Privacy Policy

Version 1.1 · Effective 19 October 2026

In short

• The Nuruu keyboard sends nothing you type anywhere, and does not use the network.
• What you write in the app stays on your phone. Nothing is sent unless you agree by tapping Contribute.
• If you agree, only the Mongolian script of the texts you write in the app is sent, and it is stored outside Mongolia on Cloudflare’s servers. We use it to build a Mongolian-script dictionary. Your texts are never published as they are.
• No account is needed. We do not take your name, phone number, location or advertising identifier, and we do not store IP addresses. We do not track you, and we do not sell your data.
• You can stop sharing and have what you sent deleted at any time.

1. Who is responsible for your data

The Nuruu keyboard, the Nuruu app (iPhone and Android), this site nuruu.gege.mn and nuruu-api.gege.mn, the service the app talks to (together, “Nuruu”), are run by L’Atelier Gege LLC (the “Company”, “we”, “us”). The Company is the controller of the personal data collected through Nuruu, and decides why and how it is processed.

Contact: support+nuruu@gege.mn.

The Nuruu app on Android cannot contribute yet and does not use the network. Sections 4 to 10 of this policy therefore apply only to the iPhone app for now.

2. The keyboard sends nothing

The Nuruu keyboard does not use the network. On iPhone it does not ask for Full Access, so iOS does not let it reach the network. Nothing you type with it in other apps ever reaches us. The keyboard’s settings (its look, the labels on its keys, whether it joins suffixes) are kept only on your phone.

3. What stays on your phone

The text you write in the app’s editor, your answers during setup and the app’s settings are kept only on your phone. When you save a share picture, iPhone asks only for permission to add to your photo library. The app does not read your photos.

4. Consent

Contributing is voluntary and only for people aged 18 or older. The app asks whether you want to contribute. As the note above the button says, by tapping Contribute you:

• confirm that you are 18 or older,
• agree to the data described in this policy being sent and processed, and
• agree to your texts being stored outside Mongolia (section 7).

The first time you agree, this also covers texts already written on your phone; the screen that asks says so. If you choose Not now, the app and the keyboard work in full. You can withdraw your consent at any time (section 9).

5. What is sent

What is sent

• The Mongolian script in the texts you write in the app’s editor. Numbers (Mongolian digits included), Latin and Cyrillic letters, emails and links are cut out on the phone before sending. Our service refuses any text that contains them.
• Which rules the checker found, and whether you applied each fix. Nothing says where in the text they were.
• When the text was last edited, a random number given to the text, whether it was typed or pasted and then shared with “Share this text”, and the app’s version.
• This phone’s code: a random code the app makes on the phone when you first agree. It is not tied to your name, email or number. It is the only way we can tell which texts are yours.

We add the time each text arrived and its number of words.

What is not sent

Your name, email, phone number, contacts, location, photos, advertising identifier, or anything typed in other apps. Our service does not store your IP address or information about your device or browser.

When texts are sent

• Never while you type. A text is sent no sooner than two hours after its last edit, and only the next time the app is opened after that. This gives you time to think again and switch sharing off.
• Pasted text is often someone else’s writing, so it is not sent unless you press “Share this text”. If you paste into a text that was sent, or change it while sharing is off, the app has our copy deleted.
• Text written or changed while sharing was off is not sent, even after you switch it back on.

The app cannot tell names, addresses or other personal details written in Mongolian script apart from other words. If you are about to write a letter, a message to someone, sensitive information such as about health or religion, or your own or anyone else’s secrets, switch sharing off first.

6. What it is used for, and on what basis

• Texts are used to build a Mongolian-script dictionary and to improve our Mongolian-script tools, such as the Nuruu keyboard and the checker.
• This phone’s code is used to tell one phone’s texts from another’s, to delete them when you ask, to count your contribution, to limit how often one phone can send, and to check access to the experimental fonts (section 10).

Your texts are never published as they are, sold, used for advertising, or given to others. The dictionary and word lists built from them belong to the Company and are used to improve our products. We make no automated decisions about you and build no profile of you.

We process your data only on the basis of your consent.

