Touch Typing — Practice WPM & Accuracy Privacy Policy

Effective date: July 22, 2026

This Privacy Policy explains how Moruk, LLC(“we”, “us”, or “our”) collects, uses, shares, retains, and safeguards information when you use the Touch Typing — Practice WPM & Accuracymobile application, website, and related services covered by this page (the “Service”). Moruk, LLC is the data controller for processing it determines. We are registered in Cheyenne, WY, United States.

What applies to Touch Typing — Practice WPM & Accuracy

This app profile identifies the data and features most relevant to this Service. It is part of this Privacy Policy. A feature specific paragraph below applies only when that feature is available in the version you use.

Typing exercises, entered practice text, speed, accuracy, progress, and preferences may be stored on your device.
App settings, preferences, progress, history, or saved results may be stored locally on your device.
The purchases section applies only when the version you use offers a subscription or other in app purchase.

1. Information We May Process

Account and contact information. Where the Service offers an account, support, feedback, community, or interactive feature, this may include your name, email address, account identifier, authentication information, support messages, and information you choose to provide. We do not ask you to send passwords for unrelated services.
User content. Depending on the Service, this may include text, prompts, notes, documents, photographs, screenshots, audio, video, or other files and the metadata needed to provide the requested feature.
App records and preferences. This may include history, collections, favorites, progress, reminders, settings, saved results, feedback, and feature choices.
Device and usage information. This may include app or browser version, device type, operating system, language, IP address, approximate country, time zone, feature interactions, timestamps, campaign information, performance, and diagnostics.
Purchase information. Where purchases are offered, we may receive product, transaction, subscription, entitlement, storefront, and restore status information. We do not receive complete payment card details from app stores or purchase providers.

2. Sensitive Information and Inferences

Some Services can process information that may be sensitive depending on what you submit or how you use the feature. The app profile above identifies the categories most relevant to this Service. Do not provide sensitive information that is unnecessary for the requested feature.

Health and wellness. Medication names, symptoms, wellbeing entries, exercise or meditation activity, and similar information may reveal health information. Health and wellness Services are educational or general wellness tools unless expressly stated otherwise. They do not replace a qualified professional.
Precise location. A nearby, mapping, observation, or location reminder feature may request precise location. Location is processed only when the feature is used and permission is available. You can revoke permission through device settings.
Face, hand, and voice characteristics. A photo or audio feature may derive facial landmarks, palm or hand features, pitch, formants, timbre, resonance, or other characteristics needed for the requested result. Unless a Service expressly says otherwise, Moruk does not use these characteristics to establish identity, authenticate a person, or build a biometric identity database.
Private communications and third party information. Screenshots, notes, contact details, and uploaded files may contain information about another person. Only submit content you have permission and a lawful basis to use. Avoid unnecessary names, contact details, financial details, intimate information, and account credentials.
Other inferences. AI features may produce an estimate, classification, recommendation, or profile from submitted content. These outputs may be wrong and are not used by Moruk to make decisions that produce legal or similarly significant effects.

3. Local Processing and Device Permissions

Some features work entirely on your device. Local information may include drafts, notes, history, collections, plans, progress, reminders, preferences, cached results, and copied media. It may remain until you delete it, clear app data, or uninstall the app, but a Service may also expire or limit local records automatically as described in its app profile or in-product notice.

A Service may request camera, photo library, microphone, speech recognition, notification, calendar, motion, health, contacts, Bluetooth, or location permission only when a related feature is offered. Platform permission controls can be managed in device settings. Denying permission may prevent the related feature from working but should not affect unrelated features.

4. Images, Files, and AI Processing

Where the Service offers cloud analysis or generation, submitted content may be sent through Moruk infrastructure and the Moruk AI gateway. The gateway may route a request to configured providers based on the requested capability, model availability, reliability, and safety. Current processor routes may include Google Gemini or Vertex AI, Microsoft Azure OpenAI, OpenRouter and its configured model providers, and Helicone for AI observability or response caching. Cloudflare provides gateway hosting, storage, security, and delivery services.

We use submitted content to provide the requested result, secure and operate the Service, enforce limits, prevent abuse, investigate failures, provide support, and comply with law. Moruk gateway systems may record request and response bodies, submitted or generated media, request identifiers, model and provider information, IP or derived network identifiers, country, device or app information, latency, token usage, and error details for these purposes. Selected routes may use response caching under the configured provider retention settings. Do not submit credentials, complete payment details, government identifiers, or content not needed for the feature.

We do not sell user content, use it to build public profiles, or use it to train a Moruk owned general purpose AI model. We do not instruct AI processors to train general purpose models on submitted content. Processor handling is also governed by the applicable business or API terms. If we propose a materially different training use, we will provide separate notice and obtain any permission required by law before that use begins.

5. Advertising

Where the Service offers an advertising supported experience, it may use Google AdMob. Depending on platform, region, and your choices, advertising services may process advertising identifiers, IP address, device information, approximate location, app usage, ad impressions, ad interactions, and fraud prevention information. Where required, Google User Messaging Platform provides advertising consent and privacy choices before advertising is initialized.

On iOS, App Tracking Transparency separately controls permission to track activity across other companies' apps and websites. Refusing personalized advertising or tracking may still allow contextual or non-personalized ads where permitted. Available privacy choices can be revisited in the app when that control is provided, or through platform settings.

6. Subscriptions and Purchases

Where the Service offers subscriptions or purchases, transactions are processed by Apple App Store or Google Play. RevenueCat may process product identifiers, transaction identifiers, purchase and subscription status, entitlement status, storefront, app user identifiers, and limited app or device information needed to manage access, restore purchases, prevent fraud, measure purchase performance, and provide support.

7. Analytics, Attribution, and Diagnostics

Firebase Analytics and Google Analytics 4

Where used, Firebase Analytics and Google Analytics 4 may process screens, features, app version, platform, language, event timing, campaign and attribution information, purchase or ad events, identifiers, and diagnostic categories. We design analytics events to avoid raw images, recordings, private messages, complete document content, credentials, and complete payment information unless a specific feature clearly discloses otherwise.

Website analytics

Where used on a website, Cloudflare Web Analytics may measure aggregate performance without cookies or fingerprinting. Google Analytics 4 may run through Cloudflare Zaraz and follow the saved analytics choice and applicable regional requirements. See our Cookie Policy for website cookie and analytics details.

PostHog and session recording

Where used, PostHog helps us understand product usage and investigate usability or reliability problems. Some Services may use session recording after applying the relevant analytics preference. Depending on masking and capture settings, a recording may include visible page content, interactions, entered text, uploaded content previews, filenames, URLs, network timing, and technical information. Password fields and complete payment card fields are not intended to be recorded. A Service that intentionally records request or response content must disclose that processing.

Crash and error diagnostics

Where used, Sentry or Firebase Crashlytics may process crash reports, device and operating system information, app version, error messages, request status, technical context, and identifiers needed to investigate failures. We design diagnostic collection to exclude credentials, authentication tokens, complete payment information, raw image or video bytes, base64 payloads, and unbounded user content. An unexpected error may still include limited user supplied context, so diagnostic data is access restricted and reviewed when necessary.

8. How We Use Information

To provide, maintain, personalize, and improve the Service;
To process requested analyses, generations, purchases, and subscriptions;
To save settings, history, progress, and content when the feature requires it;
To measure usage, advertising, attribution, reliability, and feature performance;
To provide support and communicate service, safety, or policy updates;
To detect, prevent, and investigate abuse, fraud, security incidents, and failures;
To comply with legal obligations and enforce applicable terms.

9. Service Providers and Other Disclosures

We do not sell personal data or user content. Depending on the Service and features used, we disclose information to processors that help us provide, secure, measure, or support the Service. These may include:

Cloudflare and Moruk infrastructure for hosting, storage, security, and delivery;
Google, Microsoft Azure OpenAI, OpenRouter model providers, and Helicone for requested AI analysis, generation, routing, caching, and observability;
Google AdMob, Firebase, Google Analytics 4, and Google Play;
Apple App Store and Apple platform services;
RevenueCat for purchase and entitlement management;
PostHog for product analytics and session recording where enabled;
Sentry or Firebase Crashlytics for diagnostics where enabled;
Email, support, safety, content moderation, and fraud prevention providers.

We may also disclose information when required by law, to protect rights or safety, in connection with a business transaction subject to appropriate safeguards, or with your direction or consent. We require service providers to process information for contracted purposes and under applicable privacy and security obligations.

10. Provider Privacy Information

11. Legal Bases

Where GDPR or UK GDPR applies, the legal basis depends on the data, feature, and context. We rely on performance of a contract to provide requested features and purchases, consent for permissions or processing where required, compliance with legal obligations, and legitimate interests such as securing, supporting, measuring, and improving the Service. We balance legitimate interests against your rights. You may withdraw consent at any time without affecting processing that was lawful before withdrawal.

Where sensitive information is subject to additional legal protection, we rely on explicit consent, information you deliberately make available for the requested feature, another permitted legal condition, or we avoid collecting it. Device permission alone is not treated as consent for unrelated uses.

12. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes described in this policy. Because the Services use different features and providers, retention is determined by the following categories and criteria:

Local app data remains until you delete it, clear app data, or uninstall the app, unless the app automatically expires or limits records as described in the app profile or in-product notice.
Moruk AI gateway request and response records, including media where logged, are retained for the period reasonably needed to deliver or cache a result, investigate reliability or abuse, provide support, enforce limits, and meet security or legal requirements.
AI processors, analytics, advertising, diagnostics, and support providers retain data according to the contracted service configuration, their applicable business terms, and legal requirements.
Account and cloud history remains while the account or feature is active and for a reasonable period afterward for deletion, backup, dispute, fraud, and security handling.
Purchase and legal records may be retained for tax, accounting, entitlement, dispute, fraud prevention, and compliance obligations.
Support and privacy request records are retained long enough to respond, document the outcome, prevent abuse, and meet legal obligations.

We delete or de-identify information when it is no longer needed under these criteria, subject to security backups and lawful retention requirements. We do not promise immediate server deletion unless the app profile or an in-product notice expressly states that a verified immediate deletion process applies.

13. Your Choices and Privacy Rights

Depending on your location, you may have rights to access, correct, delete, restrict, object to processing, withdraw consent, or receive a portable copy of personal data. You may also have rights to opt out of sale, sharing for cross context behavioral advertising, targeted advertising, or certain profiling, and to appeal a denied request. We do not knowingly sell personal information.

Available controls may include Cookie Settings, Google User Messaging Platform privacy choices, App Tracking Transparency, device advertising settings, permission controls, account deletion, local history deletion, or contacting us. Some aggregate or pseudonymous records may not be linkable to an individual without the relevant app, account, request, or device identifier. We may verify a request and may retain the minimum record needed to show that it was completed.

14. Children and Age Restrictions

Our Services are not directed to children under 13. The app profile above identifies a higher minimum age where one applies. We do not knowingly collect personal data from a child in violation of applicable law. An adult who submits content depicting or concerning a minor must have permission and legal authority to do so. Contact us if you believe a child's personal data was provided improperly so we can review and delete it where appropriate.

15. International Transfers

Information may be processed in countries other than your country of residence. Where required, we rely on adequacy decisions, contractual protections such as Standard Contractual Clauses, provider safeguards, or another lawful transfer mechanism.

16. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information. These may include encrypted transport, access controls, restricted secrets, logging controls, data minimization, and provider security measures. No Internet transmission or electronic storage system is completely secure, so we cannot guarantee absolute security.

17. Changes to This Policy

We may update this Privacy Policy or an app profile to reflect changes to our Services, providers, practices, or legal obligations. We will update the effective date and provide additional notice when required by law. A material new use of sensitive information will receive notice before it begins where required.

18. Contact

To ask a privacy question, request deletion, or exercise a privacy right, contact us at hi@moruk.co. Include the app name and any request, account, or device identifier available to you, but do not email passwords, payment card details, or unnecessary sensitive content.

Moruk, LLC, 1908 Thomes Ave STE 12470, Cheyenne WY 82001, United States
Phone: +1 (888) 432-2048