← Back to Clipy

Legal & Privacy

Privacy Policy

Last updated: September 8, 2026 · Effective immediately

The Short Version (Plain English)

Clipy is built on a single core principle: your clipboard belongs to you, and only you. Everything you copy stays on your Mac. Clipy contains zero telemetry, zero analytics tracking, and zero advertising SDKs. The one deliberate exception is AI transforms — strictly opt-in, detailed in §3 below.

1. What Data Clipy Stores

When you copy text, links, or images, Clipy stores this history in a local SQLite database on your computer at:

~/Library/Application Support/Clipy/clipy.db

This database is completely unencrypted at rest by Clipy itself (relying on your Mac's native FileVault disk encryption) and is never transmitted over the Internet.

2. Why Clipy Asks for macOS Accessibility Permission

To provide global shortcut recall (⌥V) and system-wide snippet expansion (e.g. typing ;email), macOS requires apps to obtain Accessibility permission.

• Global Key Monitoring: Clipy monitors keystrokes solely to match your configured shortcut and snippet triggers.
• Automatic Suppression: Clipy never records or expands text inside secure password fields.
• Transient Items: Any pasteboard item flagged as concealed or transient (such as passwords copied from 1Password, Bitwarden, or Apple Keychain) is ignored automatically.

3. AI Transforms (Strictly Opt-In)

Clipy offers optional AI commands (%fix, %expand, %humanize, %shorten) that rewrite text in the field you're editing. These are the only situation in which text leaves your Mac:

• Consent first: a one-time consent screen explains this before your first transform; the feature is off until you opt in.
• Only on your command: the text of the current field is sent to Clipy's backend only when you type an AI command. Nothing is sent automatically, in the background, or for history/snippets.
• Not stored, not trained on: field text is processed in memory to produce the rewrite and is not retained or used to train models.
• Passwords stay local, always: AI commands are suppressed in secure password fields, same as snippet expansion.
• Fully offline is supported: if you never use an AI command, Clipy behaves as a 100% offline app.

4. Network & Analytics

Apart from the opt-in AI transform requests described above, Clipy does not make outbound network requests. We do not track feature usage, crash reports, IP addresses, or device identifiers. You can verify this using macOS network monitoring tools like Little Snitch or LuLu (allow-list the transform endpoint only when you intend to use AI commands).

5. How to Delete Your Data

Because all data is stored locally, deleting it is instant:

1. Quit Clipy from the menu-bar icon.
2. Delete ~/Library/Application Support/Clipy/clipy.db.
3. Drag the Clipy application from Applications to the Trash.

6. Contact

If you have any questions about this policy or our privacy design, reach out directly to the creator at hey@clipy.app.