宗卡ཙོང་ཁ — Privacy Policy

Effective and updated: October 2, 2026

This policy applies to the 宗卡ཙོང་ཁ / Zongkha Android keyboard (com.zongka.keyboard), the iOS app (com.zongka.keyboard) and keyboard extension (com.zongka.keyboard.keyboard), and their account and cloud services. “We” means the legal operator and data controller, Very Sports (Beijing) Network Technology Co., Ltd. Contact: hang1915581435@gmail.com.

Local typing and optional services

Ordinary typing and suggestions are processed locally. We do not upload a continuous stream of keystrokes or ordinary text typed in other apps. Basic keyboard input does not require an account. Some online features require email sign-in.

When you choose to use an online feature, we process the data needed for that feature: email addresses and account identifiers for authentication; personal dictionary files for cloud sync; query text for knowledge lookup; submitted text for translation, correction or polishing; selected photos for OCR; and recorded audio for speech recognition. Support requests include information you choose to send to our contact email.

Optional host-app statistics require separate consent and include random installation identifiers and hashes, platform, app version and active dates. Statistics may be associated with an account when signed in. They contain no typed text and are not used for advertising tracking. You can withdraw consent in Settings. Network requests also convey IP addresses and request metadata needed for communications, service operation and abuse prevention. This version has no advertisements or advertising ID collection and does not request location, contacts or SMS permissions.

Permissions, providers and security

Microphone access is used for user-initiated voice input. Camera or selected-image access is used for user-initiated OCR. You can refuse or revoke these permissions. Local files, including audio and image processing files, may remain on your device until removed or app data is cleared.

Our backend provides account, cloud dictionary, knowledge and statistics services. User-initiated AI, OCR and speech features send the corresponding text, photos or audio to processing services, including services provided or connected by Pandita (pandita.com.cn). AI requests may be forwarded through our backend; photos or audio may be sent directly to their processing services. Email delivery and hosting providers process the information needed to operate their services. We do not promise immediate deletion or that external providers never use inputs for training; their handling and retention depend on their actual service rules. Contact us about provider handling or deletion requests.

iOS app and keyboard extension

In iOS Settings → General → Keyboard → Keyboards, select 宗卡 / ཙོང་ཁ to manage Allow Full Access. It enables keyboard networking and shared app data. Built-in Tibetan typing, Wylie transliteration and local suggestions remain available without it. Full Access does not authorize uploading ordinary typing or replace permission to share content with third-party AI services.

App Group storage coordinates settings and dictionaries. Without Full Access the keyboard uses extension-private dictionary storage; changing the permission switches storage locations without automatically migrating or merging entries. Access credentials and account information use shared Keychain; refresh credentials are kept in the companion app only.

Manually open the companion app from your Home Screen for voice input or OCR; the keyboard does not launch it. Voice recording is limited to approximately 20 seconds per recording and submitted for recognition. Confirming an image crop triggers OCR upload of that selected, cropped image, not your entire photo library.

The local recording.wav file may remain after recognition and be overwritten by a later recording. Delete App, rather than Offload App, removes container data. Keychain items are not guaranteed to be removed by uninstalling; the current app clears old sessions when it detects a new installation. Uninstalling does not delete the server account or third-party records.

Account, cloud dictionary, statistics, AI text, image and speech endpoints use HTTPS. Account credentials use encrypted storage on Android and Keychain on iOS. The iOS companion app and keyboard coordinate sessions, settings and feature data through shared Keychain and App Group storage. Online keyboard features may require Allow Full Access, which can be refused or revoked in iOS Settings; this permission does not replace consent to sharing content. Verification codes and refresh credentials are checked using server-side digests. We apply verification limits, expiry and session revocation.

Retention and deletion

Account data and cloud dictionaries are retained while you use the account. Verification codes are normally valid for about 10 minutes, access credentials for about 15 minutes, and refresh sessions for up to about 30 days; validity does not imply automatic deletion of every verification or security record. Host activity records are purged on an approximately 35-day rolling basis. Installation registrations can be deleted when statistics consent is withdrawn.

Deleting an account removes its core account record, cloud dictionary, verification records and account-linked usage statistics, and revokes sessions. A separate deletion marker retains the account identifier, email and its hash, deletion date and request identifier to prevent backup restoration and support repeat deletion requests. This security record currently has no automatic expiry. Statistics not linked to an account can be withdrawn separately using the statistics setting. Necessary security, abuse prevention, support and external-provider records may remain according to their purposes.

You can delete your account in the app or through the 宗卡ཙོང་ཁ account and data deletion page after email verification. To request access, correction or deletion of particular data without deleting the account, or to ask about retained records, contact hang1915581435@gmail.com. We verify requesters' identities before handling requests.

iOS usage statistics are disabled until consent is granted and cover only companion-app activity, not keyboard use or typed content. Refusal does not prevent basic input. Withdraw consent under Other Settings → Usage Statistics; pending offline withdrawals retry when the companion app becomes active with connectivity.

Cloud dictionary backup requires login and separate permission. You can back up, restore, delete the cloud copy or disable backup. Disabling backup does not automatically delete an existing cloud copy. The iOS account-deletion flow lets you choose whether to clear the local personal dictionary; other local processing files are not guaranteed to be removed by account deletion. You can also revoke microphone, camera, photo access and keyboard Full Access in iOS Settings.

Audience and changes

The app is a general-purpose input tool for users aged 13 and older and is not designed specifically for children. If you believe a child below the intended age has provided personal information, contact us for investigation and handling. We update this policy and its effective date when our practices change, and inform users when renewed consent is needed.