Privacy policy

Effective 20 October 2026

Summary

• We collect nothing. ClipUp has no account, no server of ours, no analytics, no advertising and no crash reporting.
• Your history stays on your device, in one encrypted file. The key is kept in your Keychain and never leaves the device.
• Passwords and secrets are left out. Copies that apps mark as concealed or temporary, copies from password managers, and text that looks like an API key or token are not saved unless you choose otherwise.
• ClipUp only goes online for three things: fetching a preview of a link you copied, checking for updates in the version downloaded from our website, and downloading the image model behind Erase the first time you use it. None of them send anything you copied.
• You are in control. Choose how long history is kept and how much space it may use, lock items behind Touch ID, pause recording, ignore apps, or erase everything.

1. Who this policy covers

This policy describes how ClipUp, the clipboard manager for Mac, iPhone and iPad made by Celento George (“we”, “us”), handles information. It applies to the Mac app, whether you download it from this website or from the Mac App Store, to the iPhone and iPad app and its keyboard and share extensions once they are released, and to this website.

ClipUp is built so that we never receive what you copy. Almost everything in this policy is about what happens on your own device, and how you control it.

2. What ClipUp stores, and where

ClipUp keeps a history of what you copy so you can find it and paste it again. Each item can include the text, image, link, color, file reference or other content you copied, a title, a small preview, any text ClipUp recognized in an image, the app it came from, when it was copied, and when you last pasted it.

The history is kept in a single database file on your device. On a Mac it lives in your user Library, in a folder only your account can open. On iPhone and iPad it lives in a container shared by the ClipUp app, the ClipUp keyboard and the ClipUp share extension on that device, so each of them can read the same history. The file is not uploaded anywhere by ClipUp.

ClipUp also keeps its settings on your device, such as your shortcuts, the apps you have chosen to ignore, and a random identifier it uses to tell your devices apart. This identifier is not linked to you and is never sent to us.

To work out Insights, the counts of what you copied and pasted, ClipUp records when an item was pasted, what kind it was and how long it was. These records stay in the same file and are never sent anywhere.

3. How your history is protected

The content of your history is encrypted on disk with AES-GCM, using a 256-bit key that ClipUp creates the first time it runs. The key is stored in your device’s Keychain, is marked as never syncing to iCloud Keychain, and does not leave the device. Encrypted fields include the text and data you copied, titles, previews, link images, file paths, recognized text, and the names of your collections and smart collections.

Some details are stored without encryption so ClipUp can sort and organize your history quickly: an item’s kind, size and dates, which app it came from, your device’s name, pin positions and assigned shortcuts. None of these contain what you copied.

The search index is built in memory each time ClipUp starts and is never written to disk. Items you lock as sensitive are left out of it entirely. ClipUp asks the database to overwrite deleted content rather than leave it behind, and keeps temporary data in memory.

If the key is lost, for example because the Keychain item was deleted or the file was moved to another Mac, the history cannot be read by anyone, including ClipUp. On a Mac, ClipUp offers to set the unreadable file aside and start a new history.

4. What ClipUp leaves out

Some things you copy should never be kept. With its default settings, ClipUp does not save:

• Anything an app marks as concealed or temporary. This is how password managers and many other apps mark passwords and one-time codes.
• Copies from well-known password managers, which are recognized from the start.
• Copies from Keychain Access and Passwords, which are on the ignored list from the start, and from any other app you add to it.
• Text that looks like a private key, an access key or an API token. You can choose to keep such items locked instead.
• Anything you copy while recording is paused, or the single copy you asked ClipUp to ignore.
• Items larger than 64 MB.

ClipUp also marks the items it writes to the clipboard itself, so they are not saved a second time.

5. Keeping and deleting your history

On a Mac you choose how long history is kept, from a day to forever (a month to begin with), and how much space it may use, from 250 MB to unlimited (1 GB to begin with). Older items are removed automatically. Pinned items are kept until you remove them.

You can lock any item as sensitive. Locked items are hidden until you unlock them with Touch ID or your password, are left out of search, and can be set to delete themselves after ten minutes, an hour, a day or a week. When a locked item is pasted, ClipUp clears it from the clipboard again after 90 seconds. You can also ask for Touch ID whenever your Mac has been locked.

You can delete any item at any time, or erase your whole history in Settings. Erasing removes everything that isn’t pinned. Uninstalling ClipUp and deleting its folder removes the history file; the key can be removed from Keychain Access.

On iPhone and iPad you can delete items or erase your history in Settings. Automatic removal by age and size currently applies on the Mac.

