Commander Flow for Android — Privacy Policy

Version 1.0 — 28 August 2026

This Privacy Policy applies to the Commander Flow Android keyboard application (package pro.commanderflow.keyboard). Commander Flow is designed around a simple principle: speech, typed text, and keyboard context are processed on the user's device and are not sent to the developer.

1. Data controller and contact

The data controller is:

Peter's Engineering JDG (Piotr Bahdasaran, sole proprietor)
NIP: 9512534689
KEN 19, 02-797 Warszawa, Poland
Privacy contact: inbox@commander-flow.pro

2. Speech recognition and microphone data

Commander Flow uses the microphone only when the user starts voice dictation. Audio is processed locally by speech-recognition models stored on the device. Audio recordings, microphone input, and transcripts are not uploaded to the developer or to a cloud speech-recognition service. Audio needed for recognition is held only for the active local recognition session and is discarded when it is no longer needed.

3. Keyboard text and editing context

As an Android input method, Commander Flow receives keystrokes and may access limited text context supplied by the active text field. This is necessary for typing, deletion, capitalization, suggestions, autocorrection, and inserting dictated text. This text and context are processed locally and are not transmitted to the developer or used for advertising, analytics, or profiling.

Password fields and other fields marked as sensitive by Android are handled according to Android input-method protections. Commander Flow does not intentionally store or transmit their contents.

4. Local settings and calibration

Keyboard settings, enabled languages, model preferences, calibration parameters, and the local entitlement cache for the optional purchase are stored on the device. Calibration input is analyzed locally to adjust key geometry; it is not uploaded. Users can remove this local data by clearing the app's storage or uninstalling the app.

5. Model downloads and internet access

Speech-recognition models are downloaded over HTTPS when the user first requests a model or chooses to download one. Model files may be delivered by third-party hosting providers, currently including Hugging Face and GitHub. Those providers necessarily receive ordinary network-request information such as the requesting IP address, timestamp, requested file, and standard connection metadata, and process it under their own privacy policies. Commander Flow does not attach dictated audio, transcripts, keyboard text, advertising identifiers, account details, or a developer-created user profile to model-download requests.

After the required model is downloaded, speech recognition works offline. Internet access may still be used to check or download models selected by the user and to communicate with Google Play Billing as described below.

Provider policies:

• Hugging Face: https://huggingface.co/privacy
• GitHub: https://docs.github.com/en/site-policy/privacy-policies/github-general-privacy-statement

6. Optional Google Play purchase

Commander Flow offers an optional one-time Google Play purchase that permanently removes occasional support reminders. All keyboard and voice-typing features remain available without the purchase. The purchase is processed by Google Play. The developer does not receive or store payment-card details. The app receives only the purchase status and entitlement information needed to activate and restore the purchased benefit, and stores an entitlement cache locally on the device.

Google processes purchase and account information under the Google Privacy Policy: https://policies.google.com/privacy

7. Data we do not collect

Commander Flow for Android does not include advertising SDKs, analytics SDKs, crash-reporting SDKs, or developer telemetry. The developer does not collect or share:

• dictated audio or microphone recordings;
• dictated transcripts or typed text;
• clipboard contents;
• contact lists, photos, files, or messages;
• precise or approximate location;
• advertising identifiers;
• diagnostic logs or usage analytics;
• account credentials or payment-card information.

Data processed solely on the device is not transmitted to the developer.

8. Permissions

Commander Flow may request:

• Microphone — to perform voice dictation locally;
• Notifications and foreground service — to keep an active dictation session visible and reliable where required by Android;
• Internet — to download speech models and use Google Play Billing.

Permissions can be reviewed or revoked in Android system settings. Revoking a permission may disable the feature that depends on it.

9. Security and retention

Network downloads use HTTPS. Downloaded models and local preferences remain in the app's private storage. Local data is retained until the user removes downloaded models, clears app storage, or uninstalls the app. Google Play purchase records are retained by Google according to Google's policies and legal obligations.

10. Children

Commander Flow is a general productivity tool intended for users aged 13 and older. It is not directed to children under 13, does not show ads, and does not knowingly collect personal data from children.

11. International processing

The core voice and keyboard processing takes place on the user's device. When model files are downloaded or Google Play Billing is used, the relevant third-party provider may process ordinary connection or transaction data in countries where it operates, subject to its own privacy policy and safeguards.

12. User choices and rights

Users control microphone permission, model downloads, local model retention, and keyboard settings. Local app data can be removed through Android settings or by uninstalling the app. Questions or privacy requests can be sent to inbox@commander-flow.pro.

13. Changes to this policy

This policy may be updated when Commander Flow's functionality or legal requirements change. The current version and effective date will be published on the Commander Flow website.