7. Who receives it, and storage outside Mongolia

Contributed texts are not stored in Mongolia. They are stored on the infrastructure of Cloudflare, Inc. (United States). Cloudflare runs our service on our behalf and on our instructions, as a processor, and is bound by its contract with us to protect your data. Cloudflare has servers in many countries, so your texts are processed and stored outside Mongolia. This is a transfer of personal data abroad, and we make it only with the consent you give by tapping Contribute.

Apart from this, we do not pass your data to third parties. If a competent authority demands it on grounds set by law, we may provide it within the limits of the law.

8. How long we keep texts, and how to delete them

We keep your texts until you delete them.

• In the app: Settings → Contribution → Delete what I sent. This deletes every text sent under this phone’s code from our service, and switches sharing off.
• By email: write to support+nuruu@gege.mn with “This phone’s code” from Settings → Contribution, and ask us to delete your texts.

Deleting the app stops sending, but does not delete what was already sent. The code is deleted with the app, and without it we cannot find your texts. So before you delete the app, tap Delete what I sent, or keep a copy of the code.

A deleted text may stay in the database’s automatic backups for up to 30 days, and is then gone.

Words and counts already taken from a text into the dictionary stay after the text is deleted. They do not contain your text, and they cannot identify you.

9. Stopping sharing and withdrawing consent

Switch off “Share what I write” in Settings → Contribution at any time. It stops at once, and texts waiting to be sent are not sent. Switching off does not delete what was already sent; section 8 says how to do that. Withdrawing consent does not make the processing done before it unlawful.

10. Experimental fonts

The app’s experimental fonts are used only by the Company’s staff, for testing, and are turned on by a hidden setting. When they are on, the app sends this phone’s code to nuruu-api.gege.mn when it asks for the list of fonts or downloads one, to check whether the phone is allowed them. We keep the list of allowed codes ourselves. Downloaded fonts are kept on the phone.

11. This site, and technical data

nuruu.gege.mn uses no cookies, analytics or tracking code. This site and the app’s service are delivered through Cloudflare’s network, which processes your IP address to deliver requests and protect against attacks. We do not store IP addresses.

If something goes wrong in our service, we may keep a technical note of the kind of request and the error. It does not include your text, your code or your IP address.

12. Crash reports

The app has no analytics of its own. If you have allowed your phone to share information with app developers, Apple or Google may pass crash reports on to us. Their own privacy policies cover that.

13. Security

• Every connection between the app and the service is encrypted with HTTPS.
• The service accepts only Mongolian script, so even if the app makes a mistake, no numbers, emails or links are stored.
• We collect as little as we can: we keep no name, account or IP address, and know your texts only by a random code.
• Only people authorised by the Company can reach the service and its database.

If personal data is breached, we will notify the competent authority as the law requires and announce it on this page. We know you only by your code, so we cannot notify you directly.

14. Children

The keyboard and the app work the same for everyone and send nothing without consent. Contributing is only for people aged 18 or older. If someone under 18 has contributed, they or their parent or guardian can send us “This phone’s code” and we will delete their texts.

15. Your rights

Under Mongolia’s Law on the Protection of Personal Data, in force since 1 May 2022, you have the right to:

• refuse to give consent;
• know whether we process data about you, which data, for what purpose, and to whom we pass it;
• get a copy of your data, electronically and free of charge;
• have incorrect data corrected;
• have your data deleted;
• withdraw your consent at any time and stop the processing;
• complain if you believe your rights were breached, and claim redress for harm.

You can do most of this directly in the app: switch sharing off (section 9) or delete what you sent (section 8). For anything else, write to support+nuruu@gege.mn with “This phone’s code”. We know you only by that code, so without it we cannot find your texts. We will answer your request as soon as we can.

If you believe your right to the protection of your personal data was breached, please contact us first. You also have the right to complain to the National Human Rights Commission of Mongolia (nhrcm.gov.mn) or to go to court.

16. Changes to this policy

If we change this policy, we will publish it here with a new version number and date. Before we collect a new kind of data, or use your data for a new purpose, we will ask for your consent separately in the app.

• 1.1 (19 October 2026): added the Company’s name, the controller, who receives data, security, how to use your rights, where to complain, and this section; new structure.
• 1.0 (19 October 2026): first version.

17. Contact

L’Atelier Gege LLC, gege.mn, support+nuruu@gege.mn