Glotta keeps the words, not the sentences.

iOS gives a keyboard the text of the one field it is typing in, and nothing else. It cannot read the screen, the conversation above the field, the other person's messages or anything in another app. All Glotta can read is the text before and after the cursor, in that same field.

In a chat, then, “the field” is the box you compose in: your draft, and only that. Somebody else's words can be there in one case only: when the app itself puts them in the field, as a reply to an email does with the quoted message.

Text that was already in the field when the keyboard opens is left alone. A saved draft, a pre-filled field, a message you tapped to reread: none of that is translated or sent until you type something.

Settings has an AI engine choice, and it is set to cloud: that is what lets even the free plan use the strongest models every day. Switch it to on-device and nothing in this section applies any longer: the phone's engines answer everything, for as long as you like.

With the cloud engine on, requests go through a server of ours in the European Union (Frankfurt), which forwards them to a model through OpenRouter, a service that routes requests to model providers. Our server counts the requests — that is how the daily limits work — but does not keep the text, neither in a table nor in a log.

• No identifier travels to the models: not the device's, not the account's. Your IP address is visible at network level, as with any HTTPS request.
• The content, however, can identify you: people write their own name, their address, their circumstances. “Nothing that identifies you” would be a promise we cannot make, and we do not make it.
• Every request containing something you wrote is routed only to providers that commit to not keeping the text and not using it to train models. If a model has no such provider, that model does not answer: the phone does. Some providers are located outside the European Economic Area.
• The phone's engines stay in place as a fallback: the cloud never leaves you without an answer when there is no network.

A word's base form, meaning, category and example are not worked out afresh on every phone: they sit in a dictionary on our server, written and proofread once, the same for everyone learning that language.

• What it contains. Words and their analyses, and nothing that says who asked for them. A word enters the dictionary only if it is among the most common in its language or if several different people have asked for it. A proper name never becomes an entry.
• The words that stay yours. A word that does not enter the dictionary is analysed for you, and not kept.
• The dictionary on the phone. The one for your language pair downloads as a file from a public address, with no account involved, and is read on the phone. The server sees an IP address asking for a file.
• The starter words. The 35 words a course opens with are picked on the phone from a list that is the same for everyone, inside that same file: nobody knows which ones you got.
• Reports. “Report a mistake in this word” sends the word, its category, the reason and the two languages. When several people report the same entry, it is rewritten.
• The words in your vocabulary are looked up in the dictionary even with the cloud engine off; in that case, though, no word is sent to a model: only the downloaded dictionary and the phone's engines are used.

• Translation, with the cloud engine off

  Uses the phone's built-in translator, which runs on the device. Inside the keyboard it is available from iOS 26.

• Corrections and rewrites, with the cloud engine off

  Use the phone's system models where available, a round trip through the local translator, or a dictionary bundled with the app — in that order.

• Secure fields cannot be read

  For passwords and other secure fields iOS passes nothing to the keyboard: there, Glotta cannot read, translate or learn. The system imposes this, not a setting of ours: there is nothing to turn on or off.

• Spoken conversation listens through iOS

  What you say into the microphone is turned into text by Apple's speech recognition — on the phone when your language is installed, otherwise on Apple's servers, like iOS dictation. Glotta does not record, keep or send the audio. The microphone is open only while the button says so.

• The translation memory

  Lives in the keyboard's memory for as long as the keyboard is open. Never on disk.

• Definitions

  Use the dictionary already on the phone, never a network request.

• The widget

  Marks your words as sensitive data: on the Lock Screen they stay covered until the phone is unlocked. Its notes are generated on the device, and it makes no network calls — not even with the cloud engine on.

• No analytics

  No tracking SDKs, no third-party telemetry.

Settings asks for a name and a gender. Both are optional, both can be changed or removed from there, and neither is used to profile you or to show you anything different. Glotta does not ask for your date of birth.

