short version: nothing is collected, nothing is sent, nothing is sold.
CRPL is a personal text expander. You define short trigger codes that expand into longer text snippets while you type on the CRPL keyboard. The app and its keyboard extension are designed to keep your data on your device. We — the developer — never receive any of it.
Your snippets, groups, and settings are stored locally in the app's sandbox and in a shared App Group container so the keyboard extension can read them. This data never leaves the device unless you explicitly enable iCloud sync.
If you enable iCloud sync (Settings → Sync), your snippets are stored in your private iCloud container managed by Apple. The container is scoped to your Apple ID; we have no access to it. Apple's privacy policy applies to data stored in iCloud — see apple.com/legal/privacy.
If a snippet contains the {clipboard} variable, the keyboard reads the system clipboard at the moment the snippet expands so it can substitute the value. iOS will show its standard "Allow Paste" prompt the first time and on subsequent reads as the system sees fit. The clipboard value is inserted directly into the host text field — it is never logged, persisted, or sent anywhere.
Snippets without {clipboard} never trigger a clipboard read.
iOS asks you to grant "Full Access" the first time you enable the CRPL keyboard. CRPL only uses Full Access for two things:
{clipboard} variable (described above).Full Access is not used for network access. The keyboard extension does not make outbound network requests.
If this policy ever changes, the new version will appear at this URL with a new effective date at the top. Material changes will also be noted in the App Store release notes.
Questions? Mail tom@tombode.nl.