This policy applies to the Dudu Keyboard (嘟嘟键盘) App, its iOS keyboard extension, and the services supporting these features. In this policy, “we,” “us,” and “our” refer to the provider of Dudu Keyboard. For privacy inquiries, contact chuanxuankeji@163.com.
Ordinary keyboard input and online AI features involve different data processing. Ordinary Pinyin typing does not require uploading every character you type. When you actively use AI features such as Reply Assistance (“帮你回”), Start a Conversation (“主动聊”), or Generate Another Batch (“换一批”), the content necessary for that request is sent to our servers and the relevant AI service providers.
Please read this policy before using the service, particularly the sections on conversation content, third-party AI, international processing, permissions, and deletion rights. Where applicable law requires separate consent for a specific activity, we must provide a separate explanation and obtain that consent. Merely reading or accepting this policy does not replace that requirement.
1. Information we collect and why
1.1 Device initialization, sessions, and security
When you first use the service, the App generates a random device identifier and stores it in the iOS Keychain. We use this identifier and a server-assigned user identifier to associate device usage records, maintain sessions, calculate free trial usage, and prevent abnormal requests. This identifier is not a hardware serial number, IMEI, or advertising identifier.
The service may process your App version, operating system version, device model, system region, language, registration and most recent access IP addresses, approximate region inferred from IP, last active time, and necessary session credentials. An IP-derived region is not a precise location, and this processing does not give us your GPS location.
We also receive a client-reported signal indicating whether a network tunnel interface is present, for network environment identification and troubleshooting. This signal does not establish whether you use a VPN, which websites you visit, or the route your requests actually take. It does not give us access to your VPN configuration or the network communications of other apps.
1.2 Optional phone sign-in and linking
You may choose to sign in or link an account using a phone number and an SMS verification code, for account verification, cross-device identification, and associating membership benefits. If you use these features, we process the phone number you provide, verification records, verification time, and necessary security information.
Not signing in with a phone number does not affect features that do not require an account. Membership depends on actual purchases, restored purchases, and entitlement verification; signing in does not itself activate a paid membership. We do not access your SMS inbox or contacts.
1.3 Profiles, relationships, and conversation styles
To tailor replies, we process your selected or entered gender and any names or forms of address, age, occupation, interests, expression habits, information about the other person, relationship descriptions, supplementary details, custom conversation styles, and optional conversation goals you provide. The available fields depend on the relevant screen.
Profile, relationship, and style information that needs to be saved is associated with the current user. Relevant information is included as context when generating replies. Except for fields clearly marked as required, provide only information you are comfortable sharing. When describing others, use nicknames or relationship labels where possible and avoid unnecessary identification numbers, home addresses, or similar information.
1.4 Conversation screenshots, text, and AI replies
When you actively import a screenshot, paste or enter conversation text, and request generation, we process the image you submit, text extracted from the main conversation shown in it, speaker or quotation information, and the profiles, relationships, style, conversation goal, and necessary supplementary details selected for that request. This information is used to extract conversation content, generate suggestions, and score and rank them.
Screenshots and conversation text may contain personal information about you or others, such as names, avatars, contact details, and private conversations. Crop, obscure, or replace unrelated information where possible, and ensure you have the right to submit the content. Do not submit unnecessary identity documents, financial account information, precise movements, health information, or other sensitive information. If sensitive personal information genuinely needs to be processed, any separate consent required by law must be obtained after explaining the necessity, processing methods, and impact.
AI suggestions may contain recognition errors, misunderstandings, or inaccurate content. Review and select them before use. Suggestions are not our confirmation of facts about you or another person.
1.5 Apple subscriptions and membership
When you purchase, restore, or synchronize a subscription, we process Apple-provided app or transaction identifiers, order and original transaction identifiers, product identifiers, purchase and expiration times, renewal and refund status, transaction verification data, and associated user or account information. We use this information to verify purchases, maintain membership benefits, and resolve order issues.
Payments are completed through Apple's in-app purchase system. We do not receive your Apple Account password, payment card number, or card security code through this process. We use transaction-related identifiers returned by Apple to associate entitlements; these do not give us access to your iCloud data or purchase records for other apps.
1.6 Usage statistics and diagnostics
We use our own analytics to record necessary product events, including first use, onboarding and settings screen visits, keyboard availability, AI screen visits, generation requests, display of the first suggestion, generation completion, insertion of a suggestion, membership screen visits, purchase clicks, purchase results, and membership activation.
Analytics fields may include user identifiers, event and session identifiers, identifiers linking AI requests or purchase flows, timestamps, client version, entry point, input type, generation status, elapsed time, suggestion count, the position of a selected suggestion and whether it was recommended, error codes, and product-related information. These statistics are associated with user identifiers and are not inherently anonymous. Analytics events themselves do not contain conversation text, screenshot content, complete suggestion text, or SMS verification codes.
We use these records to analyze product flows, errors, response times, membership conversion, and service usage. Recording the insertion of a suggestion does not mean we read or confirm that you sent it to another person.
1.7 Push notifications and support
When a device registers for Apple Push Notification service, we may receive and store an APNs token to identify the receiving device. Your system notification settings control whether notifications are displayed. Disabling notification display does not necessarily stop the system from assigning a push token. You may also contact us to request that we address the related data.
If you contact us by email, we process your email address, feedback, and attachments you choose to provide, to investigate and resolve your issue. Do not send account passwords, complete verification codes, or unrelated private information.
2. Keyboard, photos, and clipboard access
2.1 Keyboard and Allow Full Access
You must enable Dudu Keyboard yourself in iOS settings. Online AI features require appropriate network access, and iOS may ask you to enable “Allow Full Access.” This system permission does not expand our processing beyond the scope described in this policy.
Ordinary Pinyin input, candidate matching, and keyboard editing are mainly performed on your device. Continuously recording and uploading all your keystrokes or everything you type is not part of our ordinary input features. Content used for an AI request is uploaded when you explicitly trigger an AI feature using the current draft, conversation text, or screenshot. You can disable Full Access or remove the keyboard in iOS settings; online features will be affected.
2.2 Photos
Screenshot features request photo permission when needed to read conversation screenshots within the scope you authorize, including an operation to read the latest screenshot. You can select the photos accessible to the App through iOS and change or revoke access at any time.
Photo access does not mean we upload your library in bulk. We submit only the image you use for the current AI request to the processing chain. If you do not authorize photo access, you can still use features that do not rely on screenshots.
2.3 Clipboard
When you tap Paste or explicitly import content, the App or keyboard reads the corresponding clipboard text to fill an input field or perform the generation operation you choose. Continuous background monitoring or bulk collection of clipboard history is not a product feature.
2.4 Other system permissions
Notification permission controls notification display. Current conversation assistance features do not require access to contacts, the microphone, or precise location. If future features require new permissions, we will explain their purposes and request authorization as required by the system and applicable law.
To manage permissions, search for Dudu Keyboard in iOS Settings, or open the relevant Privacy & Security, Notifications, or General > Keyboard settings. Labels may vary by system version and language.
3. Third-party services and disclosures
We use the following services to provide the features you choose. We must limit disclosed information to what is necessary and apply appropriate safeguards based on the service relationship. Applicable agreements, the actual entities processing information, and processing locations should be identified in the relevant separate notice and the provider's current information.
Alibaba Cloud Model Studio / Qwen: screenshot understanding and reply generation
Information processed: the conversation screenshot or text submitted for the request, relevant profile and relationship details, expression style, optional intent, and necessary request content. Purpose: recognize conversation content and generate suggestions. The current service calls cloud models through our servers; processing is not performed solely on your phone.
Official website: https://www.aliyun.com/
OpenRouter and Typesafe JEV: scoring and recommendations
Information processed: the text context being evaluated, relevant profile and relationship details, style or intent, and suggested replies. Purpose: score suggestions and provide recommendations. Current scoring calls are routed through OpenRouter to Typesafe JEV. Original screenshots are not inputs to this scoring step, but text extracted from screenshots may contain personal information.
This processing chain involves services outside mainland China. Relevant text and suggestions may be transferred outside mainland China and processed by overseas services. Details of the recipient, contact information, processing location and methods, information categories, and channels for exercising rights need to be provided in any separate notice required by law. Any legally required separate consent or other cross-border procedures must be completed before transfer. General acceptance of this policy does not, by itself, complete those procedures.
Official information: https://openrouter.ai/privacy ; https://docs.typesafe.ai/
Alibaba Cloud SMS: sign-in and account-linking codes
Information processed: the receiving phone number, parameters required by the verification message template, and necessary sending records. Purpose: send verification messages you request. Conversation screenshots, conversation text, and suggested replies are not provided to this SMS service for that purpose.
Official website: https://www.aliyun.com/product/sms
Apple: in-app purchases, transaction verification, and push notifications
Information processed: information needed for Apple's payment and transaction verification services, transaction-related identifiers, APNs device tokens, and necessary notification information. Purpose: complete purchases, restore and verify membership, and provide system push functionality. Apple's own services are also subject to its privacy policy.
Privacy policy: https://www.apple.com/legal/privacy/
Cloudflare: privacy policy website hosting
This privacy policy website uses Cloudflare Pages for static hosting and content delivery. When you visit the website, Cloudflare may process IP addresses, request times, browser information, and request information to deliver the page, protect network security, and prevent abuse. Processing may occur on its global infrastructure.
This static website does not actively load third-party advertising, marketing analytics scripts, or online forms, and does not ask you to enter a phone number, conversation content, or login password. Visiting this website does not authorize the App to read conversations or photos. Technologies used by the hosting provider for security and service delivery are governed by its applicable rules.
If you manually switch languages, this website saves only that language preference in your browser's local storage so it can remember your choice. We do not upload this preference as an analytics event. You can remove it by clearing this website's browser data. If local storage is unavailable, you can still use the language links.
Privacy policy: https://www.cloudflare.com/privacypolicy/
4. Storage and retention
The primary storage location for our business data is mainland China. Cloudflare's hosting location for this policy website is separate from our business server location. Some AI processing also involves the overseas services described above. Using Cloudflare for this website does not mean all App data is stored with Cloudflare.
We retain information according to the following principles:
- User and account details, phone numbers, relationship information, and custom styles: retained for as long as necessary to provide the corresponding features. Following a valid deletion or account closure request, we must delete or anonymize the information unless retention is required by law.
- Conversation screenshots, transcripts, and suggestions: the current generation chain processes these for an individual request rather than saving them long-term as a complete conversation history in our business database. Your device may retain the current screen state or cached information, and third-party providers may retain necessary records under applicable terms and security requirements. Not saving a conversation history in our database does not mean every participant retains no data.
- Raw product events: normally retained for 90 days, with expired data periodically removed by statistics tasks. Summaries such as the first time a user reaches a step may continue to be retained as necessary for the service. Daily aggregates that no longer identify individuals may be retained long-term.
- Subscription and transaction records: necessary information is retained for entitlement verification, reconciliation, dispute handling, and legally required retention.
- Verification codes and verification records: codes are used for validation only within their validity period. Necessary sending, security, and diagnostic records are retained for the relevant purposes and legal requirements.
- Security logs and backups: retained as needed for recovery, security, and legal obligations. Information that cannot immediately be removed from backups due to technical limitations must be restricted to storage and security purposes and removed through backup rotation.
When the processing purpose is fulfilled, the necessary retention period ends, or a legal deletion condition applies, we must delete or anonymize the corresponding information. If continued retention is legally required, its use must be restricted.
5. Information security
We use access controls, authentication, transmission safeguards, and necessary security management measures appropriate to the service's risks, and limit the personnel and systems that can access personal information. Production business services must use HTTPS; additional request encryption does not replace secure transport and access controls.
Keep your device, sessions, and SMS verification codes secure. Absolute network or system security cannot be guaranteed. If a personal information security incident occurs, we will take legally required response measures and fulfill applicable notification and reporting obligations.
We do not sell your personal information or use conversation content for public display. We do not provide personal information to unrelated third parties except where needed for features you choose, appropriately authorized, legally required, or necessary to protect lawful rights and interests. If a business transfer, merger, or similar event occurs, relevant information must be disclosed as required by law, and the recipient must be required to continue protecting the information. New consent must be obtained where legally required for changes to processing purposes or methods.
6. Your privacy choices and requests
You can use available App screens to view or edit profiles, relationships, and custom styles; manage photo, notification, and keyboard access through system settings; and sign out of a phone-linked account. Signing out is not account closure, and uninstalling the App does not delete server-side data. An identifier stored in the iOS Keychain may also remain after uninstallation.
To request access to, a copy of, correction of, supplementation of, or deletion of personal information; account closure; withdrawal of applicable consent; or to object to processing, email chuanxuankeji@163.com. Include “Dudu Keyboard Privacy Request” and the type of request. We will use necessary and appropriate verification to prevent unauthorized access to or deletion of your data.
We normally respond within 15 working days after receiving a request. If additional information is needed or we cannot fully meet the request under applicable law, we will explain why. Legal exceptions apply where permitted. You may also complain to the competent regulatory authority.
Withdrawing authorization does not affect processing lawfully performed before withdrawal or information that must continue to be retained under law. If necessary information becomes unavailable, the relevant feature may no longer work; unrelated features should not be affected.
Closing an account or deleting the App does not automatically cancel an Apple auto-renewing subscription. To stop future charges, cancel through Apple's subscription management settings. Apple handles refunds under its rules; we will assist with necessary order verification.
7. Information about others and minors
Conversation screenshots and relationship details may include information about others. Submit only content necessary for generation that you have the right to process, use nicknames where possible, and remove unrelated personal information. Individuals who believe their information has been submitted improperly may contact us through the email address in this policy.
We take the protection of minors' personal information seriously. Minors should understand this policy and use the service with a parent or guardian's guidance. Processing the personal information of children under 14 requires prior guardian consent and the special protections required by applicable law. Guardians who believe a child's information was processed without appropriate authorization may contact us to investigate and request deletion.
8. Changes to this policy
We will update this policy and its update date when features, service providers, or data processing practices change. Material changes to purposes, methods, information categories, recipients, or individual rights must be communicated through an in-app notice or another appropriate method. Where renewed consent is legally required, it must be obtained before the relevant processing occurs.
9. Contact us
Product: Dudu Keyboard (嘟嘟键盘)
Privacy contact: chuanxuankeji@163.com
To protect your privacy, do not include passwords, complete verification codes, or unrelated conversation records in your message. We will request only the information necessary to verify and resolve the issue.