Privacy Policy

A. Personal Data When you use the Services, we may ask you to provide personally identifiable information ("Personal Data"), which may include: - Email address - First and last name - Phone number (if you choose to provide it) - Device identifiers and local storage data - Any other Personal Data you voluntarily provide B. Usage Data We may collect information related to your interaction with the Services, including: IP address, device type, device operating system version, app version, time and date of use, feature usage patterns, unique device identifiers, system logs, performance metrics, and other diagnostic data ("Usage Data"). This data is processed to deliver the Services and is not retained on our servers beyond what is necessary. The only exception is when you voluntarily submit feedback, in which case we collect necessary diagnostic information to help resolve your issue. C. Customer Content (Voice and Text) When you use Rutta, we process your voice audio and the resulting transcription text, along with limited contextual information from the current app you are using, solely to deliver accurate, context-aware results. To enhance the accuracy and relevance of Rutta's outputs, we may collect limited, relevant content from the current input field in the app in use - such as the text already present in the input box. This contextual content is processed solely to deliver the Services and is not retained after results are returned to your device, subject to the data handling practices of our third-party service providers. We do not use your voice audio, transcribed text, or contextual content to train AI models. Any third-party providers we use to process voice data are configured not to use your data for model training, and shared data is not retained beyond what is necessary to complete the transcription. If you voluntarily submit feedback, we may collect associated diagnostic information and, with your explicit consent, pseudonymized text or corrections to improve Rutta for all users. D. Keyboard Extension and Full Access Permission Rutta operates as an iOS keyboard extension. To enable voice input, AI rewriting, and other advanced features, the keyboard requires you to grant "Full Access" permission in your iOS settings. We understand this is a significant level of trust, and we want to be transparent about what this means. What Full Access allows technically: iOS Full Access permits a keyboard extension to send data over the internet and access the network. Without Full Access, the keyboard cannot communicate with our servers to process voice input or deliver AI-powered suggestions. What Rutta does NOT do: Rutta does not log, record, store, or transmit your general keystrokes. We are not a keylogger. We only process the specific content you actively submit - for example, when you tap the microphone button to begin a voice recording, or when you explicitly request an AI rewrite of selected text. General typing activity in other apps is not captured, transmitted, or monitored by Rutta. What triggers a network request: A network connection is only initiated when you actively use a feature that requires it, such as starting a voice recording or requesting AI text rewriting. Passive keyboard use (standard typing) does not trigger any data transmission. Full Access is required for the core functionality of Rutta. You may revoke this permission at any time through Settings > General > Keyboard > Keyboards on your iOS device, though doing so will disable voice input and AI features. E. Third-Party Platform Data You may connect to the Services using a third-party account (e.g., Google, Apple). When you do so, we receive information from that third party identifying your account, which we use solely to enable you to connect to the Services. If you use Sign in with Apple, we may receive a private relay email address from Apple, which we use only for account authentication purposes. Connecting a third-party account is optional, and you can revoke permission at any time through the third-party platform settings or through the Rutta app. F. Payment Information When you subscribe to a paid plan, payments are processed by Apple Inc. (App Store) or other authorized third-party payment processors. Rutta does not collect or store your payment card information. Payment processing is governed by the applicable third party's privacy policy. G. Other Information You Provide You may provide additional information through surveys, support requests, or other interactions with Rutta. We use this information solely for the purposes described in this Privacy Policy.

We may use Personal Data and Usage Data for the following purposes: - Service Operation: To provide, maintain, improve, monitor, and protect the Services. Voice and contextual data are processed to deliver results and are not retained after the result is returned to your device, subject to our third-party providers' data handling practices. - Communication: To provide customer and technical support, send service-related notifications, and (with your consent) send marketing communications about new features or updates. - Administration: For billing, account management, tax, and administrative purposes. - Compliance: To comply with applicable laws and regulations or legal orders. - Risk Mitigation: To detect and prevent fraud, abuse, or violations of our Terms of Service. - Marketing: To send you promotional materials that may be of interest to you. You may opt out of marketing communications at any time by using the unsubscribe mechanism in our emails or by updating your in-app preferences. We do not use your Customer Content to train AI models without your explicit opt-in consent.

We retain Personal Data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, or as required by applicable law. Voice audio and transcription data are processed to provide the Services and are not retained after results are returned to your device, subject to our third-party providers' data handling practices.

We do not sell your Personal Data. We may share your information in the following limited circumstances: - Service Providers: We may share information with trusted third-party service providers (e.g., cloud hosting, analytics, payment processors, speech recognition providers) who process data on our behalf and are bound by confidentiality obligations. - Legal Requirements: We may disclose information if required to do so by law or in response to valid legal process. - Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you in advance of any such transfer. - With Your Consent: We may share information with third parties with your explicit consent.

We and our service providers may use device identifiers, local device storage, and similar technologies to collect information about your usage and preferences within the Services. You can manage device permissions through your device's operating system settings. Note that restricting certain permissions may affect your ability to use some features of the Services.

Depending on where you reside, you may have the following rights with respect to your Personal Data: - Access: Request a copy of the Personal Data we hold about you - Correction: Request that we correct inaccurate or incomplete Personal Data - Deletion: Request that we delete your Personal Data, subject to certain exceptions To exercise any of these rights, please contact us at support@rutta.io. We will respond to your request within 30 days (or within 45 days where required by applicable law, such as under the CCPA). If we need additional time, we will notify you of the extension and the reason.

The Services are not directed to children. We do not knowingly collect Personal Data from minors. If we become aware that we have inadvertently collected Personal Data from a minor, we will take steps to delete that information promptly. If you believe we may have collected information from a minor, please contact us at support@rutta.io.

We implement industry-standard technical and organizational measures to protect your Personal Data against unauthorized access, loss, misuse, or alteration. However, no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security.

If you are accessing the Services from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where our servers are located. By using the Services, you consent to the transfer of your information to the United States and the processing of your information in accordance with this Privacy Policy.

The Services may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review the privacy policies of any third-party services you access.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy in the Services or by sending you a notification. Your continued use of the Services after such changes constitutes your acceptance of the updated Privacy Policy.

If you have any questions or concerns about this Privacy Policy, please contact us at: