← Back to Home

Privacy Policy

Effective date: October 18, 2026

Cerebro Keyboard ("the App") is operated by Allonsy GmbH. We take your privacy seriously. This policy explains what data we collect, how we use it, and your rights regarding that data.

What We Collect

When you use Cerebro Keyboard, we store a small amount of technical data on our servers in Germany to operate the service. The App needs no account.

• Device ID — A randomly generated UUID assigned to your device.
• Apple download ID — Apple signs a record of your download of the App, and the App sends it to us. From it we store Apple’s ID for your Apple Account in this app, whether you installed the App Store version or a test version, and when you first downloaded the App. The ID is the same on all your devices and after reinstalling; it does not reveal your name or email address. We use the record to tell test versions from the App Store version, and the ID to stop one test version’s record from being reused on many devices. For invitations we also use the ID and the download date, so that each person counts only once and we can tell someone new from someone reinstalling. We keep them until you ask us to delete your data.
• Device and app information — Device model, iOS version, app version and build, the language the App is shown in, and your device’s language and time zone settings. Used for debugging and compatibility, and so that links the App gets from us, such as your invite link, open our website in the App’s language.
• Subscription status — Whether you have Cerebro Pro, the product, its expiry date and the original transaction ID, taken from the signed purchase information Apple provides. Used to unlock Pro.
• Request log — The time, type and result of each request to our server and, for an AI mode, which mode was used (a built-in or community mode by its ID; your own modes only as “custom”, never with their prompt), without IP address and without content. Used to operate the service, to enforce the monthly free limit and to see which modes are used. Entries are deleted after 13 months.
• Setup steps — Which steps of the App’s setup you reached and when, each at most once and with the app version: for example which pages came up, whether you allowed AI processing, turned on the keyboard and Full Access, or skipped a step. Never what you say or type, and no content. Used to see where the setup is unclear and to improve it. Entries are deleted after 13 months.
• Repeated recordings — If the App sends a recording again because the answer got lost on the way, our server recognises it by a one-way fingerprint of the file (SHA-256), which it keeps for 24 hours. The request log only notes that it was a repeat, so it does not count twice towards the monthly free limit.
• Community modes you submit — If you submit an AI mode for the community list, the name, icon, prompt and author name you enter, and which device sent it. If we publish the mode, the author name is shown publicly with it, as you entered it (see Community Modes in the terms). We keep a submission until you withdraw it or ask us to delete your data.

Like any web service, our servers also write short technical logs (for example the time of a request and the IP address it came from). We use them only to run and protect the service.

What We Do NOT Collect

We do not store or have access to any of the following:

• Your recordings (they are discarded right after transcription)
• Your transcriptions (they are stored only on your device)
• Personal information such as your name, email address or phone number, unless you give it to us yourself, for example in an email or as the author name of a community mode
• Location data
• Contacts or address book data
• Keystrokes or typed text

Audio Processing

Important note regarding sensitive data: What you dictate leaves your device and is processed by AI models from OpenAI and Anthropic. Don't dictate passwords, card numbers, health information or anything else confidential.

When you use the voice-to-text feature, your audio is processed as follows:

• Audio is recorded on your device only after you tap the orb, and sent to our server in Germany.
• So that the next dictation can start from the keyboard, the microphone stays on for up to 10 minutes after a dictation. iOS shows its orange microphone indicator during that time. Nothing is recorded or sent until you tap the orb again, and you can end the session at any time from the Dynamic Island or Lock Screen.
• Our server sends the audio via OpenRouter to OpenAI, which transcribes it on servers outside the EU. According to OpenAI, audio sent for transcription is not retained.
• The transcription result is returned to your device, and the audio is immediately discarded. We do not store audio files.

Third-Party Services and Retention

• OpenAI turns speech into text. According to OpenAI, audio sent for transcription is not retained, and OpenAI does not use API data to train its models.
• Anthropic makes Claude, the model behind the optional AI text transform modes. When you use a transform mode, the transcribed text goes to Claude, run for us by Google Cloud (Vertex AI) or Amazon Web Services (Bedrock), in the EU where available. We only use endpoints with zero data retention: the text is not stored and not used for training.
• OpenRouter (OpenRouter, Inc., USA) passes the requests from our server on: the recording and the words in your custom dictionary to OpenAI, the text for AI modes to Google Cloud or AWS. According to OpenRouter, it keeps neither the recording nor the text, only details such as the time, the model used and the cost.
• Apple handles downloads, purchases and subscriptions. We only receive the signed download and purchase records described above.

