证 — LLM API Key 保存在设备 Keychain，键盘扩展仅在每次发起 LLM 请求时读取；通过共享 Keychain 组与主 App 共享，不会写入 UserDefaults。
• 应用偏好 — 引擎模式、语言、端侧模型选项、键盘设置等保存在 App Group UserDefaults，仅用于主 App 与键盘扩展之间的状态同步。
• 语音历史 — 主 App 可在「历史」页保留近期成功转写，最多 500 条，仅本机保存，不会上传。

我们不收集的内容

• 我们不会记录或上传你平时在键盘上的击键内容。
• 我们不会集成分析、崩溃上报或广告 SDK。
• 我们不会将原始录音上传至任何服务器，包括你配置的 LLM 服务商。
• 我们不会出售个人数据。

键盘扩展与主 App 的通信方式

OSGKeyboard 采用主 App 维护的「Flow 会话」机制：键盘扩展在 App Group 中写入轻量的「开始 / 停止」信号，主 App 负责处理音频，润色完成后将文字回写到 App Group，键盘扩展再读取并插入。整条链路不会让数据离开你的设备，除非你显式开启云端润色 —— 此时发送的也只是转写文字，不包含录音。

权限说明

• 麦克风（NSMicrophoneUsageDescription）— 语音输入与长生命周期语音会话所需。
• 语音识别（NSSpeechRecognitionUsageDescription）— 调用 Apple 端侧语音能力进行转写所需。
• 完全访问 — 使键盘能使用麦克风、从共享 Keychain 读取 API Key，并从主 App 获取润色结果。完全访问不代表我们会获取你输入的所有内容，绝不外传击键。

第三方

开启云端润色时，转写文字会发往你在设置中配置的 OpenAI 兼容 API 端点（OpenAI / DeepSeek / 通义 DashScope / Moonshot / 智谱 / 自建服务 等），该服务商的隐私政策适用于相关请求。OSGKeyboard 不代理、不记录、不聚合这些请求。

数据保留

设置与 API Key 保留在设备上，直至卸载或重置。识别结果写入你正在使用的宿主 App，OSGKeyboard 不会长期存储。语音历史最多 500 条本机保存，不会上传，可随时在「历史」页清空或通过重置设置清除。

儿童隐私

OSGKeyboard 不面向 13 岁以下儿童，亦不会明知地从儿童处收集个人信息。

政策变更

本政策可能随应用演进而更新，更新日期始终显示在文首。重大变更会在项目 CHANGELOG 中标注。

许可协议

OSGKeyboard 基于 OSGKeyboard 源码可见许可协议 发布 —— 仅限个人学习与非商用本地使用；禁止商用、再分发及公开 fork。

联系

问题反馈或隐私相关请求：github.com/hkgood/OSGKeyboard 提 Issue，或邮件 rocky.hk@gmail.com。