Gender is the one worth explaining. In Italian, Spanish, French, Portuguese and other languages an ordinary sentence about yourself is marked for gender — in Italian, “sono andata” versus “sono andato”. A model translating “I went to the beach” has to choose, has nothing to choose on, and almost always picks the masculine. Telling it once means your sentences come back in your own voice.

Where it goes: it becomes one line of instruction inside the request, and it exists only when one of the two languages actually marks gender. With the cloud engine on it travels with the rest of the request; with it off, it does not leave the phone. Your name is never put in a request to a model.

Using Glotta requires an account. The app first shows you what it does, then asks you to sign in. Until you sign in there is no session with our server at all: nothing of yours leaves the phone, and the keyboard has no cloud engine.

When you sign in — with Apple, with Google or with a code sent by email — your progress is synced: the vocabulary collected by the keyboard, the sentences you wrote with their translations — only if you have turned on “Keep the phrases I write” — your saved conversations, the words of the week, your goals, the daily counts of how much you wrote, and your profile (languages, level, name, gender if given).

They are synced so that a new phone can have them back, and for no other purpose. They sit on a server in Frankfurt, encrypted in transit and at rest, stored under the account's identifier, reachable only by the app with your sign-in and by us as operators of the service. They are not encrypted with a key that only you hold: that is the reason keeping sentences is a choice, and not the out-of-the-box setting. Not synced: app settings, temporary caches, recent emoji.

Signing out of the account first uploads whatever is not yet synced, then empties the phone of your data; if the upload fails you are not signed out, so that nothing exists only on a phone that is about to be emptied. Deleting the account (Settings ▸ Your profile, at the bottom) removes the account and everything under it from the server in one go, and empties the phone as well. It does not cancel an App Store subscription: Apple bills that, and it has to be cancelled there.

• Sign in with Apple: Apple gives us an identity token; name and email arrive only at the first sign-in and only if you consent — you can give a private relay address instead of your real one.
• Google: Google returns an identity token with your name and your address, which become the account's.
• Email: you type an address, we send you a six-digit code, you type it back. There is no password.
• The account's data on the phone sits in the iOS Keychain, where the keyboard cannot read it: the keyboard has no reason to know your email, and does not know it.

Off out of the box. Glotta can keep a list of the sentences you write with their translations, and does so only after you have turned it on yourself: Settings ▸ Your profile ▸ Your data ▸ “Keep the phrases I write”.

What the keyboard keeps while it is off: the words, and no sentences. A finished sentence is read once, on the phone, for the words it contains — they join your vocabulary, each with its category, its counters and its dates — and the sentence itself is not written anywhere. A collected word carries no example of yours with it: the one you see it with comes from the shared dictionary.

Turning it on keeps the sentences on the phone and syncs them with your account. Turning it off deletes them, from the phone and from the account, after asking you to confirm. The sentences are never sent to a model to make conversation out of them.

What does not change: with the cloud engine on, the sentence you are writing is still sent to be translated or corrected. Not keeping a sentence and not sending it are two different switches.

The phone's built-in translator may collect usage and performance metrics (for example the app's identifier and the language pair). This data does not include the original or translated text. Requests to the system models run on the device and are not sent to Apple.

Purchases are handled by Apple. Glotta only reads whether the subscription is active, to unlock the Premium features: it does not receive any payment details.

The keyboard needs Full Access to share vocabulary and settings with the app, and to play pronunciation. Full Access is also what makes network access possible at all: which is why the cloud engine cannot run without it.

In Settings you can:

• Choose the AI engine: cloud or on-device.
• Change or remove your name and gender.
• Turn phrase history on or off, and clear it.
• Download your data: a file with your profile, vocabulary, sentences, conversations and study sessions, prepared on the phone without sending anything.
• Pause the keyboard, when you are writing something private.
• Sign out of the account, or delete it with everything it contains.
• Manage the downloaded languages and restore purchases.

You can access your data, download it, correct it and delete it straight from the app, without asking anyone. For any other request — including those provided for by the EU General Data Protection Regulation — write to us: a person answers.

We do not sell your data, we do not hand it to third parties for purposes of their own, and we do not use it to train models.