Effective October 23, 2026 · Invitation-only beta

Privacy notice

Operator and contact

Floabit is operated by Soomin Park, an independent developer in South Korea. It is currently an invitation-only beta; no paid subscriptions are being sold.

Service and privacy contact: novelistsm@gmail.com

What we process and why

Account information includes your email address, account identifier, profile name if supplied, and authentication session records. If you choose Google sign-in, Google provides the email address and basic profile information needed to sign you in. We use these to identify your account, sign you in, and protect access to your data.

Content includes text, screenshots, audio, webpages, video links, questions you ask about saved material, and notes that you choose to capture, record, import, save, or ask about. We process it to provide the requested feature, return results, and store or synchronize saved material. Floabit processes only the material you choose; it does not collect or process subscribed sources automatically.

Message translation: with the Floabit keyboard on iPhone or the floating button on Android, you can translate a message you are writing in another app. Floabit reads the text in the current text field (up to 500 characters) only when you tap Translate. When you speak a message, it uses the recording you start (up to one minute). It sends this to Floabit’s server for translation. It puts the result into the field only when you tap Replace or Insert, and it never sends the message for you.

The Android floating button uses an accessibility service only for this feature. To decide whether to show the button, it checks only whether the focused field is a plain text field. It does not appear in password fields and does not read other screen content. The iPhone keyboard needs Full Access to reach the server and does not send what you type until you tap Translate.

We also process usage amounts, operation identifiers, error and security records, and technical connection data needed to run the service, enforce limits, troubleshoot failures, and prevent abuse. If you email us, we process your address and message to respond. Checkout is closed; this beta does not collect payment-card details.

The website and your choices

This website remembers your language preference in browser local storage. Its examples use prepared content: they do not record your microphone, send your content to AI, or save demo notes to an account. Hosting services may receive normal connection records, such as IP address and requested URL.

In the app, processing begins after you choose an action such as translation, summary, explanation, or text extraction. Recording requires your action and device permission. You can revoke device permissions, turn off the floating button and withdraw its consent in Floabit settings, remove the keyboard’s Full Access in iPhone settings, and choose what to save or export.

Service providers and overseas processing

Floabit uses the following providers to deliver the features you request. Data is transmitted over encrypted network connections when you sign in, sync, request AI processing, or receive mail. Overseas processing is required for these hosted features; you can decline to use them and request deletion instead.

Provider privacy and data-handling details: Supabase · Render · OpenAI · ElevenLabs · Google Gemini · Resend · Google.

Retention and deletion

Saved account content is retained to provide your account and removed from active Floabit storage when account deletion completes. Deletion can be requested in the app or by email. We verify account ownership before handling requests. Deletion from active storage does not instantly erase provider backups, mail records, exported files, or offline copies on other devices; remove your own exports and device copies separately.

Results of AI requests are kept encrypted for 24 hours so that a dropped connection can return the same result without charging again, and are then deleted. Request records used for usage, retries and support are deleted after 30 days. Message translations are not saved to your notes.

Minimal pseudonymous deletion records may remain to prevent a deleted account from being restored by delayed operations. Provider security logs, backups, and mail follow each provider’s retention rules; retention differs by service and record type. Contact us about a specific deletion request, including provider-held copies. Paid-trial and payment records are not created by downloading the app or using this invitation-only beta. Feed and newsletter subscriptions, received newsletters, and study conversations ended in October 2026 and were deleted from active storage.

Your privacy requests

You may request access, correction, deletion, or restriction of processing by contacting Soomin Park at the email above. You may also ask what data was sent to a provider and request help with account deletion if you cannot sign in. Do not send passwords or login codes with your request. We will explain the outcome and any records that must remain under applicable law.

We publish changes to this notice with an updated effective date and notify affected account holders of material changes through the app or email.

Related policies

Terms · Privacy · Payments & refunds