This Privacy Policy explains how Inputly (“we,” “us,” “our”) collects and uses information when you visit our website (inputly.ca) and use our desktop apps and related services (collectively, the “Services”).
We designed Inputly to be privacy-first: the desktop app does not upload the text you type or paste. If you enable “Learned cadence,” we store timing statistics only (not your words).
1) Who we are & contact
- Controller: Inputly (operating under inputly.ca)
- Email: support@inputly.ca
- Address: Toronto, ON, Canada
2) What we collect
A. Account & Billing
- Auth identifiers from Firebase (UID, email, display name if provided).
- Subscription/billing via Stripe (customer ID, subscription status, plan, invoices, last 4 of card via Stripe only).
- Device registration (device ID, OS, app version) to enforce plan/device limits.
B. Usage & Entitlements
- Plan/entitlement state (free/pro/teams, feature flags).
- Daily usage counters (e.g., character counts per device/day for free quota).
- Optional: anonymized product analytics on the website via Plausible (no cookies, no personal data).
C. Desktop app specifics
- We do not collect keystroke content. Clipboard text and what is typed stays local.
- Learned cadence (Pro): stores timing parameters/statistics (e.g., inter-key intervals, pause distributions) — not the underlying text.
D. Support & communications
- Emails you send us and any metadata needed to reply (e.g., ticket ID, timestamps).
3) How we use information
- Provide and secure the Services (authentication, license checks, device limits).
- Process payments/subscriptions (Stripe).
- Show entitlements, enforce free-plan quotas, prevent abuse.
- Communicate about service updates, outages, or billing.
- Improve reliability and safety (e.g., secure-field protections).
4) Legal bases (GDPR/UK GDPR)
- Contract (to provide the Services you request).
- Legitimate interests (security, fraud prevention, product improvement).
- Consent where applicable (e.g., marketing emails).
- Legal obligation (tax/financial record keeping).
5) Sharing & processors
We don’t sell personal data. We use trusted subprocessors to operate the Service:
- Vercel (hosting the web app)
- Firebase (authentication)
- Neon (Postgres) (application database)
- Stripe (payments/subscriptions)
- Plausible Analytics (privacy-friendly web analytics; no cookies, no personal data)
These providers process data on our behalf under agreements that meet applicable data-protection requirements.
6) International transfers
We may process data in Canada, the US, and the EU depending on provider regions. Where required, we rely on appropriate safeguards (e.g., Standard Contractual Clauses) with our processors.
7) Data retention
- Account & billing records: kept while your account is active and up to 7 years after for tax/audit.
- Device & entitlement records: kept while active and up to 24 months after last activity.
- Learned cadence profiles (if cloud-synced later): kept until you delete them or your account.
- Support emails: up to 24 months after resolution.
We may keep minimal logs for security and anti-abuse.
8) Your rights
Depending on your location, you may have rights to access, correct, delete, port, or object to processing.
To exercise rights, email support@inputly.ca from your account email.
We may request verification before fulfilling a request.
You can delete your account; this cancels subscriptions at the next renewal per the Terms.
9) Children
Inputly is not intended for children under 13 (or under 16 in the EU/UK where consent is required). We do not knowingly collect their data.
10) Security
We use encryption in transit, scoped access controls, and least-privilege for our infrastructure. No method is 100% secure, but we work to protect your information and promptly address issues.
11) Cookies & tracking
- Website: Plausible Analytics (no cookies; aggregated, non-personal).
- No ad trackers.
- The desktop app does not use third-party trackers.
12) Changes
If we make material changes, we’ll update this page and adjust the “Last updated” date. Continued use after changes means you accept the updated policy.
Questions? support@inputly.ca