Every keyboard app asks for your trust. Relay is built so it doesn't need it: the parts that could betray you are missing by design. Here's the architecture, in plain English.
In 2017, a popular keyboard app leaked the personal data of 31 million people from an unsecured server: names, phone numbers, locations. The lesson isn't that they were careless. It's that they had the data at all. Any promise a company makes about your data has an expiry date: a breach, an acquisition, a pivot to ads. The only privacy that survives all of those is data they never had.
Privacy isn't a policy. It's a missing permission.
On Android, permissions are declared in a manifest the OS enforces. Relay's keyboard simply doesn't declare INTERNET, so Android refuses to give it a network socket. This isn't us choosing not to send data; it's the operating system making it impossible. You can check it yourself: Settings → Apps → Relay → Permissions. On iOS, the keyboard runs with "Allow Full Access" off, and Apple's sandbox keeps it offline while you type your details.
Everything you save is encrypted on your device, unlocked by your face or fingerprint. The key is generated on your phone and never leaves your devices. That means the worst-case scenario for a Relay server breach is an attacker stealing ciphertext: scrambled bytes with no key on Earth except the one in your pocket.
When you pair your phone with the Relay desktop app, the encryption key passes directly between your devices. Our sync service relays a locked box from one device to the other, and that's the entirety of what it ever sees. We call it zero-knowledge sync because that's literally the design goal: the service works correctly while knowing nothing.
Relay never appears in password fields, and refuses to type in them. It's not a password manager, and a keyboard shouldn't be allowed near passwords. Keep Keychain or 1Password for those; Relay is for everything else people ask you for.
Turn on airplane mode: the keyboard works identically, because it never needed the network. Look up the permissions: the internet one isn't there. Read the full privacy page. It includes a line-by-line table of what we can and can't see. The architecture is the guarantee. Everything else is just us saying so.
Download for your device below. Same encrypted vault everywhere, no account required.
On iPhone or Mac? Join the beta and we'll email you the moment it lands.
You're on the list. We'll be in touch. Thank you.
Hmm, that didn't send. Please check the address and try again.