Privacy Policy

This document explains what kind of information we collect when you are using the WildKey applications. It also describes how we store, use, transfer and delete the collected information. We are regulated under the General Data Protection Regulation which applies across the European Union. WildKey applications are to be used exclusively by study participants and have mechanisms in place to ensure it.

This document is effective from 2022 March 5.

Who we are

We are a research team from the Faculdade de Ciências, Universidade de Lisboa, and its associate non-profit private association for research FCiências.ID.

Open Source

The WildKey keyboard is open source and available here.

Collected information - Keyboard

Our keyboard collects a wide variety of metrics for research purposes whenever the user is writing using the keyboard during defined study collection periods (users will be informed and give consent for data collection during these periods). We define a session as the user opening, writing and closing the keyboard in any and all applications. No raw text is ever stored on-device or in the cloud, nor any data that would allow its reconstruction. All metrics are calculated on the device, per text-entry trial, and only processed data is stored. Below is a list of all the metrics:

Data Description

Speed

WPM Words per minute

Errors

Corrected Error Rate Erroneous characters corrected during text input

Uncorrected Error Rate Erroneous characters right in transcription

Total Error Rate Erroneous characters that were entered

Error Correction Attempts Number of attempts to correct the same error

Touch Dynamics

Flight Time Time between two touch releases

Hold Time Time spent touching the screen in each touch

Touch Major/Minor Area of the touch size

Touch Offset Hitpoint deviations from key centroids

Pressure Reports the physical pressure applied to the tip of the tool or the signal strength of the touch contact

Action and Character Counts

Action Count Refers to the number of actions taken during the text entry process

Correction Action Count Refers to the number of correction actions taken during the text entry process

Entry Action Count Refers to the number of entry actions taken during the text entry process

Number of Changed Characters Refers to the number of characters that change during the text entry process, including all characters that are inserted or deleted

Other

Number of characters Number of written characters per session

Timestamps Timestamps of sessions

Data	Description
Speed
WPM	Words per minute
Errors
Corrected Error Rate	Erroneous characters corrected during text input
Uncorrected Error Rate	Erroneous characters right in transcription
Total Error Rate	Erroneous characters that were entered
Error Correction Attempts	Number of attempts to correct the same error
Touch Dynamics
Flight Time	Time between two touch releases
Hold Time	Time spent touching the screen in each touch
Touch Major/Minor	Area of the touch size
Touch Offset	Hitpoint deviations from key centroids
Pressure	Reports the physical pressure applied to the tip of the tool or the signal strength of the touch contact
Action and Character Counts
Action Count	Refers to the number of actions taken during the text entry process
Correction Action Count	Refers to the number of correction actions taken during the text entry process
Entry Action Count	Refers to the number of entry actions taken during the text entry process
Number of Changed Characters	Refers to the number of characters that change during the text entry process, including all characters that are inserted or deleted
Other
Number of characters	Number of written characters per session
Timestamps	Timestamps of sessions

We additionally collect device model and operating system version and the last time the user the last time the user opened the keyboard. Additional details can be found here.

Collected information - Social

Our social application collects a wide variety of data for research purposes. All data collected is anonymized and only associated with the Participant ID:

Data Description

Communication

Call Events Type of call event (i.e. incoming, outgoing, answered, missed), a hashed representation of the number, and the date of the call

SMS Events Size (in number of chars), a hashed representation of the number, and the date

Device data

Ambient Light Ambient light in Lux for 10 seconds each 15 minutes

Battery Events When the battery is low and when is charged

Screen States When the screen is turned on and off

Unlock Events When the phone is unlocked

User data

App Categories Google Playstore category of each open app by the user. If the app is not in the store is marked as unknown

Physical Activity Android Activity Recognition API detection

Location Data

Location Data List of anonymized areas where the user spends more than 20 minutes

Data	Description
Communication
Call Events	Type of call event (i.e. incoming, outgoing, answered, missed), a hashed representation of the number, and the date of the call
SMS Events	Size (in number of chars), a hashed representation of the number, and the date
Device data
Ambient Light	Ambient light in Lux for 10 seconds each 15 minutes
Battery Events	When the battery is low and when is charged
Screen States	When the screen is turned on and off
Unlock Events	When the phone is unlocked
User data
App Categories	Google Playstore category of each open app by the user. If the app is not in the store is marked as unknown
Physical Activity	Android Activity Recognition API detection
Location Data
Location Data	List of anonymized areas where the user spends more than 20 minutes

We additionally collect device model and operating system version and the last time the user was active. Additional details can be found here.

Data anonymization

When installing both applications users are required to insert a set of credentials that were pre-generated for the current study and attributed to each participant. Neither WildKey nor WildKey Social collect any additional information that would allow it to identify its users.

Information disclosure

We do not sell information about you, nor do we transfer any information about you to any third party not named in the research study you agree to participate in and give your consent. We may share your account information with third parties under the following circumstances:

We got your consent to do so
Required by law

In case we are required to share your information in response to a legal process, we’ll give you notice unless it is prohibited by law.

Data storage & Security

We rely on the Google Realtime Database to store the metrics described above and rely on servers located in Belgium. Every data transfer between your device and our data storage is done with encryption (HTTPS/TLS).

How long is your data stored

The data collected by WildKey described above will be held in perpetuity, unless requested to be deleted as described below.

Playstore and CrashAnalytics

As part of WildKey and WildKey Social deployment to the Google PlayStore and its use of Firebase CrashAnalytics additional data regarding participants device model, operating system version, crashes to the application are collected and stored beyond our control. Google Privacy Policy and Firebase Crashlytics Terms of Service.

The legal basis for our data collection and processing is your consent given when you create an account and agree to this Privacy Policy.

Your rights

You may at any time request access to your data collected by us, by contacting: wildkeytech@gmail.com.

You may at any time and request your account to be deleted within 14 days, by contacting: wildkeytech@gmail.com.

If your request or concern is not satisfactorily resolved by us, you may contact your local data protection authority. See this page for data protection authorities in the EU.