Privacy Policy

Effective date: May 21, 2026
App: Aiko (iOS Custom Keyboard)
Publisher: Yujen Chen d/b/a Aiko (“we”, “us”)
Contact: support@useaiko.com

The short version

Aiko is a keyboard that suggests reply styles for the messages you receive. We designed it so you can use it without giving us your name, email, contacts, or message history. Specifically:

We do not sell your data or share it with advertisers, data brokers, or marketing partners. The only data that briefly touches our servers is the message text you ask Aiko to help you reply to (forwarded to our AI provider, Anthropic, solely to generate the suggestion you requested), plus your IP address, which may be held in a rate-limiting cache for up to 24 hours to prevent abuse.

The longer version explains exactly how that works.


1. What Aiko does

Aiko is an iOS Custom Keyboard Extension. When you tap a gem (Resonance, Spark, or Deepen), Aiko reads the message text currently on your clipboard, sends it to our server, and returns one or more suggested replies for you to choose from. You always pick what to send. Aiko never sends messages on your behalf.

Aiko sends text to our server only when you actively tap a gem to request a suggestion. If you don’t tap a gem, Aiko does not send any message text — clipboard checks stay on your device.

2. Allow Full Access

iOS requires keyboard extensions to request “Allow Full Access” before they can read clipboard contents or make any network requests. Aiko needs this permission to function. Granting it lets Aiko:

iOS shows a system warning before you grant this permission, because in principle a keyboard with Full Access could read anything you type. Aiko does not read what you type. Aiko may check clipboard text while the Aiko keyboard is open so it can show the quoted message, but it does not read your clipboard in the background or when Aiko is not active.

3. What we send to our server

When you trigger a suggestion, Aiko sends the following to our suggestion server (currently hosted on Cloudflare Workers at howlback.chrisyorain.workers.dev/generate):

We do not send your name, email address, phone number, contacts, photos, location, Apple ID, device identifier, or any other personal identifier. We do not have those to send because we never ask for them.

4. How we use that data

Once the rate-limit window expires, your IP is no longer associated with any request.

We do not use your message text or generated suggestions to train Aiko, build user profiles, or personalize the service outside the request you initiate.

5. Anthropic Claude

We use Anthropic’s Claude API to generate suggestions. The message text you ask Aiko to reply to is sent to Anthropic for processing. Anthropic’s handling of API inputs is governed by their commercial terms; per Anthropic’s published policy, API inputs are not used to train their models by default. You can read Anthropic’s privacy practices at anthropic.com.

6. What stays on your device

If you configure Tone preferences, they are saved locally on your device using iOS’s standard preferences storage. They are sent to our server only as part of a suggestion request, and only so the suggestion matches your stated preferences. They are not uploaded, backed up to our servers, or shared with anyone else outside that request.

7. Subscriptions and payments

If you subscribe to Aiko Pro, the transaction is handled by Apple through the App Store. Apple processes your payment information; we never see your credit card, bank, billing address, or Apple ID. We receive subscription status information from Apple, such as whether a subscription is active. You can manage or cancel your subscription anytime in iOS Settings → Apple ID → Subscriptions.

8. What we do not do

To be explicit, Aiko does not:

9. Children

Aiko is not directed to children under 13 and we do not knowingly collect information from anyone under 13. If you believe a child has used Aiko, contact us at support@useaiko.com and we will assist.

10. Your rights

Because Aiko does not maintain user accounts or store personal data, there is no profile to access, export, or delete. You can stop all data flow at any time by:

If you are in a jurisdiction with specific privacy rights (e.g., GDPR, CCPA), you can contact us at support@useaiko.com with any request. We will respond within 30 days. Note that for most requests there will simply be nothing to retrieve, because we don’t keep it.

11. Security

Network requests between Aiko and our server use HTTPS. Our server runs on Cloudflare Workers, and the rate-limit cache uses Cloudflare KV. We may keep temporary technical logs — such as request time, error status, and rate-limit events — for service operation, debugging, abuse prevention, and security. These logs do not include message content and are retained only as long as reasonably necessary for those purposes. We do not maintain any other long-term storage of your data.

However, no method of internet transmission or cloud storage can be guaranteed to be 100% secure. We take reasonable steps to protect the data we briefly handle, but we cannot guarantee absolute security.

12. Changes to this policy

If we change this policy, we will update the “Effective date” above and post the new version at useaiko.com/privacy. Material changes will also be reflected in the in-app About screen. Continued use of Aiko after a change constitutes acceptance.

13. Contact

Questions, requests, or concerns: support@useaiko.com