Data Storage

Transcription results are stored locally on your device only. They are never stored on our servers.

The data listed under "What We Collect" is stored on our servers in Germany and used only to operate the service.

Keyboard Extension

Cerebro Keyboard installs as a custom keyboard on your device. The keyboard requests Full Access permission in order to use the microphone for voice transcription.

Despite having Full Access, the keyboard does not log, record, or transmit any keystrokes. Full Access is required solely to reach the microphone and send audio for transcription.

Invitations

Once you open the invite screen in the App or redeem someone else’s code, we store:

• your invite code, and which Apple Account (by the Apple download ID above) redeemed which code, and when;
• the state of each invite: whether the new user has dictated once, whether the invite counts for the person who shared the code, or whether it expired or was revoked;
• the time zone of the device that redeemed it, so that “2 different days” are counted where the new user lives.

To decide whether an invite counts, we use the request log (how many successful transcriptions, on which days). To spot abuse, we look at the device details of invited devices by hand; we never build a device fingerprint from them. We use this data to give both people their extra transcriptions and to prevent abuse.

What the other person sees: the person who invited you sees in the App that their code was used and, later, whether your invite counts for them. They never see your name, your device, your dictations or how much you dictate. If they invited only you, they can tell it was you. If you invite others, the same applies the other way round.

Clipboard: while the App’s screen for redeeming an invite is open, it can check on your iPhone whether the clipboard holds a link, to show the Paste button more prominently. It reads the clipboard only when you tap Paste, and sends nothing about it to us.

How long we keep it: invites that never got a first dictation are deleted 12 months after they were redeemed, and revoked invites 12 months after they were revoked. The others are kept while a bonus from them runs. Your invite code is kept until you ask us to delete your data. If you ask us to delete your data, we replace your Apple download ID in these records with a one-way fingerprint: the other person keeps their bonus, and your Apple Account still cannot redeem a second invite.

We never send invitations ourselves and never read your contacts. You choose whom you share your code with.

Emails to Us

If you write to us, we use your email address and your message only to answer you. We may use Claude, the AI model by Anthropic, to help draft our reply; your message then goes to Anthropic PBC (USA) for that purpose.

Legal Bases

• Running the App you use (Art. 6(1)(b) GDPR): transcription and AI modes, the device ID, device and app information, the request log and the fingerprint of a repeated recording, your subscription status, community modes you submit (including showing your author name with a published mode), and invitations under the invitation terms.
• Our legitimate interests (Art. 6(1)(f) GDPR): the Apple download ID to recognise test versions and prevent abuse, the abuse checks for invitations, the setup steps, to see where the setup is unclear and to improve it, our servers’ technical logs to run and protect the service, and answering your emails, also with Claude’s help.

Your Rights (GDPR)

If you are located in the European Economic Area (EEA), you have the following rights under the General Data Protection Regulation (GDPR):

• Right of access — You can request a copy of the data we hold about your device.
• Right to rectification — You can ask us to correct data about you that is wrong.
• Right to deletion — You can request that we delete all data associated with your device ID. Invite records are kept with a one-way fingerprint instead, as described under Invitations.
• Right to restriction — You can ask us to restrict how we process your data.
• Right to data portability — You can request your data in a structured, machine-readable format.
• Right to object — Where we rely on our legitimate interests (Art. 6(1)(f) GDPR), you can object at any time for reasons arising from your particular situation.
• Right to complain — You can complain to a data protection authority, for example the one responsible for us: Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit, Ludwig-Erhard-Straße 22, 20459 Hamburg, Germany.

To exercise any of these rights, please contact us at info@allonsygmbh.com.

Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated effective date.

Contact

If you have any questions about this privacy policy, please contact us:

Allonsy GmbH
Haldesdorfer Str. 14
22179 Hamburg, Germany
info@allonsygmbh.com