Encrypted on your device.
Face or fingerprint lock on phones. Passcode screen lock on Mac.

The full policy

Privacy Policy

Last updated 26 October 2026

Relay is built so that your private information stays under your control. Your vault (the details and documents you save) is encrypted on your device. If you turn on optional sync, see Sync below. You can use Relay with no account at all; signing in is optional. This policy explains exactly what we do and don't collect.

What Relay stores, and where

The details and documents you add to Relay (names, addresses, ID numbers, IBANs, notes, scans, and files) are stored in an encrypted vault on your device. If you turn on sync, an encrypted copy is stored on our sync service so your connected devices can download it. The vault is encrypted on your device before it is uploaded, and the app uploads only that encrypted file (the sync details we keep alongside it are listed under Sync below).

What we collect about you

If you sign in (optional): your name and email address (from Apple, Google, or Microsoft sign-in, or the email you type) so we can recognise your account, send you product updates, and provide support. With your account record we also store the sign-in method you used, your platform, the browser or app information your device sends with the request (its user agent), the time you signed up, whether you opted in to tips and offers, and, for Apple, Google or Microsoft sign-in on iPhone (and Google or Microsoft sign-in on Windows and Mac), the sign-in user ID that provider gives us. If you turn on the optional My availability feature, the calendar you connect will ask you to grant a separate calendar permission, described below. You can use Relay fully without an account; signing in is optional. We do not sell, rent, or share your information, we do not build advertising profiles, and we do not track you across other apps or websites.

Your vault contents (the details, documents and scans you save) are encrypted on your device before any sync upload, and the app uploads them only as an encrypted file, as described above.

On this website (not in the app): we count visits in aggregate with our own page-view counter, which stores no personal data, and with Google Analytics 4 (IP anonymised), which sets cookies and sends Google your page views and basic device and browser information. Google Analytics runs only on this website, not in the Relay app. If you arrive through a tagged link (for example a creator's link or one of our social posts), this website keeps that link's tag (source, medium, campaign and post name) in your browser's own storage for this site for up to 30 days: the first tagged link you used and the most recent one, each with the date it was saved. A later download or sign-up on this website then adds one to that link's daily total. The tag holds no ID, isn't shared with other websites and isn't used to follow you across sites; only daily totals reach us. Clearing this site's data in your browser removes it.

Anonymous usage counts (off by default, in app versions that offer them). Usage counts are off until you turn them on in the app (in versions that offer the option), and you can turn them off again at any time. When they're on, the Relay apps send us a small anonymous count when the app is first opened, at most once a day when it's opened, and the first time a step is reached. The steps are: keyboard turned on (iPhone and Android), first item saved, first send, subscription started, your answer to the optional “How did you hear about Relay?” question, the setup steps (started, first item saved, first send, skipped), saving and sending an item within 24 hours of installing, and the day-14 card being shown or shared. Each count contains only the platform (iOS, Android, Mac or Windows), the app version and the step; the campaign tag of the store link you installed from, if there was one (on Android this is read with Google Play's Install Referrer, on Windows it comes from the Microsoft Store link; the iPhone app sends no campaign tag); and your answer to the optional question, if you choose to give one. They contain no personal data, no vault contents and no device or install IDs. Like any request to a website, the request itself reaches our servers and our hosting provider with your IP address and the time, but we don't store your IP address or device details with the counts: we keep only daily totals.

Help chat. The Help button opens a chat that answers common questions from a fixed list written by our support team. If you choose to contact support, the message you write, and your email only if you add it, is sent by email to info@relaykeyboard.com so we can reply. It goes through our email delivery provider and is kept in our support inbox like any other email. Before it's sent, long numbers that look like ID, passport, IBAN or card numbers are replaced with ••••. The chat doesn't save your conversation, set cookies or use analytics. Please don't type personal details or document numbers into the chat. To have a support message deleted, email info@relaykeyboard.com.

Business demo requests. If you use the "Book a 15-min demo" form on our business page, the details you enter (name, company, work email, phone if you add it, team size, use case and message) are sent by email to partnerships@relaykeyboard.com and info@relaykeyboard.com through our email delivery provider, so we can reply and arrange a time. We use these details only to reply to you. We don't store them on our site: they aren't saved in a database or written to our logs, and they are kept only in those inboxes like any other email. To have a request deleted, email info@relaykeyboard.com.

Sync (optional)

Sync between the Relay phone and desktop apps is off unless you turn it on by connecting your devices. On iPhone and Windows it's optional. The Mac app gets its vault only from your iPhone, so using Relay on a Mac means connecting it to your iPhone.

