KeptClipboard content stays under your control
Kept processes clipboard content on your Mac or iPad to save history, identify types, search and display previews, detect some sensitive content, and carry out your copy, drag or share actions. Kept does not operate a developer backend that receives your clipboard history, and the current app contains no advertising or analytics SDK.
Local storage and optional iCloud sync
Kept encrypts saved history on the device using a key held in the device's Keychain. Local-only content and content eligible for synchronization occupy separate encrypted storage partitions. Device history and its device-only key are not a portable history backup; losing the key can make local history unreadable. Do not use Kept as your only copy of important material.
When synchronization is enabled, eligible history and applicable preferences are stored in your private iCloud database. The sync switch is independent on each device. Switching sync off retains local history and does not by itself delete the cloud copy. Copies over 16 MB stay full quality locally and are excluded from synchronization.
Apple provides iCloud and operates its servers. Under standard protection, Apple's protection and account-recovery model applies. With Advanced Data Protection enabled, the CloudKit assets and encrypted fields Kept uses protect synced clipboard content with end-to-end encryption. This does not extend the statement to every item of service metadata. Kept cannot determine ADP status from a successful synchronization; check your status in Apple's settings. See Apple's iCloud security overview and ADP setup instructions.
Sensitive content and exclusions
Kept skips clipboard items marked private. On Mac it also skips copies when secure input is detected and supports ignored apps. iPad does not expose the source application's identity or another app's secure-input state.
Recognized keys and card numbers receive masked previews and remain local by default. You can explicitly allow a sensitive item to sync. Detection cannot identify every secret. Revealing an item lasts until the selection changes; it does not change its classification or synchronization permission.
Optional website requests
Fetch Link Titles is off by default. If you enable it and inspect an eligible link, Kept can contact that website for its title. This exposes the requested URL and network address to the website and involves ordinary network/DNS services. Sensitive and local-only items are excluded unless you separately enable their title requests. Allowing a website request does not authorize iCloud synchronization.
The title client uses a restricted HTTPS transport with public-destination checks and no application cookies or credential authentication. It rejects unsupported requests/responses. Original saved links are preserved. A website request remains a disclosure to that website even when a clipboard item is local-only.
Retention, deletion and current clipboard
Regular history defaults to seven days since last use; sensitive history defaults to 24 hours. Your settings can adjust retention. Reusing an item, including dragging it, resets its retention clock but does not change its original capture position. All pinned history survives automatic expiry and purge controls. You can explicitly delete individual pinned items.
History-purge controls and current-clipboard clearing are separate. You can configure independent regular and sensitive clearing rules. Clearing the current clipboard does not erase saved history. A later unrelated clipboard copy is protected from an earlier Kept clearing timer. On iPad, suspension limits background work; Kept cannot continuously monitor or immediately react to every copy while suspended.
Cloud deletion is synchronized and may not immediately reach an offline device. Minimal encrypted deletion records are retained to prevent an old offline copy from restoring deleted content. When Kept detects a confirmed iCloud sign-out or account change, it removes linked local history on that device; other devices remain independent. Suspension can delay detection. Disabling sync alone is different from signing out and retains history.
Content you send elsewhere
Copying, dragging or sharing an item sends it to the destination you choose. Ordinary eligible clipboard writes may participate in Apple's Universal Clipboard; sensitive/local-only Kept writes are excluded. Destination apps and websites have their own privacy practices. Kept cannot retract content already pasted, shared or copied elsewhere.
Export History lets you save an unencrypted JSON snapshot of this device's saved history and settings after reviewing a disclosure. It includes pinned, sensitive and local-only items with original copy formats. Choosing an online destination can upload those items there. The export does not fetch missing iCloud history. Anyone who can access the file can read its contents; exported copies are not removed by Kept's expiry, purge or sign-out controls.
Website and support messages
The support website is hosted by Cloudflare Pages. Cloudflare processes network request information, such as IP addresses, to deliver and protect the site. The site code contains no analytics, advertising scripts, contact forms or cookies. Hosting-provider processing is separate from Kept's on-device clipboard history. See Cloudflare's privacy policy.
If you email support, BCC Software receives your email address, message and any attachments you choose to send, and uses that information to respond and troubleshoot. The support mailbox uses Google Gmail, so Google processes these communications under its privacy policy. Support messages are separate from Kept's private iCloud history; they are not covered by its history-expiry or purge settings. Please avoid sending clipboard history, keys or other sensitive content. You can contact support about information you previously sent.
Support and changes
Support contact: keptsupport.app@gmail.com. Users should not include clipboard history, keys or sensitive copied content in a support request. Any future change to collection, third-party services or this policy requires a corresponding review and disclosure update.