Effective 3 October 2026 · Text Expander Keyboard, published by MasumApps ("we", "us", "the app")
The short version. Text Expander Keyboard is a keyboard, so it sees everything you type. Here is what happens to it.
What you type never leaves your phone. Not one keystroke, password, message, expansion, or clipboard entry is uploaded, stored on a server, shown to us, or given to an advertiser. There is no account, no sync, and no server that receives your text — because there is no server at all.
The app does connect to the internet to load ads, to confirm purchases, and to send crash reports and usage statistics that help us fix bugs. These services collect device information such as your advertising ID. That data is about the device and how the app runs, never about what you typed.
This policy applies to the Text Expander Keyboard Android application (package com.expandkeys.keyboard), an input method (keyboard) you can enable and select as your system keyboard. It does not cover the other apps you type into — messaging apps, browsers, and email clients follow their own policies.
When you enable any third-party keyboard, Android displays a warning that the keyboard "may be able to collect all the text you type, including personal data like passwords and credit card numbers." Android shows this for every keyboard, because it describes what the operating system permits a keyboard to do, not what this app actually does.
We take the point of that warning seriously, so to be explicit:
The following is saved in the app's own private storage, readable only by the app. It is never transmitted to us or to any third party, and it is never included in advertising or measurement:
You stay in control of this data. Incognito mode stops the keyboard learning new words from your input for as long as it is switched on. Clipboard history can be disabled, cleared, and limited in size and age. Individual expansions and learned words can be deleted at any time. Uninstalling the app deletes all of it.
The app includes four Google services. Each is listed below with what it collects and why. We use Google's standard integrations and do not add extra data of our own.
The free version of the app displays ads supplied by Google AdMob. Ads appear only in the app's own screens (the settings and shortcut-management screens), never inside the keyboard while you type. The app uses these ad formats:
Premium users see no ads of any kind. To select, deliver, cap the frequency of, and measure ads, AdMob may collect your device's advertising ID, your IP address, approximate location derived from that IP address, device and app information such as model, operating system version, language and app version, and your interactions with ads such as an ad being shown, clicked, or closed.
The advertising ID is a resettable identifier assigned by Android for advertising purposes. The app does not collect your IMEI, MAC address, Android ID, serial number, or phone number, and it does not build a profile of you. Your keystrokes, expansions, dictionary, and clipboard are never used to select or measure ads. We receive only aggregate performance reports; we do not receive your advertising ID or IP address as identifiable data.
The app offers an optional Premium upgrade, which unlocks unlimited shortcuts and removes all ads. It is available as a subscription (which may include monthly, yearly, and prepaid plans that do not renew automatically) or as a one-time lifetime purchase. Purchases are processed entirely by Google Play. Your payment details are never given to Text Expander Keyboard. The app asks Google Play which of its products you own and keeps only one thing on your device: whether Premium is active. It does not store your purchase token, order number, or payment method. Subscriptions are managed and cancelled in the Google Play Store. Refunds and billing questions are handled by Google Play.
If the app or the keyboard crashes, Firebase Crashlytics sends us a crash report so we can find and fix the problem. A report contains the technical details of the crash (which part of the app's code failed), the device model, Android version, app version, free memory and disk space, whether the app was in the foreground, the time of the crash, and a random installation identifier that lets us tell how many devices a crash affects. We do not add anything you type, your expansions, your dictionary, or your clipboard to crash reports. Crash reports are kept for 90 days.
To understand how the app is used and to improve it, Google Analytics for Firebase collects usage statistics: when the app is installed, opened, and updated, how long sessions last, which app screens are viewed, in-app purchases, and ad events, together with device information (model, Android version, language, app version), approximate location derived from your IP address, a random app-instance identifier and, where available, your advertising ID. Analytics never receives the text you type, and we do not send it any. We see this data as aggregated reports.
Aside from the four Google services named above, no third party receives any data from this app.
These services process data under their own policies:
You can limit advertising at any time, from the phone itself:
If you are in the European Economic Area, the United Kingdom, or Switzerland, the app asks for your consent before showing ads and before using your data for advertising-related analytics, through a consent message provided by Google's User Messaging Platform, a Google-certified consent management platform. The message appears after you have finished setting up the keyboard, before any ad is requested. You may decline, and you may change or withdraw your choice at any time from the app's Settings, then Privacy & ad choices. If you withdraw consent, banner and native ads stop showing immediately. Withdrawing consent does not affect processing that already took place.
Residents of US states with consumer privacy laws, such as California, may see a similar message, and can use the same Privacy & ad choices setting to opt out of the sale or sharing of their personal information for advertising.
Where the law requires a legal basis for processing, ours are: consent for personalised advertising; legitimate interests for serving non-personalised ads, for crash reporting and usage statistics, and for keeping the app working and secure; and performance of a contract for processing a purchase you have made.
