RealBoard Privacy Policy

Effective 26 October 2026. RealBoard, previously called Voice Keyboard (Android package app.ouspix.voice_keyboard) is provided by Realab / Ouspix. Contact: ouspix.contact@gmail.com.

Typing and optional cloud voice

RealBoard provides an ordinary typing keyboard and optional cloud dictation. Ordinary typing works without an account or an internet connection. With AI refinement off, ordinary typing and local corrections stay on your device. If you turn on AI refinement in Settings and save, text around the cursor is sent to our service and OpenRouter for DeepSeek to refine after a pause; this can include text already present in the field, not only newly typed characters. This separate optional AI setting does not require microphone access. Protected credential fields are excluded using Android field classifications; the app cannot recognize every sensitive value entered in an ordinary text field. Text you type, copy or insert is handled by your clipboard and the app in which you are writing.

Voice dictation requires an invited Google account, an internet connection, microphone permission and your acceptance of the cloud-audio notice. Enabling the keyboard, opening the app, signing in and accepting the notice do not start recording. You explicitly start voice input. Voice is disabled in protected credential fields. You can decline cloud voice and keep using ordinary typing.

Data used by the service

Optional AI text refinement: an Android request can include up to 800 UTF-16 text units before the cursor and 80 after it, correction-preservation hints and, for Pinyin/Zhuyin, recent conversion spans/readings. The edit window is smaller than the context sent. The backend sends this input for text correction through OpenRouter, using the configured DeepSeek model for this Android build. Returned patches are applied only under the app’s editor/session guards. AI refinement defaults off; enabling it and saving is a separate choice from cloud-voice consent.

• Account access: Google provides a verified email address, Google account identifier and profile name. We use these to identify your account, check invitations and manage device sessions. Your Google password is handled by Google and is not provided to RealBoard.
• Voice and text: when you dictate, your chosen audio is sent to our backend and the selected speech provider to produce text. Stream and Live modes send audio while you speak; Final sends the captured recording after capture. Transcripts and partial drafts are processed for delivery and temporary recovery.
• Operation and protection: we process request identifiers, model/mode selections, duration, timestamps, outcomes, latency and estimated usage/cost. Account-linked usage, hashed network identifiers, rate limits and concurrency records protect the service and enforce access and spending limits. Network and hosting providers also receive connection information such as IP addresses.
• Account-linked usage analytics: daily aggregates link an internal account identifier to the provider, model and dictation or typing mode. They contain request and outcome counts, audio duration, AI input/output token counts, latency totals and estimated or provider-reported cost/reservation counters. They contain no audio, transcript or typed text. We use them to understand usage, reliability and estimated spending.
• Support: if you email us, we receive the contact details and message you send to answer your request, verify identity where necessary and handle account/data deletion. Please do not send passwords, verification codes, app tokens, private recordings or dictated text.

Services involved

Google Accounts handles sign-in. Our transcription backend is hosted on Vercel; Upstash Redis stores account/session records, encrypted temporary text and operational records. Optional AI text refinement uses OpenRouter to route text to the configured language model (DeepSeek in this Android build). Depending on your voice-model selection, audio is processed by OpenAI, Google Cloud Speech or Alibaba Cloud / Qwen. Longer Google Final recordings may use Google Cloud Storage as a temporary processing input.

These services receive information needed to provide authentication, hosting, storage or speech processing. Their handling, locations, security and retention are governed by their applicable service terms and account configuration. We do not promise zero provider retention, no vendor logs, EU-only processing or immediate erasure from every provider system. Our own temporary-storage periods below do not establish the providers' internal retention periods.

Storage, retention and security

• Android credentials are encrypted using Android Keystore. Local audio is kept in private no-backup app storage for the current attempt. Success, cancellation, discard and initialization clean up local audio. Attempts expire after 15 minutes; after process termination, abandoned files may remain until the app next initializes or its data is removed.
• AI text-refinement input and correction responses are processed in backend memory; the inspected implementation stores usage/reservation counters rather than AI-typing drafts. A request cost reservation can remain for 24 hours and budget/security periods below still apply. OpenRouter’s data-collection preference is set to deny in code; this is not a guarantee of vendor zero retention or a particular inference subprocessor.
• Backend voice transcripts and drafts are encrypted and expire five minutes after the last write. Discard removes the current result/draft. Request metadata and cancellation tombstones expire 24 hours after state writes; a later transition can refresh that period.
• Device-session records have an absolute 30-day lifetime. Access grants last 15 minutes. Signing out requests revocation of that device session; a revoked record can remain until expiry. Invitation identities remain until removed by the operator.
• Account-linked daily usage analytics expire 400 days after the start of the relevant UTC day. Verified account deletion removes that account’s analytics before this expiry. These analytics are separate from the shorter-lived budget counters and aggregate accounting described below.
• Daily owner/project budget ledgers expire after three days; monthly aggregate accounting expires 40 days after updates. Historical aggregate test-run accounting has no automatic expiry. Short rate-limit keys expire after 60 seconds, connection leases after 310 seconds, and active-job leases after at most 65 minutes. Legitimate minimal security/accounting records may be retained to prevent abuse or comply with obligations; this does not justify retaining dictated text or recordings.
• Google processing inputs are subject to attempted cleanup on completion/discard and asynchronous bucket/provider controls. Stopping or discarding a recording does not guarantee that processing already accepted by a provider stops instantly. Provider, hosting, backup and support records may have separate retention limits. Ask us about the handling relevant to your request.

App-service traffic uses HTTPS/WSS and the service uses account authorization, encryption of temporary text, rates, concurrency limits and conservative cost caps. Dictation is not end-to-end encrypted: our service and your selected provider process audio/text to transcribe it.

Your controls and deletion

You choose when to record, stop and discard. You can turn off cloud voice in the app's Privacy and account deletion screen, and turn off optional AI refinement in Settings and save. These are independent controls. Signing out removes local access but does not delete the app account and all its service data. Uninstalling the app does not request server account deletion. Text already inserted or copied is controlled by the receiving app or clipboard.

To request deletion of your RealBoard account and associated data, or associated data without deleting your account, use our account/data deletion page or email ouspix.contact@gmail.com. No app installation or sign-in is required to send a request. We verify your identity and handle requests manually. We explain any processing delay, provider limitation or permitted retained category when responding. We do not ask for your Google password.

Closed testing, pricing and updates

All available features are free during the closed test, subject to service availability and usage protections. Ordinary typing without AI completion remains free. A subscription and credits for AI features are planned for a later version; this test version has no purchase flow and does not charge or automatically start a paid subscription.

This initial closed test is intended for adults aged 18 and over. This Android version has no advertising, purchase flow, advertising identifier, remote typing history or social feed. We use the data described above to provide and protect the app and respond to requests. We may update this notice as the service changes; the effective date identifies the current notice. Contact ouspix.contact@gmail.com with privacy questions.