Written as an audit rather than a statement of intent. Below is a list of what the application could ask your phone for and does not, a list of what it writes down, and a list of what ever leaves the device. Anything not on those three lists does not happen.
The manifest declares no runtime permissions at all. Each unticked box below is a capability Glyphboard could have requested and does not, which you can confirm in Android Settings → Apps → Glyphboard → Permissions.
Importing a photograph to convert into characters uses Android's own picker, which hands the app that single image and nothing else. No permission to your gallery is granted or needed.
All of it goes into the private folder Android gives the application, which other apps cannot read.
None of it is personal data in the ordinary sense: there is no name attached to a drawing, because the app has never asked for one.
That is the complete list. Copying a finished piece puts characters on the system clipboard; from there it goes wherever you send it, under the rules of whatever app receives it. We are not a party to that step and have no way of observing it.
Aubi Properties Ltd, trading as PineCanvas Studio, registered in England and Wales.
9 Salmon StreetAudited here: the Android application Glyphboard, package com.asciiforge.glyphboard, in the form Google Play delivers it. Not audited, because it is not ours to audit: whatever Google logs when it installs or updates that package, which falls under Google's privacy policy.
None are linked into the build — no advertising network, no analytics library, no crash reporter, no cloud service. The three lists above are exhaustive because there is no fourth party to add to them.
Glyphboard suits any age. It has no chat, no profile and no way to publish a drawing from inside the app, so the usual worry — a young user handing over details without realising — has nowhere to occur. Protection by absence rather than by moderation.
British data protection law entitles you to ask what a company holds on you, to have it fixed, removed or handed over, and to object to it being used. Ask us and the reply arrives inside a month; it will report an empty file, which the three lists above already explain. Should you doubt that, the regulator to take it to is the Information Commissioner's Office, at ico.org.uk.
Moving any item between the three lists means the audit is wrong, so it gets redone and re-dated first, and the release that caused the move ships afterwards. Whatever version sits on your phone right now goes on behaving as audited on the day it was published.
Write to studio@aubi.agency. Paper reaches us at the address in the first entry.
Glyphboard (com.asciiforge.glyphboard) is published on Google Play by Aubi Properties Ltd, trading as PineCanvas Studio, 9 Salmon Street, London NW9 8PP, United Kingdom. © 2026 Aubi Properties Ltd.