This Privacy Policy explains how Fontlo ("Fontlo", "we", "us") collects, uses, and protects information when you use the Fontlo mobile application (the "App"). Fontlo turns your handwriting into a usable font.
To generate a font, the App collects the glyph images you create — either by drawing letters directly in the App, or by filling in a printed template (around 80 glyphs) and capturing it with your phone's camera or an image you select. These images, and the fonts generated from them, are the core content you create with Fontlo. The App uses the camera or selected image only to capture the glyphs or template you choose to submit.
If you buy a premium feature, the purchase is processed through Google Play Billing. We do not receive or store your card or full payment details. Google processes purchase data (such as the purchase token, product identifier, and purchase history) under Google's Privacy Policy. We receive confirmation of your purchase so we can unlock the corresponding features and keep records required for tax and accounting.
When the App communicates with our servers, our servers automatically record limited technical information in their logs, namely your IP address and standard HTTP request headers (such as the client User-Agent). We use this to operate the service, troubleshoot problems, and keep the App secure. Beyond these server-side logs, our own analytics does not use your device identifiers, advertising IDs, or location. Separately, the Google AdMob SDK integrated in the free version of the App accesses your advertising ID and related device signals to serve advertising — see section 4 for details.
To understand how the App is used and improve it, we collect anonymous usage events — for example when the App is opened, when a project is created, whether you use the drawing or template flow, and when a font is exported. These events are tied to a random identifier generated by the App (not your device ID, advertising ID, or any information that identifies you personally), together with the IP address our server receives. Analytics is processed on our own servers in the European Union and is not shared with any third-party analytics provider. We do not collect your handwriting or any content you create through analytics. You can turn analytics off at any time in the App's settings.
When you enable Fontlo as an input method (keyboard) on your device, we collect anonymous usage events about the keyboard itself — for example when the keyboard is opened, when you start composing a handwritten message, when you tap send, whether the message was successfully inserted into the receiving app, and the package name of the app you are inserting into (e.g. com.whatsapp) so we can see which apps our users prefer. These events are tied to the same random identifier described above, and follow the same analytics opt-out.
We never read, capture, or transmit the content you type or the handwritten image you send. The Fontlo Keyboard is not a "cloud" keyboard: your composed handwriting is rendered on your device and inserted directly into the target app. Standard Android keyboards are technically able to see every keystroke you type; the Fontlo Keyboard only ever sees the handwriting you draw on its own canvas, never text you type into other keyboards. Nothing you write in another keyboard, in password fields, or in any input field on your phone reaches Fontlo. We do not collect the text you send, the image bytes, or the identity of the person you are messaging.
Font generation happens on our servers (cloud processing) located in the European Union. When you create or scan glyphs, the images are uploaded over an encrypted (HTTPS) connection to our servers, where they are processed to produce your font. The resulting glyphs are returned to the App and stored so they remain available to you across sessions.
The free version of the App offers optional rewarded video ads served by Google AdMob, Google's mobile advertising platform. Rewarded ads are user-initiated: you actively tap a "watch ad to unlock" button in exchange for unlocking a premium action (for example: exporting an extra font, downloading a template, or removing a watermark from one shared image). Fontlo does not show banner, interstitial, native, or otherwise forced ads. When an ad is loaded, Google and its ad partners may collect and process:
Google uses this data to select, serve, cap, and measure ads, and to combat fraud and abuse. This processing is governed by Google's own privacy documentation:
Personalized vs non-personalized ads. Depending on your consent and your device's ad-personalization settings, ads may be personalized based on your interests. Users in the EEA, UK and Switzerland see a consent screen the first time ads load, presented via Google's User Messaging Platform (UMP) — you can decline personalized ads there.
How to opt out or reset your advertising ID. On Android: Settings → Google → Ads → tap Delete advertising ID or Reset advertising ID, or enable Opt out of ads personalization. This applies system-wide across all apps that show ads.
Fontlo Premium removes ads entirely. A one-time purchase unlocks every premium action directly — no ads are shown, no advertising ID is accessed by Fontlo, and the AdMob SDK does not load. Premium also removes the "Made with Fontlo" watermark from shared images and the metadata note from exported fonts, and unlocks unlimited font creation.
Your handwriting samples and the fonts generated from them are used solely to create your own font for you. We do not use them to train, retrain, fine-tune, or otherwise improve our machine-learning models or any third-party models, and we do not use them for biometric identification of you. We do not sell your personal data or your handwriting samples.
