Privacy Policy
1. Who We Are
ClipSafe is developed and maintained by Crypton Studio (contact: support@cryptonstudio.app). ClipSafe is an Android application that provides encrypted, on-device clipboard management.
2. What Data We Collect
The short answer: none of your personal data.
The detailed answer:
| Category | Collected? | Where it goes |
|---|---|---|
| Clipboard content (text you copy) | NEVER uploaded | Encrypted on your device only |
| Personal identification information | NOT collected | N/A — no account required |
| Device identifiers | NOT collected by us | Google/AdMob may collect (see §5) |
| Location data | NOT collected | N/A |
| Usage analytics | NOT collected by us | Firebase may collect crash data (see §5) |
| Payment information | NOT collected by us | Handled entirely by Google Play |
3. How Clipboard Data Is Handled
When you copy text on your device, ClipSafe's background service detects the new clipboard content using Android's OnPrimaryClipChangedListener. This processing happens entirely on your device:
- Detection: Pattern matching runs locally using regex. No network request is made.
- Encryption: Sensitive clips (OTPs, passwords, card numbers, etc.) are encrypted using AES-256-GCM via Android Keystore before being stored in a local SQLite/Room database.
- Storage: The encrypted database exists only on your device's internal storage, protected by Android's app sandbox.
- Auto-clear: Sensitive content is wiped from the system clipboard after your chosen delay. This happens locally with no network involvement.
- Export (Pro): If you use the backup export feature, the JSON file is saved to your device's Downloads folder. It goes nowhere else.
Your clipboard data is never transmitted to any server — not ours, not anyone else's.
4. Encryption Details
ClipSafe uses the following encryption specification:
- Algorithm: AES-256-GCM (Galois/Counter Mode)
- Key storage: Android Keystore — hardware-backed secure enclave
- Key exposure: Keys are never exported or visible in plaintext
- IV: Unique random 12-byte IV per encryption operation
- Authentication: 128-bit GCM authentication tag
This means even if someone physically extracted your database file, the encrypted clips would be unreadable without the hardware key stored in your device's secure element.
5. Third-Party Services
ClipSafe integrates the following third-party SDKs, which may collect limited data under their own privacy policies:
Google AdMob (Free users only)
Free version displays banner and interstitial ads. AdMob may collect device identifiers and approximate location to serve relevant ads. Pro users see no ads and AdMob SDK remains inactive for ad serving.
Google Privacy Policy →
Firebase Remote Config
Used to remotely configure pricing, ad frequency, and free tier limits. Minimal device metadata may be transmitted to Firebase servers for config delivery.
Firebase Privacy Policy →
Firebase Crashlytics (optional)
If crash reporting is enabled, anonymised crash stack traces may be sent to Firebase. No clipboard content is ever included in crash reports.
Firebase Privacy Policy →
Google Play Billing
In-app purchases are processed by Google Play. We do not receive or store any payment information.
Google Play Privacy Policy →
6. Permissions We Request
- FOREGROUND_SERVICE — Required to run the clipboard monitor reliably in the background.
- READ_CLIPBOARD (implicit via ClipboardManager) — To access clipboard content for detection and storage.
- WRITE_EXTERNAL_STORAGE / MediaStore (Pro, Android <10) — Required for the JSON backup export feature only.
- RECEIVE_BOOT_COMPLETED — To restart the monitoring service when your device reboots.
- USE_BIOMETRIC / USE_FINGERPRINT — For optional biometric unlock of the app.
- INTERNET — Required only for AdMob (free users) and Firebase Remote Config. Never used to transmit clipboard data.
7. Data Retention
All clipboard data is stored locally on your device with no expiration date unless you:
- Delete individual clips from within the app
- Use the "Clear All History" function
- Uninstall the app (which deletes all app data)
We have no ability to delete data on your behalf because we don't have it.
8. Children's Privacy
ClipSafe is not directed at children under 13. We do not knowingly collect any data from children. If you are a parent or guardian and believe your child has provided information through this app, please contact us.
9. Your Rights
Since we hold no personal data on our servers, most traditional data rights (access, erasure, portability) are exercised directly on your device by managing your ClipSafe data within the app or uninstalling it. For questions about third-party data (AdMob, Firebase), refer to Google's privacy tools.
10. Changes to This Policy
We may update this privacy policy from time to time. Changes will be reflected with a new effective date on this page. Material changes will be noted in the app's release notes. Continued use of ClipSafe after changes constitute acceptance of the updated policy.
11. Contact
Questions about this privacy policy? Contact us:
- Email: support@cryptonstudio.app
- Website: clipsafe.app