Last updated: 26 September 2026. This policy describes Espiga 2.2.2, which adds Espi Mirror and translation on your iPhone first, and identifies the translation service retained for earlier versions.
Your ordinary typing and captured context stay on your iPhone. Espiga 2.0 also uses online services for your Apple-linked account, private learning backup, public ranking, purchases and optional translation. A sentence you choose to translate in Espi Remix or Espi Mirror is translated on your iPhone when possible; otherwise only that sentence is sent for translation, with your agreement. Entire conversations are not uploaded automatically.
Timothé Roudot, individual entrepreneur in France, SIREN 937 962 041. Address: 45 rue de la Fonderie, 68100 Mulhouse, France. Contact: [email protected].
Espiga keeps vocabulary, local context sentences, review results and schedules, language settings, goals, game progress, records, recent emoji and keyboard diagnostics in shared app storage. Allow Full Access is required for the keyboard to save progress and use optional online Remix. Learning packs and mission content are prepared in advance.
Secure fields are unavailable to the custom keyboard. Espiga does not request access to your contacts, photos, location, payment card details or conversation partners. Optional local notifications may display a vocabulary word or progress milestone, never a captured message. Manage notification permissions and previews in iOS Settings.
Espi Remix displays the selected sentence and an online-translation disclosure before you accept. In V2, our Cloudflare relay sends the approved sentence and target-language instructions to Google Gemini through OpenRouter, routed to Google Vertex AI. It may include a short glossary of abbreviations matched in that sentence. Earlier versions using the v1 relay continue to use TranslateAI through RapidAPI. Declining or closing an invitation sends no translation request.
We do not send the surrounding conversation, recipient identity or host-app name. Our relay receives your account credential and language pair to authorize and limit use; your Espiga account identifier and username are not added to the model prompt. The sentence itself may contain personal information: check it before accepting. Machine translations can contain errors. You can turn Remix off in Profile › Settings.
Espi Remix, on your iPhone first. When you accept to rebuild a sentence you just sent, Espiga now first tries Apple’s on-device translation (iOS 26 and later, once you have downloaded the language pack in Espiga); nothing leaves your iPhone and nothing is asked. Only when that is not available is the sentence sent through the translation relay, as before, and only after you tap Yes.
Espi Mirror. When you ask to see your draft sentence in your learning language, Espiga first tries the same on-device translation; nothing leaves your iPhone. If that is not available, the sentence you asked about is sent through the same translation relay as Espi Remix, under the same consent, and nothing else is sent. Keeping a word or using the translation in your message is recorded only in your local learning data. You can turn Mirror off in Profile › Settings.
If you answer “Yes, and don’t ask again” on either card, later sentences your iPhone cannot translate are sent to the relay without the question. Turn “Ask before translating online” back on in Profile › Settings to be asked again.
Our relay does not store sentence or translation text in its database or application logs, and its responses use no-store. It records private usage counters linked to account ID and username: calls, characters, language pairs, tokens, latency, success/failure and estimated or confirmed cost. A salted IP-derived value limits abuse. V2 monthly aggregates are retained for up to 12 UTC calendar months. Account deletion removes the identifiable usage rows; anonymous totals remain and a revocation marker lasts 31 days. Pending accounting records expire after one day.
Our service providers necessarily process connection and technical data. Cloudflare hosts our relays; OpenRouter routes V2 translations to Google Vertex AI. Their retention, security and international-transfer terms also apply. We do not promise zero retention across all providers or processing exclusively inside the EU. OpenRouter documents opt-in prompt logging and provider-specific retention; our relay does not create a transcript history. Provider information: https://www.cloudflare.com/privacypolicy/ and https://openrouter.ai/docs/guides/privacy/data-collection and https://cloud.google.com/terms/cloud-privacy-notice.
The main app can send pseudonymous usage and technical statistics to PostHog’s EU service: screens visited, onboarding steps, counts of words and reviews, keyboard activation, performance information and a random installation identifier. Events exclude vocabulary text, captured sentences, review text, names, email addresses and host-app identity. The keyboard does not upload analytics itself. IP-based geolocation is disabled in our reporting requests. Statistics are sent from the first launch, onboarding included. Events not yet delivered wait in a small queue on your device, which is deleted on delivery, when statistics are switched off, and by Erase my local data.
Usage statistics are enabled by default and can be disabled in Profile › Settings › My privacy. Espiga works without them. They help us understand usage and technical problems; we rely on our legitimate interest for this purpose and provide this way to object. They are not sold or used for cross-app advertising tracking. Switching them off stops future reporting but does not automatically erase previously received events; contact support to request deletion.
Apple handles payments and subscription renewal. RevenueCat receives an app-user identifier and purchase/subscription information. For gifted access it receives your stable Espiga account ID and grant/expiry information, not your email, username or vocabulary. Gift redemption records contain an account ID, code reference, expiry and completion state to enforce usage limits; they are not public. No subscription or automatic payment is created by a gift. Provider information: https://www.revenuecat.com/privacy/.