Privacy Policy

This Privacy Policy applies to the Textavia website, tools, Textavia browser extensions, and the Textavia AI Keyboard app for Android (together, the Service). The Service is provided by Caravaca Labs, LLC. It does not cover third-party websites you may visit via links from Textavia.

Textavia includes both in-browser tools and server-side tools. Each tool page displays a short processing note (for example: Processing: in-browser).

• In-browser tools: your text/data is processed locally in your browser. The tool does not send your input to our servers.
• Server-side tools: you upload a file to our server so we can process it (for example, image conversion and resizing). The converted output is returned to you.

If you prefer not to upload files, use tools that say Processing: in-browser.

Important: avoid uploading sensitive files to server-side tools. If you need an offline workflow, use local software instead.

When you use a server-side tool, the Service receives your uploaded file and processes it to produce the requested output. Textavia is designed to process these requests without intentionally storing your file after the conversion completes.

Like most websites, our hosting provider and infrastructure may generate operational logs (for example, request metadata) for reliability and security purposes.

On the website, we use analytics and diagnostics to understand usage at a high level (for example: which tools are used most and how the site performs) and to improve reliability. We currently use Google Analytics 4, Microsoft Clarity (session replay and heatmaps), Umami, and Vercel Analytics.

• These tools may collect usage data such as page views, interactions, session replay or heatmap signals, device and browser information, and approximate location derived from IP address.
• Depending on configuration, analytics tools may use cookies or similar technologies. You can reduce collection by using browser privacy controls, blocking scripts, or using an ad-blocker.
• We may use aggregated analytics to make product decisions (for example: which tools to improve).

If you have questions about data handling, see the Contact section below.

Textavia uses Grow by Mediavine, an audience engagement tool that provides features like content bookmarking and email subscriptions.

• Grow may set first-party cookies and use local storage to remember your preferences and measure content engagement.
• If you choose to create a Grow account or subscribe through a Grow feature, the email address you provide is processed by Mediavine to deliver that feature.
• Mediavine acts as the provider of this service; see the Mediavine privacy policy for details on its data practices.

Some tool pages let you mark the page as helpful or not helpful. If you vote, we store a small feedback record so we can show aggregated “people found this helpful” counts.

• We store the tool identifier (the tool URL slug) and whether your vote was helpful or not helpful.
• We set an anonymous session cookie to avoid counting repeated votes from the same browser as multiple people.
• We do not store your tool input along with your vote.

You can clear cookies in your browser settings to reset the session identifier.

Textavia may store small pieces of information in your browser (local storage or session storage) to improve UX.

• Theme preference (light/dark)
• Optional tool preferences

You can clear local storage via your browser settings. Clearing it may reset preferences.

Text Replacer: Find & Replace Anywhere is a Chrome extension that finds and replaces text across the active web page. The extension processes page text, form values, search terms, replacement text, and match results locally in Chrome to provide this feature.

• Textavia does not receive your page text, search terms, replacement text, form values, URLs, saved searches, history, templates, or extension preferences.
• Saved searches, history, templates, and preferences are stored in Chrome local extension storage on your device.
• The extension uses active tab access after you open it on a page. Optional site access is requested only when you grant it for a specific site.
• The extension does not use extension data for advertising, does not sell or share extension data, and does not allow humans at Textavia to read extension data.

The use of information received from Chrome extension permissions adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements.

Find and Replace Anywhere is a Microsoft Edge extension that finds and replaces text across the active web page. It processes page text, form values, search terms, replacement text, match results, and the active tab URL locally in Microsoft Edge to provide this feature.

• Textavia does not receive page text, search terms, replacement text, form values, URLs, saved searches, history, templates, match results, or extension preferences.
• Saved searches, history, templates, and preferences are stored in Microsoft Edge local extension storage on your device. You can remove this data by uninstalling the extension or clearing its stored data from the browser.
• The extension uses active-tab access after you open it on a page. Optional site access is requested only when you choose to grant it for a specific site.
• Extension data is not used for advertising, analytics, credit decisions, or any purpose unrelated to find-and-replace functionality. It is not sold or shared with third parties, and humans at Textavia cannot read it.
• The extension does not use remotely hosted code. All executable code is included in the package reviewed by Microsoft.

