Your clipboard stays yours.

Klypto is a local-first clipboard manager for macOS. The developer does not operate a clipboard server or receive your history automatically.

Local storage

Text, image and file contents are stored in a SQLCipher encrypted database on your Mac. The database key is held in macOS Keychain. Existing unencrypted attachment files are migrated into the encrypted database; obsolete files are removed after successful migration. Filesystem deletion cannot guarantee erasure from older backups or storage-device snapshots.

Preferences and organization metadata such as space names, session names and snippet content are stored locally in the app’s preferences or support files. They are not all protected by the clipboard database’s encryption. Backups containing them are encrypted. Previews are decrypted in memory and do not create plaintext files. Explicit opening, showing a file in Finder, file pasting and dragging may create a temporary decrypted export. Exports use private directories (0700) and owner-only file permissions (0600). Cleanup runs on app lock, quit, the next app start and after one hour. Cleanup is best effort; copies transferred to another application are controlled by that destination.

Local image text search

Searching text in images is optional and off by default (Settings → Privacy → Search text in images). OCR runs on this Mac for existing and new images, including archived images. Extracted text stays in the encrypted database and is used only for internal search. It is not sent to Spotlight or iCloud or included in Klypto backups. Disabling the option erases this index; deleting a clip deletes its indexed text. Undoing deletion can run OCR again if the option is still enabled. Images marked sensitive and known password-manager sources are excluded. Recognized keys, passwords and card numbers in OCR text are excluded before storage; detection remains imperfect. Use “Mark as sensitive” in the detail to exclude an image manually.

Optional iCloud sync

When enabled, encrypted snapshots of non-sensitive text history, dates, pins, archive state and deletion markers are written to your iCloud Drive. Images, files and local spaces/sessions are excluded. The encryption key uses your iCloud Keychain. Apple manages this storage under its own terms. Disabling sync leaves cloud files in place, including the legacy sync.json file retained during migration. Deletion markers remain to reconcile offline devices. See the help guide for complete removal instructions.

Backups and exports

Scheduled backups are optional and encrypted. They include the clipboard payloads and local organization data described in the help guide, including sensitive clips. The encrypted archive is limited to 512 MiB; larger backups fail explicitly. Backup encryption uses the same synchronizable iCloud Keychain key as history sync, even when history sync is off. The key may sync through iCloud Keychain, but backup history is not uploaded unless you choose a synchronized destination or separately enable history sync. A separately exported recovery key is a readable Base64 file containing the 32-byte key, without password protection. Keep it separate: anyone with the key and a backup or synchronized history file can decrypt that content. Text, CSV and JSON exports are readable by anyone with access to the exported file.

Permissions and processing

Accessibility permission is used to simulate a paste command when automatic pasting is enabled. Capture and manual pasting do not need this permission. Sensitive-content detection, OCR and supported AI rewrite/summary features run on device. Detection cannot guarantee that every secret will be recognized.

Spotlight indexing is off by default. If enabled, eligible plain text is copied to the macOS Spotlight index outside Klypto’s encrypted database. Clips flagged as sensitive are excluded. Translation and Apple Intelligence availability are controlled by system settings and supported hardware.

Diagnostics and contact

Klypto has no advertising, automatic usage analytics or developer-operated tracking service. Crash and performance diagnostics received from macOS are stored locally. Report a Bug opens an email draft containing app/system details and a diagnostic summary; nothing is sent until you send it. Review the draft before sharing.

Privacy contact: support@klypto.fr. A distribution may configure its support address in the app; Help → Report a Bug shows that address.

Changes

Changes to this policy update its date and are described in the release notes. Klypto is not directed at children and does not automatically collect personal information from users.