6. When ClipUp goes online

ClipUp has no server of its own, sends no analytics and includes no third-party tracking or crash-reporting code. It connects to the internet in three situations only.

Link previews

When you copy a link, ClipUp can show the page’s title, icon and picture. To do this it uses Apple’s LinkPresentation framework to request the page from the website, just as Safari or Messages would when showing a preview. The website sees an ordinary request for its page, including your IP address, and nothing else from ClipUp. The preview is stored, encrypted, with the item.

On a Mac, link previews are on to begin with and can be turned off in Settings. Because a preview loads the page, some single-use links, such as sign-in or password-reset links, may be used up; turn previews off if you copy such links often. On iPhone and iPad, a preview is fetched when you open a link’s details.

Update checks

The Mac version downloaded from this website checks for new versions using Sparkle, an open-source updater. About every six hours it downloads a small update list from GitHub, where our releases are published. Like any web request it includes your IP address, and it names the app and its version; it carries no other information about you or your history. You can turn automatic checks off in Settings. GitHub’s own privacy statement covers what GitHub does with requests to its servers.

The Mac App Store version does not include Sparkle. It is updated by the App Store, under Apple’s terms and privacy policy.

The Erase model

Erase, in the Mac image editor, fills in whatever you paint over using LaMa, an open-source image model. The model isn’t included with the app. The first time you open Erase, ClipUp downloads it (about 217 MB) from a fixed version published on Hugging Face, checks every file against a known fingerprint (SHA-256) so a damaged or altered file is rejected, and keeps it in ClipUp’s folder on your Mac. You can cancel the download, and remove the model again in Settings › History.

The download is an ordinary request for public files, so Hugging Face sees your IP address and that the files were requested. Your images are never uploaded: erasing runs entirely on your Mac.

No syncing, for now

ClipUp does not currently sync your history between devices. If we add syncing in the future, it will be optional, it will use your own iCloud account rather than a server of ours, and we will update this policy before it is released.

7. Work done on your device

ClipUp recognizes text in images with Apple’s Vision framework, so search can find the words in a screenshot. It sorts copies into text, links, code, colors and so on with rules that run on your device, spots secrets with pattern matching, and can lift the subject of an image off its background or erase part of it with the model described above. All of this happens on your device. None of it is sent to us or to anyone else, and none of it uses an online AI service.

8. Permissions ClipUp asks for

• Accessibility (Mac). Lets ClipUp paste straight into the app you were using by sending ⌘V, and lets Paste Stack react to ⌘V and ⌥⌘V while its panel is open. ClipUp does not read what you type. Without this permission, ClipUp copies the item and you paste it yourself.
• Keychain. Stores the key that encrypts your history.
• Touch ID or your password. Unlocks sensitive items, handled entirely by macOS or iOS. ClipUp never sees your fingerprint or password.
• Open at login (Mac). Optional, so ClipUp is ready when you start your Mac.
• Screen capture (Mac). Only when you use the screenshot tool, which uses the system’s own screenshot command.

9. iPhone and iPad

iOS asks your permission before ClipUp reads what another app copied. ClipUp reads the clipboard only when you open the app or switch to the ClipUp keyboard, and you can choose to allow it every time in Settings.

The ClipUp keyboard asks for Full Access only so it can read the history the app keeps on your device and save what you copy. It does not record the keys you press, it does not connect to the internet, and it does not save anything that would be locked as sensitive.

The share extension saves what you share to ClipUp straight into your history on the device. Shortcuts actions such as Create Item and Get Latest Item work on your device and only when you run them.

10. This website

This website does not use cookies, analytics or tracking scripts, and does not ask for any personal information. Its fonts are served from the same place as the site. The company that hosts the site may keep standard server logs, such as IP addresses and the pages requested, for security and reliability. [Name the hosting provider once the site has one]

11. Children

ClipUp is a general-purpose utility and is not directed at children. Because we collect no personal information from anyone, we do not knowingly collect information from children.

12. Your rights

Depending on where you live, laws such as the GDPR or the CCPA give you rights to access, correct, delete or move personal information a company holds about you. We hold none: your history and settings exist only on your devices, where you can view, export by copying, and delete them yourself at any time. If you contact us by email, we use your message and address only to reply, and you can ask us to delete them.

13. Changes to this policy

If ClipUp starts handling information differently, we will update this page and change the date at the top before the new version is released. Significant changes will also be noted in the release notes.

14. Contact

Questions about privacy are welcome at [support email address], or through the support page.