Information accessed through Microsoft Edge extension permissions is used only to provide the extension's disclosed, user-facing purpose and is handled in accordance with the developer policies for Microsoft Edge Add-ons.

Textavia AI Keyboard is a keyboard and AI writing app for Android (package com.textavia.app). This section describes what it keeps on your phone, what it sends, and what our servers store.

What stays on your phone

• What you type with the keyboard. Word suggestions, autocorrect, clipboard history and your personal dictionary work on the phone. Your keystrokes are not sent to us.
• Your Ai Chat history. You can delete it in the app under Chat history.
• Contact names, only if you turn on the contacts dictionary: they are read on the phone to suggest names while you type and are never sent anywhere.
• Your settings, keyboard theme and app language.

What is sent when you use an AI feature

• Text leaves the phone only when you use an AI feature: an Ai button in the keyboard (for example Grammar, Tone or Translate), Ai Chat, Ai Task, the translator or the dictionary. The text that feature works on (your selection, the field or your question, and for Ai Chat the recent messages of that conversation) is sent to our servers and from there to our AI providers, OpenAI and Google (Gemini), through Cloudflare’s AI Gateway, to create the result.
• The app asks for your agreement before the keyboard’s AI features can send anything (during setup, or in Settings under AI data use), and you can turn it off there at any time.
• We don’t store that text. Our servers record only which feature ran, how long the text and the answer were, how long it took and whether it worked, to count your daily uses and keep the service reliable. Logging at the AI Gateway is off. So that a repeated request is answered quickly, identical keyboard, task, translator and dictionary requests may be cached by Cloudflare for up to 24 hours; Ai Chat is not cached, and choosing Try again skips the cache.
• OpenAI and Google process the text to produce the result under their API terms (see the OpenAI privacy policy and the Google privacy policy).
• If you report an AI answer (the flag button), we store the answer, the text it was based on and the reason you chose, so we can review it.
• Voice typing and the microphone buttons use your phone’s speech recognition service (for example Google’s), which receives the audio under its own privacy policy. The keyboard asks for microphone permission for this. Read aloud uses your phone’s text-to-speech engine.

Your install, usage and subscription

• On first use, the app creates a random install ID. It is not linked to your name, email address or phone number. The app registers it with our servers together with the app version and a Google Play Integrity check, which helps protect the service from abuse. We store the install ID, a hashed access token, the result of that check, your daily count of AI uses, and when the install was created and last used.
• Subscriptions are bought and paid through Google Play; we never receive your payment details. When you subscribe or restore a purchase, the app sends us the purchase token from Google Play, which we verify with Google. We store a hash of that token, the plan, its status and its end date, linked to your install. Google Play also notifies our servers when a subscription renews, is cancelled or expires.

Ads

• The free version shows ads from Google AdMob in the app’s screens. AdMob uses your device’s advertising ID and device information to show and measure ads, and shows personalized ads only with your consent where the law requires it (for example in the EEA, the UK and Switzerland, through Google’s consent form). You can change that choice in the app under Settings, Ad privacy choices, and reset or delete your advertising ID in Android’s settings. See how Google uses data from apps that use its services.
• The keyboard itself never shows ads, and Premium subscribers see no ads.

Optional app analytics and crash reports

Usage analytics and Crash reports are separate, optional choices, off by default. You can enable or disable each during setup or in Settings. AI data use and AdMob consent do not enable either choice.

