Privacy Policy

A. Personal Data When you use the Services, we may ask you to provide personally identifiable information ("Personal Data"), which may include: - Email address - First and last name - Phone number (if you choose to provide it) - Device identifiers and local storage data, including the Apple Advertising Identifier (IDFA) when you grant tracking authorization where required - Purchase and subscription status, such as plan, purchase outcome, renewal, and entitlement state - Any other Personal Data you voluntarily provide B. Usage Data We may collect information related to your interaction with the Services, including: IP address, device type, device operating system version, app version, time and date of use, product interactions, feature usage patterns, attribution events, marketing campaign or referral source, unique device identifiers, system logs, performance metrics, and other diagnostic data ("Usage Data"). This data is processed to deliver the Services and is not retained on our servers beyond what is necessary. The only exception is when you voluntarily submit feedback, in which case we collect necessary diagnostic information to help resolve your issue. Where required by platform rules, we collect or use the Apple Advertising Identifier only after you grant permission through Apple's App Tracking Transparency prompt. C. Customer Content (Voice and Text) When you use Rutta, we process your voice audio and the resulting transcription text, along with limited contextual information from the current app you are using, solely to deliver accurate, context-aware results. To enhance the accuracy and relevance of Rutta's outputs, we may collect limited, relevant content from the current input field in the app in use - such as the text already present in the input box. This contextual content is processed solely to deliver the Services and is not retained after results are returned to your device, subject to the data handling practices of our third-party service providers. We do not use your voice audio, transcribed text, or contextual content to train AI models. Any third-party providers we use to process voice data are configured not to use your data for model training, and shared data is not retained beyond what is necessary to complete the transcription. If you voluntarily submit feedback, we may collect associated diagnostic information and, with your explicit consent, pseudonymized text or corrections to improve Rutta for all users. D. Keyboard Extension and Full Access Permission Rutta operates as an iOS keyboard extension. To enable voice input, AI rewriting, and other advanced features, the keyboard requires you to grant "Full Access" permission in your iOS settings. We understand this is a significant level of trust, and we want to be transparent about what this means. What Full Access allows technically: iOS Full Access permits a keyboard extension to send data over the internet and access the network. Without Full Access, the keyboard cannot communicate with our servers to process voice input or deliver AI-powered suggestions. What Rutta does NOT do: Rutta does not log, record, store, or transmit your general keystrokes. We are not a keylogger. We only process the specific content you actively submit - for example, when you tap the microphone button to begin a voice recording, or when you explicitly request an AI rewrite of selected text. General typing activity in other apps is not captured, transmitted, or monitored by Rutta. What triggers a network request: A network connection is only initiated when you actively use a feature that requires it, such as starting a voice recording or requesting AI text rewriting. Passive keyboard use (standard typing) does not trigger any data transmission. Full Access is required for the core functionality of Rutta. You may revoke this permission at any time through Settings > General > Keyboard > Keyboards on your iOS device, though doing so will disable voice input and AI features. E. Third-Party Platform Data You may connect to the Services using a third-party account (e.g., Google, Apple). When you do so, we receive information from that third party identifying your account, which we use solely to enable you to connect to the Services. If you use Sign in with Apple, we may receive a private relay email address from Apple, which we use only for account authentication purposes. Connecting a third-party account is optional, and you can revoke permission at any time through the third-party platform settings or through the Rutta app. F. Payment Information When you subscribe to a paid plan, payments are processed by Apple Inc. (App Store) or other authorized third-party payment processors. Rutta may receive limited purchase and subscription status from those processors so we can provide your subscription entitlement, support billing-related requests, measure advertising attribution, and understand marketing campaign performance. Rutta does not collect or store your payment card information. Payment processing is governed by the applicable third party's privacy policy. G. Other Information You Provide You may provide additional information through surveys, support requests, or other interactions with Rutta. We use this information solely for the purposes described in this Privacy Policy.

We may use Personal Data and Usage Data for the following purposes: - Service Operation: To provide, maintain, improve, monitor, and protect the Services. Voice and contextual data are processed to deliver results and are not retained after the result is returned to your device, subject to our third-party providers' data handling practices. - Communication: To provide customer and technical support, send service-related notifications, and (with your consent) send marketing communications about new features or updates. - Administration: For billing, account management, tax, and administrative purposes. - Compliance: To comply with applicable laws and regulations or legal orders. - Risk Mitigation: To detect and prevent fraud, abuse, or violations of our Terms of Service. - Marketing: To send you promotional materials that may be of interest to you. You may opt out of marketing communications at any time by using the unsubscribe mechanism in our emails or by updating your in-app preferences. - Advertising Attribution and Measurement: To measure TikTok and similar advertising campaign performance, understand which campaigns led to installs, subscriptions, or product interactions, improve ad delivery, and reduce repetitive or irrelevant ads. This may use device identifiers, product interaction data, attribution events, and purchase or subscription status where permitted by your consent and platform settings. If you decline App Tracking Transparency authorization, Rutta will not use the IDFA for tracking, and the core keyboard, typing, and voice transcription features remain available. We do not use your Customer Content to train AI models without your explicit opt-in consent.

We retain Personal Data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, or as required by applicable law. Voice audio and transcription data are processed to provide the Services and are not retained after results are returned to your device, subject to our third-party providers' data handling practices.

We do not sell your Personal Data. We may share your information in the following limited circumstances: - Service Providers: We may share information with trusted third-party service providers (e.g., cloud hosting, analytics, payment processors, speech recognition providers) who process data on our behalf and are bound by confidentiality obligations. - Advertising Attribution and Marketing Providers: We may share limited device identifier, product interaction, attribution, and purchase or subscription status data with advertising attribution and marketing measurement providers, such as the TikTok Business SDK or similar services, to measure advertising campaign performance, attribute installs or subscriptions, and optimize campaigns. - Legal Requirements: We may disclose information if required to do so by law or in response to valid legal process. - Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you in advance of any such transfer. - With Your Consent: We may share information with third parties with your explicit consent.

We and our service providers may use device identifiers, local device storage, and similar technologies to collect information about your usage and preferences within the Services. On iOS, Rutta may ask for App Tracking Transparency authorization before accessing the Apple Advertising Identifier or using data to track you across apps or websites owned by other companies for advertising attribution or measurement. If you do not grant this permission, Rutta will not use the IDFA for tracking. You can manage tracking authorization and other device permissions through your device operating system settings. Note that restricting certain permissions may affect advertising attribution or measurement, but it does not disable the core keyboard, typing, or voice transcription features.

Depending on where you reside, you may have the following rights with respect to your Personal Data: - Access: Request a copy of the Personal Data we hold about you - Correction: Request that we correct inaccurate or incomplete Personal Data - Deletion: Request that we delete your Personal Data, subject to certain exceptions To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days (or within 45 days where required by applicable law, such as under the CCPA). If we need additional time, we will notify you of the extension and the reason.

The Services are not directed to children. We do not knowingly collect Personal Data from minors. If we become aware that we have inadvertently collected Personal Data from a minor, we will take steps to delete that information promptly. If you believe we may have collected information from a minor, please contact us at [email protected].

We implement industry-standard technical and organizational measures to protect your Personal Data against unauthorized access, loss, misuse, or alteration. However, no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security.

If you are accessing the Services from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where our servers are located. By using the Services, you consent to the transfer of your information to the United States and the processing of your information in accordance with this Privacy Policy.

The Services may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review the privacy policies of any third-party services you access.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy in the Services or by sending you a notification. Your continued use of the Services after such changes constitutes your acceptance of the updated Privacy Policy.

If you have any questions or concerns about this Privacy Policy, please contact us at: