Email Tone Rewriter Keyboard — Privacy Policy

Last updated: 29 October 2026 · Package: com.ibrahimtxy.epostaton · Developer: bulbildir

1. What the app does

Email Tone Rewriter Keyboard keeps the records you enter and works them out for you. An example entry: Draft complaint → neutral, firm.

The app reads nothing from the internet: it contacts no source, looks nothing up and has no account to sign in to. Every figure it shows is computed on this phone from what you typed.

2. Data we collect

The developer collects none. We run no server and receive nothing from your device — not what you type, not your device identifier, not your usage, not crash reports.

There are two exceptions, and the developer processes neither: in the free tier Google serves the ads and may use your device's advertising ID (AAID) and IP address (§5), and Google ML Kit sends Google its own diagnostic data with an identifier for this installation (§4).

3. What is stored on your device

Only the settings you choose (including how the keyboard looks), a few usage counters, a keyboard background photo if you pick one, and any translation language model you download (§12 lists them). All of it lives in the app's private storage and is deleted when you uninstall the app.

4. Servers the app talks to

For its own work, none. The app contacts no source server: there is nothing to fetch. Apart from the advertising and purchase traffic described in §5 and §6 (the free tier is the only tier that makes the first of those), the only other traffic comes from Google ML Kit, the Google library that translates what you write when you ask; that work itself is done on this phone.

According to Google, ML Kit collects device and app information (such as the phone model, the Android version and the app version), an identifier for this installation that Google says is not intended to identify a user or a device, performance metrics, settings, input and output sizes, event types and error codes, and sends them to Google over HTTPS for diagnostics and usage analytics; Google does not share them with third parties. That list does not include your pictures, your text or your records. Translation also downloads each language model from Google once, and ML Kit asks Google's Firebase service for its configuration. Google describes it at https://developers.google.com/ml-kit/android-data-disclosure. The Google Play Data safety section lists that identifier as collected for analytics.

5. Advertising

This section applies to version 0.1.0 and later. Earlier versions show no ads, contain no advertising library and read no advertising ID.

The free tier shows ads. They are served by Google AdMob; the developer does not choose what is shown and has no direct relationship with advertisers. The formats used are:

• Banner — at the bottom of the screen; it never covers your content.
• Rewarded — only when you tap the offer yourself; it relaxes free-tier limits for 24 hours.
• Native — a card inside the app's own screens, always marked with an “Ad” label.

Interstitial, rewarded interstitial and app open ads are no longer used; versions of the app released before 28 October 2026 also showed these formats.

• Paid members see no ads and no ad request is made — nothing leaves the device for AdMob, and no consent form is shown.
• To select, serve and measure ads, Google may use your device's advertising ID (AAID) and IP address. The developer never reads or stores that identifier; Google is the party that processes it.
• You can reset or delete the advertising ID in Settings › Google › Ads. The app keeps working if you do.
• In the European Economic Area, Switzerland and the United Kingdom, Google's certified consent form is shown before the first ad loads. You can change your choice later from the Privacy options link inside the app.
• How Google processes this data: policies.google.com/technologies/partner-sites

The developer adds no analytics (Firebase Analytics and the like), no crash reporting (Crashlytics and the like) and no marketing tracker. How you use the app is never reported to the developer. The diagnostic and usage data Google ML Kit sends (§4) goes to Google, not to the developer.

6. Permissions

7. Payment and membership

If you buy a paid membership, the payment is handled by Google Play. Your card details are never entered into the app and are never seen by the developer.

Monthly and yearly memberships renew automatically; Google Play charges your account at the start of each period. The lifetime membership is a one-off purchase and does not renew. You can cancel a subscription at any time in Google Play Store › Menu › Subscriptions; cancelling takes effect at the end of the period you have already paid for. Refunds are also handled by Google Play — the developer has no access to the payment.

The app has no server of its own. Whether your membership is active is read again every time the app asks Google Play (when you open the app and when you view the membership screen). That is why a cancellation or refund closes the membership the next time you open the app. If you changed device, Restore purchases on the membership screen brings back a purchase made with the same Google account.

8. Children

The app is not directed to children. The developer collects no data from anyone; the advertising data described in §5 is processed by Google.

9. Keeping and deleting your data

Everything the app stores stays on your device; there is no account and no server copy. Clearing the app’s storage, or uninstalling the app, deletes everything it has ever kept — nothing survives elsewhere, so there is no separate deletion request to make. A paid membership is held by Google Play, not by the app: it survives reinstalling and can be brought back with Restore purchases.

10. Changes

If this policy changes, the date at the top changes with it.

11. Contact

bulbildir@mail.com

12. This app in detail

The sections above apply to every app by this developer. What follows is written for this app only and describes exactly what it records, what it never records and what it will not claim.

SUMMARY
This app is a keyboard. It rewrites the tone of an English email you have already
written — it takes out shouting, insults, blame and aggressive urgency and turns
demands into requests — and it does that in the app you are already writing in, so
you never have to copy your text somewhere else. When you ask, it can also check
spelling, grammar and punctuation, shorten wordy phrases, lay plain text out as an
email, pick the key sentences of a long text, insert one of its fixed templates, and
translate what you wrote into another language on this phone. On the English keyboard
it also suggests words while you type, can correct an obvious typo when you switch
autocorrect on, and types a word when you swipe across the letters; the keyboard has
layouts for seven languages. This app sends nothing you type over the network,
nothing you type is written to disk, and there is no account and no sign-in.

A KEYBOARD SEES EVERYTHING YOU TYPE
Android warns you about this when you switch a keyboard on, and the warning is
correct: an input method can read every character that goes through it, including
passwords typed into normal text fields, addresses, and private messages. That
warning applies to every keyboard on the store, including this one. What matters is
what a keyboard then DOES, so here is the full answer for this one.

THE KEYBOARD NEVER SENDS YOUR TEXT
The keyboard service in this app does not send what you type anywhere and never
downloads anything. Its own code makes no network calls: it does not contact a
server to rewrite, check, shorten, format, summarize or translate your text, and it
has no crash reporter and no remote configuration of its own. The rewrite is done on
this device by fixed tables of English phrases that ship inside the app; a
translation is done on this device by a language model you downloaded beforehand in
the app. The one thing that does leave the phone when you translate is described
under TRANSLATION: Google's ML Kit, the translation component inside this app,
reports technical usage data to Google — never the text.

NOTHING YOU TYPE IS WRITTEN TO DISK
There is no history, no clipboard log and no learning dictionary. The app does not
store the emails you rewrite, it does not store the words you type, and it does not
learn from them. The only text held in memory is the last rewrite (or the last
check, shortening, layout, template or translation you applied), and it is kept only
so the Undo key on the keyboard can put your original words back; it is discarded
when you move to another text field or close the keyboard. The emoji you use appear
under Recently used only while the keyboard is open; that list is kept in memory and
never saved. The Summary key copies the sentences it picked to Android's clipboard
only when you press it, because a summary is for reading and the text in the field
is not changed.

SUGGESTIONS, AUTOCORRECT AND SWIPE TYPING
On the English keyboard, while suggestions are on (the default), the keyboard reads
the word you are typing and the words just before it — at most the last 120
characters before the cursor in the field you are typing in - to show up to three
suggestions above the keys. The suggestions come from a fixed English word list and
fixed email phrases that ship inside the app; the list is the same for everyone,
nothing you type is added to it, and nothing is saved, sent or learned. Autocorrect
is off by default. When you switch it on, pressing space replaces a clear typo with
the suggestion shown first and in bold, and pressing backspace right after that puts
your own word back. Swipe typing turns the path your finger draws across the letters
into a word, in memory, when you lift your finger. None of the three is used in
password or number fields, and each can be switched off on the Settings screen,
where the word list credits are shown: SCOWL by Kevin Atkinson, with word frequencies
from Google Books Ngram data under Creative Commons Attribution 3.0. You can also
switch on up to five keyboard layouts (English, Turkish, German, French, Spanish,
Italian and Portuguese); the language key on the keyboard switches between them. The
layouts are part of the app and nothing is downloaded for them.

WHAT IS SAVED ON THIS PHONE
The only things this app saves are your settings: the tone you chose, the greeting
line and the sign-off name you typed into the two optional boxes, your two
greeting/sign-off switches, the switch that also shortens wordy phrases when you
fix, the two translation languages you chose and the Wi-Fi-only switch, how the
keyboard looks (theme, Fix key colour, background colour, key height, one-handed
mode, number row) and which keys you put on its toolbar, the keyboard languages you
switched on and the one in use, the suggestion, autocorrect and swipe switches, and
five usage counters. If
you pick a keyboard background photo, a reduced copy of that one photo is kept in
the app's private storage, is never sent anywhere and is deleted when you tap Remove
photo or uninstall the app. A language model you download for translation stays in
the app's private storage until you remove it on the Settings screen or uninstall
the app. Automatic cloud backup is switched off (allowBackup=false); a backup is
only written when you choose to write one, to a file you select yourself, and it
carries the settings only, never the photo. Because no email text is stored, no
email text can appear in a backup either.