• With Usage analytics enabled, Google Analytics for Firebase receives screen visits, onboarding, keyboard setup, in-app feature actions and paywall/plan selections and purchase confirmations, together with app-instance identifiers, app/device information and approximate location derived from your connection.
• With Crash reports enabled, Google Firebase Crashlytics receives sanitized crash stack traces, app/device diagnostics and installation identifiers. Consented analytics events may appear as crash breadcrumbs. Reports are sent after the app process restarts while crash reporting remains enabled.
• We remove exception messages and do not add typed text, prompts, AI answers, recordings, contacts or purchase tokens to these services. Analytics advertising-ID collection and advertising personalization are disabled; AdMob has its own consent.
• Turning these choices off stops new analytics collection and crash reporting and clears local unsent data. It does not erase reports already dispatched or historical data at Google. Contact us about deletion requests. Google processes this data to provide analytics and reliability services. See Firebase privacy information.

Notifications

If you allow notifications, the app shows one writing tip a day. Tips are created on the phone; turn them off in Settings under Daily notification.

Deleting your data

• In the app, Settings, Delete my data removes everything our servers store about your install: its registration, usage counts, AI usage records, reports and purchase records. A subscription stays with your Google account; cancel it in Google Play. This action does not erase historical Firebase Analytics or Crashlytics records; contact us about those records.
• Uninstalling the app, or clearing its storage, deletes what it keeps on your phone, including your chat history.
• We keep the server data above while you use the app, until you delete it with Delete my data or ask us to delete it (see Contact).

We don’t sell the app’s data. We share it only with the service providers named above: Cloudflare (hosting and the AI Gateway), OpenAI and Google (AI models, Google Play billing and integrity checks, AdMob, Firebase Analytics and Crashlytics).

The Service uses cookies and similar technologies in the following categories:

• Strictly necessary: the anonymous session cookie used to de-duplicate helpful votes.
• Preferences: theme and tool settings stored in local storage, and Grow engagement preferences.
• Analytics: cookies or identifiers set by the analytics tools listed above, depending on configuration.
• Advertising: cookies and similar technologies used by Mediavine and its partners to serve, target, and measure advertisements, subject to consent where required.

You can block or delete cookies through your browser settings. Blocking some cookies may affect features such as vote de-duplication or saved preferences.

If you are in the European Economic Area, the United Kingdom, or another region with similar data protection laws, we process personal data on these legal bases:

• Legitimate interests: operating, securing, and improving the Service (for example, aggregated analytics and operational logs).
• Contract: providing the features you ask for, such as the app’s AI features and your subscription.
• Consent: where required, such as for personalized advertising, non-essential cookies, or sending text to AI providers from the keyboard, or optional app analytics and crash reporting. You can withdraw consent at any time.

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Restrict or object to processing
• Receive a portable copy of data you provided
• Lodge a complaint with your local supervisory authority

To exercise any of these rights, contact us using the details in the Contact section. Data may be processed on servers in the United States and other countries; where required, transfers rely on safeguards such as standard contractual clauses.

If you are a California resident, the California Consumer Privacy Act (as amended by the CPRA) gives you the right to:

• Know what categories of personal information we collect and why
• Access the personal information we hold about you
• Request deletion of your personal information
• Correct inaccurate personal information
• Opt out of the sale or sharing of personal information
• Not be discriminated against for exercising these rights

We do not sell personal information for money. Mediavine and its partners may process personal information for interest-based advertising in ways that may be considered “selling” or “sharing” under the CCPA. Where applicable, use the “Do Not Sell or Share My Personal Information” link available on the Service to opt out.

To exercise these rights, contact us using the details in the Contact section. We will verify requests and respond within the timeframes required by law.

• Files uploaded to server-side tools are processed for the conversion and are not intentionally stored after it completes.
• Operational logs generated by our hosting infrastructure are retained for short periods for reliability and security.
• Analytics data is retained according to each provider’s configured retention period.
• Helpful-vote records are retained as aggregated counts tied to a tool, not to you.
• Backend records about a Textavia AI Keyboard install are kept until you delete them with Delete my data in the app (see the Android app section).

We take reasonable measures to protect the Service. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

The Service is not directed to children under 13 and we do not knowingly collect personal information from children.

We may update this policy from time to time. When we do, we will update the Last updated date at the top of this page.

See also: Terms.

For privacy questions, use Contact.

Email: Email available after page load