When sync is on, your vault is encrypted on the device and sent to our sync service only as an encrypted file, so your other connected devices can download it. On iPhone, that encrypted file includes the files and images attached to your saved items. The sync key is created on one of your devices and passed to the other through the QR code or code you enter when you connect them. When an iPhone adds a computer, it sends the sync key (the key to your synced vault) to that computer through our server, encrypted for that computer (with a key from that computer's code). Your synced vault is stored as the encrypted file the app uploaded. Alongside it we keep, in readable form, the sync ID your devices agree on when you connect them (it names the stored file), the device ID of the device that last uploaded, a version number and the time of that upload, so sync works. The iPhone app also stores a small encrypted list of the devices in the sync the same way. Our storage provider also records each file's size and upload time. You can stop syncing at any time; on iPhone, choose Stop syncing from this iPhone on the Sync tab. You pair a device from Settings › Pair a device.

Where the sync key is kept. On iPhone, in the iPhone's keychain. It isn't set to sync through iCloud Keychain, but it isn't limited to that one iPhone either, so it can be included in an encrypted backup of your iPhone (kept by Apple or on your computer, not by Relay). It can also stay in the keychain after you delete the app, until you choose Stop syncing from this iPhone (on the Sync tab). On Windows, in a file protected by Windows' data protection for your Windows account. On Mac, in a file in Relay's data folder with owner-only file permissions, so other user accounts on your Mac are blocked from opening it. It isn't in the macOS Keychain, so an administrator of the Mac, or software running as you, could read it too. The Relay passcode is a screen lock for the app; it isn't used to encrypt this key.

Calendar access ("My availability")

Relay's optional My availability feature answers "when are you free?" by working out when you're busy. Depending on the calendar you connect, the app asks for these permissions. Some of them allow more than Relay uses, so we list both what each permission allows and what the app actually reads. Not every calendar option is in every version of the app, and an app asks for a permission only when you connect that calendar.

• Google Calendar: Google's calendar.freebusy permission, which gives busy/free times only. On iPhone and Android the app also asks for calendar.calendarlist.readonly, which lets it read the list of your calendars (their names and settings) so you can pick which ones count. The Mac app and the Windows app downloaded from this site (1.0.42 and later) ask for calendar.freebusy only and check your primary calendar. (The Microsoft Store version of the Windows app, 1.0.43 and later, also connects Google Calendar and reads only when you're busy.)
• Microsoft Outlook: Microsoft's Calendars.Read permission. This is a broader permission: it allows reading your calendar events, including their details. The app uses only each event's start and end time and busy status (and, on iPhone and Android, the names of your calendars so you can pick which ones count). On the Mac and on Windows, Microsoft's schedule lookup for your mailbox can also return event subjects and locations; the desktop apps ignore them and keep busy times only (each busy block's start, end and status).
• Apple Calendar (iPhone): iOS calendar access (full access on iOS 17 and later), which also covers event details. The app reads only each event's start and end time, whether it's all-day, whether it's marked busy or free, and whether you declined it.
• Calendars on your Android phone: Android's calendar permission, which also covers event details. The app reads only each event's start and end time, whether it's all-day, its busy/free status and whether you declined it, plus the names of your calendars and of the accounts they belong to, so you can pick which ones count.
• Mac app: connects Google Calendar or Microsoft Outlook only, with the permissions above. It doesn't read Apple Calendar on the Mac. Your calendar sign-in tokens are kept in a file on your Mac that only your user account can read.
• Windows app: Windows app versions 1.0.42 and later installed from this site before Relay moved to the Microsoft Store connect Google Calendar or Microsoft Outlook only, with the permissions above. It doesn't read other calendars on your PC. Your calendar sign-in tokens (one per connected account) are encrypted with Windows' own data protection for your Windows account and kept in a file on your PC. (The Microsoft Store version, 1.0.43 and later, includes My availability and connects Google Calendar; it reads only when you're busy.)
• Booking tools (optional): if you connect, on iPhone or Android, Microsoft Bookings (Bookings.Read.All) or Cliniko (with an API key you paste in), the app reads your services and open booking times from that tool. (Android 1.1.1 and earlier also offered Zoho Bookings; Android 1.1.2 removes it and deletes its stored sign-in.)

Your busy times are used only to type your available time slots into whatever conversation you're having, on your device, when you tap the feature. They aren't sent to us and are never stored on Relay's servers: the app gets them directly from your calendar provider on your device (refreshing in the background while the feature is on), and your calendar sign-in tokens are saved on your device and aren't sent to us. You can disconnect a calendar at any time from Relay's settings, or for Google from your Google Account's third-party access page, without affecting any other part of the app.

Relay's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

The keyboard and internet access

• On Android, the Relay app has the internet permission (you can see it in Settings → Apps → Relay → Permissions). Your vault is stored encrypted on your device. Its network use is for optional features like your account, maps, calendar availability and billing, plus Google ML Kit diagnostics and anonymous usage counts (off unless you turn them on), described under “When Relay connects to the internet” below.
• On iOS, typing your details works with “Allow Full Access” turned off. You only enable Full Access if you want the keyboard to hand documents and images to the clipboard for pasting. Even with Full Access enabled, your vault stays encrypted and only an encrypted file is uploaded if you turn on sync.

When Relay connects to the internet

The Relay app connects to the internet only in these cases. It only ever sends your vault encrypted, and only if you turn on sync:

• Sign-in (optional): to create your account with Apple, Google, or Microsoft, and to send us your name and email as described above.
• Sync (optional): to upload and download the encrypted vault blob between your connected devices. The vault is encrypted on your device before it is uploaded; the sync details listed under Sync above travel with it.
• Device link request (Windows, optional): if you're signed in on Windows and choose Restore from your phone in Sync, the app sends us a short-lived request (it expires after 10 minutes) with your account email, the PC's name and a one-time public key, never your vault contents. The Relay phone apps don't currently answer these requests.
• Calendar availability (optional): if you turn on “My availability”, the app gets your busy times directly from the calendar or booking tool you connected (Google, Microsoft, and, on iPhone and Android, Microsoft Bookings or Cliniko), as described above. It isn't sent to us.
• Subscriptions: purchases and subscription checks go through Google Play or the App Store.
• Anonymous usage counts (off by default, only if you turn them on in the app): platform, app version, setup step, the store link's campaign tag if any (Android: Google Play Install Referrer; Windows: Microsoft Store link) and the optional “How did you hear about Relay?” answer, kept only as daily totals. No personal data, vault contents or device IDs are stored, and we don't store IP addresses with the counts (the request itself still reaches our servers with your IP address and the time, like any request). See Anonymous usage counts.
• Map / location (optional): if you save a location, on Android the app loads map tiles from OpenStreetMap to show it. A tile request sends your IP address and the map area being shown (roughly where the pin is) to OpenStreetMap, only when you view or add a location. On iPhone the map is shown with Apple Maps, which Apple serves. When you search the map for an address, the text you type is looked up by your phone's map service, not by Relay: on Android, the phone's built-in geocoder (on most Android phones that's Google Play services, which sends the search to Google); on iPhone, Apple Maps search, which sends it to Apple. When you send a saved location, the keyboard types a Google Maps link with the pin's coordinates into your message; the app doesn't contact Google to do this, and the recipient's device opens the link.
• Google ML Kit diagnostics (Android): The Android app uses Google ML Kit to read text and barcodes (document scans and QR codes) on your device. ML Kit sends Google diagnostic data about how the ML Kit library performs. It doesn't send your images, text or vault.

On iOS, the keyboard types your details with “Allow Full Access” turned off. Full Access is only needed to copy images and documents to the clipboard.

Security

Your vault is encrypted on your device. On phones, access uses your device's screen lock (face, fingerprint or passcode) when your device has a screen lock set. On Mac, the app has an optional Relay passcode screen lock, which you turn on with Set up a lock; it doesn't use Touch ID. The saved vault is encrypted with a key kept in a file in Relay's data folder with owner-only file permissions (not in the macOS Keychain). On Windows, your vault unlocks with your vault password. On iPhone, items you mark as sensitive require Face ID or Touch ID (or your passcode) each time before they can be inserted. On phones, Relay will not insert saved details into password fields.

Payments

It's free. Any paid features are purchased through Apple's App Store or Google Play. We never receive or store your payment card details; those are managed by Apple or Google under their own terms.

Children's privacy

Relay is not directed at children under 13. We do not knowingly collect account information (name or email) from children under 13. If you believe a child has provided us their information, contact us and we will delete it.

Your rights

Your vault lives on your device (and, if you sync, as an encrypted copy on our sync service), so you control it directly: view, edit, or delete any item at any time. Deleting the app on Android removes the vault and its keys from the phone. Deleting the app on iPhone may not remove everything: your vault and the sync key may stay on the iPhone after the app is deleted, and the sync key can be included in an encrypted iPhone backup (see Sync above). To remove the sync key, go to the Sync tab in the app and choose Stop syncing from this iPhone before you delete the app. Deleting items doesn't remove the sync key. Uninstalling the Microsoft Store Windows app removes its app data; a .pcv file you imported or exported stays where you saved it. On Mac, deleting the app doesn't delete its data folder (~/Library/Application Support/RelayDesktop), which holds the encrypted vault copy and the sync key; delete that folder to remove them. A synced copy on our sync service stays until you delete it (see below).

If you have an account, you have the right to access, correct, or delete the account data we hold (your name, email and the account details listed above), including under the UK/EU GDPR where it applies. Email info@relaykeyboard.com and we will action it.

Deleting your account and data: tap Delete account in the app, or use our account deletion page (no app needed). We email you a confirmation link. When you open it, we delete your account record, waitlist entries and device-link records. You can also delete your synced vault copy from that page or from the app. That page lists the little we keep afterwards (a deletion receipt that contains no email, and anonymous statistics) and for how long.

Changes to this policy

If this policy changes, we will update this page and revise the date above. Material changes will be reflected here before they take effect.

Contact

Questions about privacy? Email info@relaykeyboard.com.