We do not sell your personal information for money. Under California law (CCPA/CPRA), showing personalised ads may count as "sharing" personal information for cross-context behavioural advertising. If you are a California resident and wish to opt out of that sharing, use Privacy & ad choices in the app's Settings, turn off ad personalisation using the advertising choices above, or email us at the address below. We do not knowingly sell or share the personal information of anyone under 16.
Beyond the Google services named above, we disclose information only where legally required — for example to comply with a court order or lawful request, or to investigate fraud or protect the rights and safety of users. We hold no copy of your typed text, so it cannot be disclosed to anyone under any circumstances, including a legal demand.
The Google and Firebase services above operate globally and may process data on servers outside your country, including in the United States. Where data protection law requires safeguards for such transfers, Google relies on mechanisms including the European Commission's Standard Contractual Clauses and adequacy decisions. Data kept on your own device is never transferred anywhere.
| Data | Retention |
|---|---|
| What you type | Not retained. Keystrokes are processed in memory to draw the keyboard and are then gone. |
| On-device data | Expansions, actions, dictionary, clipboard, settings, your Premium status and your ad-unlocked shortcut allowance stay until you delete them or uninstall the app. We never hold a copy. Clipboard history can also be set to clear itself automatically. |
| Advertising | Retained by Google under its own policies. Deleting your advertising ID breaks the link to your device. |
| Purchases | Purchase records are held by Google Play for as long as required to honour your entitlement and to meet legal and tax obligations. |
| Crash reports | Kept by Firebase Crashlytics for 90 days, then deleted automatically. |
| Usage statistics | Event data is kept by Google Analytics for Firebase for 2 months, then deleted automatically. Aggregated reports, which do not identify you, may be kept longer. |
Depending on where you live, you may have the right to access the personal information held about you, to have it corrected or deleted, to obtain a copy of it, to object to or restrict its processing, to withdraw consent, to opt out of the sale or sharing of personal information, and not to be treated differently for exercising any of these rights.
To exercise any of them, email masum14092@gmail.com. Please tell us which right you wish to use. Because we hold no account, name, or copy of your data, there is in practice nothing on our side to hand over or erase; if we cannot identify data as yours, we will say so rather than act on someone else's. You can delete everything held on your device at any time by clearing the app's data or uninstalling it, and you may lodge a complaint with your local data protection authority.
Text Expander Keyboard is designed for general audiences and is not directed at children. We do not knowingly collect personal information from children under 16, and the app is not intended for use by them without the consent of a parent or guardian where local law requires it. If you believe a child has provided personal information through the app, contact us at masum14092@gmail.com and we will delete it.
| Permission | What it is used for |
|---|---|
VIBRATE | To give a short buzz when you press a key, if you turn that on. Nothing is recorded. |
INTERNET | Used only to load ads, confirm purchases, and send crash reports and usage statistics. No text you type is sent over it, and the keyboard itself works fully offline. |
ACCESS_NETWORK_STATE | To check whether the device is online before attempting to load an ad. |
AD_ID | To read the advertising ID for ad selection and measurement. You can reset or delete this ID in your phone's settings. |
BILLING | To let Google Play process an in-app purchase. |
ACCESS_ADSERVICES_AD_ID, ACCESS_ADSERVICES_ATTRIBUTION, ACCESS_ADSERVICES_TOPICS | Added by Google's advertising SDK so it can use Android's Privacy Sandbox advertising APIs, which are designed to show and measure ads with less cross-app tracking. You can control them in your phone's Settings, then Privacy, then Ads. |
WAKE_LOCK, FOREGROUND_SERVICE | Added by Google's advertising SDK to finish short background tasks, such as reporting that an ad was shown. They give no access to anything you type. |
The app does not request camera, microphone, location, contacts, call log, SMS, storage, or body-sensor permissions. A keyboard does not need them, and asking for them would be the first sign that something is wrong.
If you turn on clipboard history, the app saves what you copy so you can paste it again later. Because people copy passwords, one-time codes, and card numbers, this deserves a plain statement: clipboard history is stored only in the app's private storage on this device, is never uploaded, is never used for advertising, and can be switched off, cleared, size-limited, or set to expire automatically. Items you pin are kept until you unpin them.
Data saved by the app is kept in Android's private per-app storage, which other apps cannot read. The data sent to Google's advertising, billing, crash-reporting and analytics services travels over encrypted connections. No method of transmission or storage is completely secure, but we limit what is sent in the first place: your keystrokes, expansions, dictionary, and clipboard are simply not part of it. If a breach affecting personal data occurs, we will notify affected users and the relevant authorities as required by law.
If this policy changes, the updated version will be published here with a new effective date, and the revised text will also appear inside the app under Settings, About, Privacy policy. Where a change materially affects how your information is used, we will seek your consent before it takes effect if the law requires it. Earlier versions are available on request.
Questions about privacy, requests about your rights, or anything else in this policy: masum14092@gmail.com.