IT NEVER WRITES ANYTHING FOR YOU
The app removes, softens and rephrases what YOU wrote. It does not add a reason, a
date, a promise, an apology or a name, and it does not generate sentences. The only
two lines it can add to your text are a greeting and a sign-off, and both come from
what you typed into those two boxes in the app; if they are empty, no name is used.
The Playful tone and the shortening use two more fixed phrase tables. The email
templates and quick excuses are fixed example texts that ship inside the app and are
the same for everyone: one goes in only when you pick it, and you replace its
[brackets] yourself. A summary shows sentences from your own text, unchanged and in
their original order. Every single change is listed by name on the result screen, so
you can see exactly what was taken out before you send anything. Suggestions,
autocorrect and swipe typing only type a word you pick, the fixed correction of a
typo, or the word your finger traced; they do not compose text.

SPELLING AND GRAMMAR CHECK
The Check key on the keyboard and the Check spelling button in the app are separate
from the tone rewrite, and they change nothing until you confirm: the first press of
the Check key lists what it found on the keyboard's status line and a second press
applies it, and in the app every finding has its own Apply button. Undo puts your
original text back. Grammar and punctuation are checked by a fixed list of English
rules inside this app (a / an, a word typed twice, a lowercase i, a missing
apostrophe, could of, your welcome, its / it's, a missing space after a comma or
full stop, a space before one, a doubled mark, a missing full stop at the end of a
paragraph, and a missing comma after a greeting, a sign-off or an opening word such
as However); no text leaves the app for that. Spelling is checked by the spell
checker selected in your phone's Android settings, usually part of your main
keyboard app: the text you asked to check is handed to that Android service on this
phone, the same service that underlines misspelled words in ordinary text fields.
This app makes no network call for it; what that spell checker does with text is
covered by its own developer's privacy policy. If spell checking is turned off in
Android settings, only grammar is checked and the app says so. Nothing from a check
is stored.

PASSWORD AND NUMBER FIELDS
When the field you are typing in tells Android that it is a password field or a
number field (a PIN, a phone number, a card number or a date), the keys that read or
replace text — Fix, Check, translation, Short, Format, Summary and Templates — are
switched off, the keyboard's status line says so, and the keyboard does not read
that field. Typing works as usual.

TRANSLATION
The Translate button in the app and the language key on the keyboard (it shows the
pair, for example TR→EN) put the text you wrote into another language. The
translation is made on this phone by Google's ML Kit on-device translation, which is
part of this app. Each language needs a one-off download of its language model, about
30 MB, from Google: it starts only when you tap Download on the Settings screen, over
Wi-Fi only unless you switch that off, and it carries no text of yours. Choosing a
language does not start a download, and the keyboard never downloads anything: if a
language is missing, it tells you to download it in the app. After the download,
translation works with the network switched off; the text you translate is not sent
anywhere and not stored, and on the keyboard the original is kept in memory only for
Undo. Translations do not use up the daily rewrites. ML Kit does send Google
technical data about how the feature is used: device and app information, a
per-installation identifier that Google says is not intended to identify a user or a
physical device, performance figures, the two languages you chose, the size of the
text and error codes — not the text itself. Google describes this at
https://developers.google.com/ml-kit/android-data-disclosure . You can remove a
downloaded language at any time on the Settings screen. Machine translation can be
wrong: read it before you send.

ENGLISH ONLY, ON PURPOSE
The phrase table is English. Applied to German, Turkish or French it would catch
almost nothing and would still lowercase words that must stay capitalised, quietly
damaging the sentence instead of improving it. Text that does not look like English
is therefore LEFT ALONE and the keyboard says so on its status line. Nothing is sent
anywhere in order to make that decision: it is measured on this device by counting
common English words. Translation is the one feature that works with other languages:
it uses the language pair you choose (see TRANSLATION), so you can write in your own
language, translate it into English and then fix the tone. Since version 0.9.0 the
Fix key can do those steps for you: if your text is not English and the keyboard is
set to your language (or you chose it as the translation language), Fix translates
it into English on this phone, applies the English phrase table and translates the
result back. This needs that language downloaded in the app, uses one daily rewrite
only when the text changes, and Undo puts your original back; translation can change
what you meant, so read the result before you send. Suggestions, autocorrect and
swipe typing work on the English keyboard only.