If you are in the European Economic Area (EEA), we process your personal data on the following legal bases under Article 6 of the GDPR:
| Purpose | Legal basis |
|---|---|
| Generating, storing, and letting you edit/share/export your font | Performance of a contract (Art. 6(1)(b)) — providing the service you request |
| Uploading and processing your handwriting samples for the AI font generation | Your consent (Art. 6(1)(a)), which you can withdraw at any time by deleting your data |
| Processing purchases and keeping accounting/tax records | Performance of a contract and compliance with a legal obligation (Art. 6(1)(b) and (c)) |
| Securing the service and troubleshooting (server logs) | Our legitimate interests (Art. 6(1)(f)) in keeping the App safe and working |
| Anonymous usage analytics to improve the App, including Fontlo Keyboard usage statistics (never the content you type) | Our legitimate interests (Art. 6(1)(f)); you can opt out in the App's settings |
| Serving ads via Google AdMob in the free version | Your consent (Art. 6(1)(a)) for personalized ads (requested via Google's consent screen in the EEA/UK/CH); legitimate interests (Art. 6(1)(f)) for non-personalized ads and fraud prevention |
We do not sell your personal data or your handwriting samples. We share data only with:
Our servers and hosting are located within the European Union. If you use the App from outside the EU/EEA, your data will be transferred to and processed in the EU. Google AdMob and Google Play Billing are operated by Google entities that may process data in countries outside the EEA, including the United States, under Google's own safeguards (Standard Contractual Clauses and the EU-U.S. Data Privacy Framework). Where any transfer of personal data outside your country requires a safeguard, we and our providers rely on appropriate legal mechanisms (such as the European Commission's Standard Contractual Clauses).
Fontlo lets you (a) share a rendered image of your handwriting to another app (WhatsApp, Instagram Stories, etc.), (b) save that same image to your phone's gallery, and (c) export the underlying font file (.TTF). When you choose one of these actions, you control where the content ultimately goes — to another app, a contact, your phone's gallery, or a file on your device.
For quality monitoring, product improvement, and abuse prevention, the App also uploads a copy of the image you shared or saved to our EU servers. This happens automatically whenever you use the Share or Save-to-Gallery feature. The upload contains:
We use these uploads to see how the Share and template features are used, to spot issues (e.g. broken layouts or scaling problems on specific devices), and to guide which templates we build next. We do not use them to train AI models, we do not sell them, and they are stored on the same EU servers that host the rest of the service.
Retention. Share and save uploads are kept for as long as needed for product analytics and quality monitoring — currently up to 12 months. You can request deletion at any time by contacting privacy@fontlo.com with the anonymous ID visible in the App's settings; we will delete the corresponding uploads from our active systems and from backups within 30 days.
The .TTF font file you export is not uploaded to our servers — export is entirely on-device once your font has been generated.
We keep your handwriting samples and generated fonts for as long as your data remains in the App, so the service stays usable for you. You can delete individual styles or your data from within the App. When you delete content, it is removed from our active systems immediately and from our backups within 30 days. Purchase and accounting records are kept for as long as required by applicable tax law. Advertising-related data collected by Google is retained per Google's policies (linked in section 4).
We use encryption in transit (HTTPS) and reasonable technical and organizational measures to protect your information. No method of transmission or storage is completely secure, but we work to protect your data against unauthorized access, loss, or misuse.
Fontlo is not directed to children under 13 (or the minimum age required in your country). We do not knowingly collect personal data from children. Ads served in Fontlo are configured as non-personalized for users under the applicable age threshold in line with Google's tagging for child-directed treatment where a user identifies as a minor. If you believe a child has provided us data, contact us and we will delete it.
Depending on where you live (for example under the EU/EEA GDPR), you may have the right to access, correct, delete, or export your personal data, to restrict or object to processing, and to withdraw consent at any time — including consent for personalized advertising, which you can also change directly through Google's consent screen or in your device's ad-personalization settings. To exercise these rights, contact us at the address below. You also have the right to lodge a complaint with your local data protection authority — in the Netherlands this is the Autoriteit Persoonsgegevens.
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you in the App.
The data controller responsible for your personal data is:
As the controller is established in the European Union, an Art. 27 EU representative is not required.