iGo Privacy Policy

1. Overview

• iGo collects nothing unless you agree to it — there is no silent collection.
• There are two separate categories of data: (a) anonymous data used to improve typing quality, which doesn't require signing in; (b) account-linked data, which only applies if you choose to sign in.
• You give consent through the Consent Form shown the first time you open the app, and you can change your choices anytime in Settings.

2. Data we collect

2.1. While NOT signed in (anonymous)

If you enable "Send anonymous correction pairs":

• Only "typo → correction" pairs at the Vietnamese-syllable level are sent (for example: thung lung → thung lũng).
• These are tied to a random device ID, not your account or real identity.
• We never send anything you type in password fields, and we never send any content beyond that exact correction pair.
• You can view every pair still waiting to be sent (not yet on the server) in Settings → Advanced → View, and delete them anytime before they're sent.

2.2. While signed in (optional, via Google or Discord)

If you choose to sign in:

• We receive your email, display name, and avatar from the sign-in provider (Google/Discord). We never receive or store your password — sign-in itself is handled by Google/Discord.
• If you enable "Send basic usage statistics": how many times auto-correct fired, how many times shorthand was used, and how many times spelling rules were corrected — per day, tied to your account.
• If you additionally enable "Count typed words and typing speed" (a separate option that only applies when the item above is also on): the number of words typed and your average typing speed (words per minute), computed from actual continuous typing time — never inferred from the content you typed.
• If you enable cloud sync: your settings and shorthand table are stored on the server so they can sync across your devices.

3. Data we NEVER collect

• Anything typed in password fields (secure input) — auto-correct and data collection both automatically turn off in these fields.
• The full text you type, except for the exact "typo → correction" pairs when you've agreed to send them.
• Location, contacts, browsing history, or any data unrelated to Vietnamese typing.

4. Why we collect this data

• Anonymous correction pairs are used to improve the shared auto-correct dictionary for every user.
• Usage statistics let you track your own typing performance (word count, speed) and help us understand which features are most used so we can prioritize improvements.
• Cloud sync lets you keep the same settings and shorthand table across multiple devices.

5. How we store your data

• Your sign-in token is stored in macOS Keychain (not in a plain file), readable only by iGo on your own device.
• Data sent to the server uses an HTTPS connection.
• Once submitted, anonymous correction pairs are merged into a shared dataset used to improve the dictionary — after merging, we can no longer tell which pair came from which device (see section 7 below).

6. Third parties involved

• Google and Discord: used only for sign-in (OAuth). Signing in with these services is governed by Google's/Discord's own privacy policies.
• iGo does not share your data with any other third party beyond what's needed to operate iGo's own server.

7. Your rights

• Change your mind anytime: every choice above can be toggled again in Settings (the Advanced tab for correction pairs; the Account tab for statistics/sync), with no need to restart the app.
• Review before sending: pairs not yet sent can be viewed and deleted in Settings before they ever leave your device.
• Sign out: immediately removes your sign-in token from your device.
• Delete data already sent to the server: in Settings → Account, tap "Clear my data…" to open the data-deletion screen. You can choose to delete each part separately: anonymous correction pairs sent (by device, no sign-in required), usage statistics, synced data (settings + shorthand table), or delete your entire account (which automatically includes the three items above and signs you out on every device). Deletion happens immediately and cannot be undone. Important note: once submitted, anonymous correction pairs are merged into the shared dictionary to improve typing quality for everyone — once merged, we cannot separate out one person's or device's specific contribution from that aggregate count. Deletion only applies to the original, not-yet-merged records.

8. Children

iGo is not directed at children and does not knowingly collect data from them. iGo does not collect birthdates or any information used to verify a user's age.

9. Changes to this policy

If this policy changes, we'll update the date at the top of this document. Significant changes affecting data already collected will be announced in the app.

10. Contact

For privacy questions or requests about your data, contact: [email protected].