NO CONTACTS, NO LOCATION, NO MICROPHONE, NO CAMERA
This package requests NO contacts permission, NO location permission, NO microphone
permission and NO camera permission. This matters more here than in most apps:
auto-filling a recipient's name is the first idea anyone has for an email keyboard,
and it would mean opening your address book to a process that already sees
everything you type. There is no voice typing for the same reason. There is no
storage or photo permission either: a keyboard background photo is picked with
Android's photo picker, which hands the app only the one photo you choose.

INTERNET AND PERMISSIONS
This package requests exactly six permissions and none of them is there for the
keyboard's own code:
  android.permission.INTERNET and android.permission.ACCESS_NETWORK_STATE — used for
    advertising, for the Google Play purchase on the Settings screen, for downloading
    a translation language when you tap Download, and by Google's ML Kit to send the
    usage data described under TRANSLATION.
  android.permission.WAKE_LOCK — added by the background work library that ships
    inside the shared core module. This app schedules no background work.
  com.google.android.gms.permission.AD_ID and android.permission.READ_BASIC_PHONE_STATE
    — added by the advertising library.
  com.android.vending.BILLING — added by the Google Play purchase library.
There is no notification permission: android.permission.POST_NOTIFICATIONS is NOT in
this package and neither is android.permission.VIBRATE, because this app never sends
a notification and uses the system's own key-press haptic feedback instead. Key
presses feel the same and no permission is needed.

ADVERTISING (Google AdMob)
NO ADS ARE SHOWN ON THE KEYBOARD. Advertising appears only on the app's own screens.
The free version shows Google AdMob advertising there, and three ad formats are
used: a bottom banner, a native ad inside the app's own content, and a rewarded
video you start yourself. There are no full-screen ads between screens or when
the app opens. AdMob may process identifiers such as the advertising ID in order
to serve ads. Users in the European Economic Area, the United Kingdom and Switzerland
are shown a consent screen through Google's User Messaging Platform (UMP), and you
can change your choice later under Settings > Privacy. Google's privacy policy
applies to AdMob's own processing: https://policies.google.com/privacy

MEMBERSHIP AND PURCHASES
A paid membership removes advertising completely. For a paid member no ad request is
even sent — the decision is made before the consent step, so a paying user is never
shown a consent form for advertising they will not see. Purchases are handled by
Google Play; this app never sees your card details and keeps no purchase record of
its own beyond the entitlement stored on this device. You can restore purchases from
the Settings screen.

DAILY REWRITES AND THE REWARDED VIDEO
The free plan includes a daily number of rewrites. Being straight about this: a
rewrite costs this app nothing to run, because it happens on your phone and no server
is involved. THE DAILY LIMIT IS NOT A COST — it is the shape of the free tier. It is
set high enough that a normal working day does not reach it, watching an optional
rewarded video adds more rewrites for 24 hours, and a paid plan removes both the
limit and the advertising. Typing itself is never limited: when the allowance runs
out the keyboard keeps working and only the Fix key waits until the next day.
Spelling checks, translations, shortening, email layout, summaries, templates and
excuses are not counted.

USAGE COUNTERS
Five counters are kept on this device and shown to you under Settings: Rewrites run,
Rewrites made inside another app, Tone changes, Times the daily quota ran out, and
Texts left alone (not English). These numbers are never sent anywhere; they exist so
you can see how you use the app, and so the last one shows how often the app chose to
leave your text alone. The app has no analytics of its own: the only usage data that
leaves the phone is what Google's AdMob collects for advertising (see ADVERTISING)
and what Google's ML Kit reports about translation (see TRANSLATION).

WHAT THIS APP IS NOT
It does not write emails for you from scratch: the templates and quick excuses are
fixed examples you fill in. It does not read your mailbox and is not an email
client. It never sends a message anywhere. A calmer email is still your email: the
app cannot know your contract, your workplace rules or what a message will mean to
the person reading it, and it is not legal, HR or professional advice. Read the
rewritten text before you send it — the change list is there for exactly that.

CHILDREN
This app is not directed at children; the developer collects no personal data from anyone.

YOUR RIGHTS
Because the developer receives none of your data, there is nothing for us to export or
delete on a server. Uninstalling the app removes the settings and counters it saved.
If you have a question about this policy, write to bulbildir@mail.com.

CHANGES
If this policy changes, the updated text ships inside the app and is published at the
address shown on the Settings screen.