Agentic Keyboard Privacy: Permissions, Risks, and Safer Setup
Keyboards can see sensitive text. Agentic keyboards may need extra permissions.
A keyboard is the most intimate interface on your phone. When it also becomes agentic, privacy becomes critical. This guide explains what to know and how to stay safe.
Quick Safety Checklist
Before Enabling Full Access
- 1.Read the keyboard app's privacy policy — look for specifics on data collection, processing, and sharing.
- 2.Check if the app offers on-device processing for basic features, reserving cloud only for advanced functions.
- 3.Enable permissions one at a time — start with the keyboard, add calendar or contacts only when you need the feature.
- 4.Test the keyboard with non-sensitive text first before using it for work or personal messages.
- 5.Know how to revoke access: Settings → General → Keyboard → Keyboards → [App] → toggle Full Access off.
Privacy by App
A practical look at what each tool may involve from a privacy perspective. This is based on publicly available information — always check the official privacy policy, as data handling practices can change.
| Tool | Type | Permission sensitivity | Safer setup tip |
|---|---|---|---|
| Acti | Agentic Keyboard | High — keyboard access plus authorization for connected services used by skills | Start with keyboard-only use, then connect one service at a time when a specific skill needs it. |
| Grammarly Keyboard | AI Keyboard | Medium — requires Full Access for advanced checks; basic features may work without it | Use the free tier first. Disable Full Access for apps where you only need basic autocorrect. |
| Gboard Gemini | AI Keyboard | Medium — network access available by default on Android; Gemini features may use cloud processing | Use incognito mode for sensitive conversations. Disable voice input and cloud search if not needed. |
| SwiftKey | AI Keyboard | Medium — network-enabled for translation, sync, and other online features; clipboard sync requires a Microsoft account | Disable clipboard sync if you don't need cross-device copying. Review Microsoft account-linked data in the privacy dashboard. |
| Wispr Flow | AI Keyboard (Voice) | Medium-High — microphone access required; voice data may be processed in the cloud for accuracy | Test dictation accuracy in a controlled environment first. Review privacy settings before using for sensitive conversations. |
| ChatGPT | Mobile AI Agent | Medium — runs as a separate app, not a keyboard; data is processed on OpenAI servers | Opt out of training data usage if available. Don't paste sensitive personal information into prompts. |
| Perplexity | Mobile AI Agent | Low-Medium — runs as a separate app; primarily a search tool with less access to device data | Use for research and search tasks rather than personal content. Verify cited sources independently. |
Data: Typed intent, generated results, and data from services you choose to connect
High — keyboard access plus authorization for connected services used by skills
Check: Review the current privacy policy and each connected-service authorization
Tip: Start with keyboard-only use, then connect one service at a time when a specific skill needs it.
Data: Typed text (for grammar and tone analysis)
Medium — requires Full Access for advanced checks; basic features may work without it
Check: Review whether advanced suggestions use cloud processing; check the business tier if using for work
Tip: Use the free tier first. Disable Full Access for apps where you only need basic autocorrect.
Data: Typed text, search queries, voice input (if enabled)
Medium — network access available by default on Android; Gemini features may use cloud processing
Check: Review incognito mode availability; check which Gemini features send data to Google servers
Tip: Use incognito mode for sensitive conversations. Disable voice input and cloud search if not needed.
Data: Typed text, translations, clipboard/account sync data where enabled
Medium — network-enabled for translation, sync, and other online features; clipboard sync requires a Microsoft account
Check: Review the Microsoft privacy dashboard for data management; check which features require cloud processing
Tip: Disable clipboard sync if you don't need cross-device copying. Review Microsoft account-linked data in the privacy dashboard.
Data: Voice recordings, transcribed text
Medium-High — microphone access required; voice data may be processed in the cloud for accuracy
Check: Review where voice data is processed (on-device vs cloud); check retention policies for voice recordings
Tip: Test dictation accuracy in a controlled environment first. Review privacy settings before using for sensitive conversations.
Data: Prompts, uploaded files, voice input, web search queries
Medium — runs as a separate app, not a keyboard; data is processed on OpenAI servers
Check: Review OpenAI's data usage policy; check whether conversation history is used for model training
Tip: Opt out of training data usage if available. Don't paste sensitive personal information into prompts.
Data: Search queries, uploaded content, conversation context
Low-Medium — runs as a separate app; primarily a search tool with less access to device data
Check: Review the privacy policy for data retention and search query handling; check Pro vs free tier data practices
Tip: Use for research and search tasks rather than personal content. Verify cited sources independently.
This information reflects publicly available documentation at the time of writing. Privacy practices, data handling, and feature availability can change. Always check the official privacy policy and current app settings before granting permissions.
Why Keyboard Privacy Matters More
Most apps see only the data you explicitly give them. But a keyboard sees everything you type across every app — making it the highest-trust surface on your device.
When a keyboard also becomes agentic — capable of searching the web, accessing your calendar, or sending messages — the scope of potential data access expands significantly.
What a Keyboard Can Potentially See
Everything you type
Messages, emails, search queries, notes, form fields — every keystroke passes through the keyboard.
App context
Keyboards can see which app you're typing in, which helps context-aware suggestions but is also sensitive.
Network-transmitted data
With Full Access or network permissions, a keyboard can send data to remote servers for cloud AI features.
Passwords and sensitive fields
On both iOS and Android, secure text fields are generally protected — the system switches to the default keyboard.
Permission Risk Matrix
When you install a new agentic or AI keyboard, review each of these permissions. Only enable what you need.
| Permission | What it enables | Risk |
|---|---|---|
| Full Access (iOS) | Network access, cloud AI, voice input, web search | High |
| Network (Android) | Cloud predictions, search, sync across devices | Medium |
| Contacts | Sharing content with specific people | Medium |
| Calendar | Checking availability, suggesting meeting times | Medium |
| Location | Nearby search, sharing location in messages | Medium |
| Microphone | Voice dictation | Medium |
| Clipboard | Pasting and auto-fill from clipboard history | Low |
Network access, cloud AI, voice input, web search
Cloud predictions, search, sync
Sharing with specific people
Checking availability, meeting times
Nearby search, sharing location
Voice dictation
Pasting and auto-fill
Cloud vs. On-Device Processing
Cloud Processing
- • More capable AI models
- • Data leaves your device
- • Subject to provider's privacy policy
- • May be stored or used for training
- • Requires network connection
On-Device Processing
- • Data stays on your phone
- • More private by default
- • May be less capable for complex tasks
- • Works offline
- • Better for sensitive conversations
Red Flags — When to Walk Away
- • No privacy policy or one that's vague about data handling
- • Requests for permissions with no clear explanation of why
- • Keyboards from unknown developers with no track record
- • Apps that claim to be "agentic" but can't explain how they handle your data
- • Free keyboards that require excessive permissions upfront without letting you opt out