I asked the very same question about #1 on the Play store, and the developers did respond quite quickly: the network access is required to download new language packs. This makes perfect sense to me, as much as I'd like to see something like keyboards split off into two apps: the keyboard, with no/minimal permissions; and the 'helper' app, for settings, dictionary building/importing, downloading language packs, etc.

As far as reading my social information, I have no idea why it requests that. However, upon checking XPrivacy, I can see that it has never even attempted to access accounts, contacts, SMS/MMS, etc. Which would lead me to speculate that this is either a mechanism for recommendations, or used to build up dictionaries. (Edit: I never have the keyboard build up dictionaries, so I never told Minuum to try to do anything along those lines.)