is there anyway this app could be exploited as a keylogger?
For those VIP users, your user dictionary may be stored in the server automatically, so that you are able to synchronous your own user dictionary whenever and wherever you need.