Built so we couldn't read your clipboard if we tried
Your clipboard sees passwords, addresses and private messages all day. So Clypy encrypts every clip on the device that copied it, and our servers only ever carry what you see on the right.
The full detail, from device keys to pairing, is in how Clypy sync works.
On your devices. Nowhere else.
- Readable
The device you copied on
Encrypted here, with keys held in the OS secure store.
Your network
Ciphertext only. At home, devices talk directly.
Clypy relay
Passes sealed frames along. It holds no keys.
Clypy servers
No stored clipboard history to read or hand over.
- Readable
Your other devices
Decrypted only there, with keys shared at pairing.
Detected secrets stay concealed
Clypy conceals newly detected secrets on sight and leaves them out of search, backups and agent results. They stay concealed on every device they sync to, and revealing one asks you to authenticate first. Mark one This device only and it never leaves the device that copied it.
Copies from password managers, anything your system marks as concealed, and apps you exclude.
Card numbers, IDs, API and auth tokens, sign-in links, credentials, licence keys.
Smart search that never phones home
Search by meaning, text recognition in images and working out what each clip is all run on your hardware. No clip is sent to a model, ours or anyone else's, and all of it works offline.
- Search by meaningLocal embeddings, searched locally
- Text in imagesRead on your device as images arrive
- Clip typesLinks, code, secrets, recognised locally
No product holds nothing. Here's our list.
Privacy claims are only worth something if the exceptions are written down too.
Relay routing metadata
While a frame is in flight: a device's public key, an opaque group tag, the IP address, and the frame's size and timing.
Relay logs
Structured events for keeping the service running: timestamps, device and session ids, error codes.
Purchase records
Pro purchases create receipt and licence records with the payment provider, tied to your purchase email.
- We cannot read your clips because our servers only ever carry ciphertext.
- No Clypy profile or password. Purchases still create receipt and license records with the payment provider.
- On the same network, clips sync device-to-device and skip our servers entirely.
- Files you send between your devices travel only over your local network, encrypted for that pair of devices, and never reach our servers.
- AI runs on your device; clip contents are never sent for processing.
- Configured password-manager sources are ignored; newly detected secrets are concealed on every device they sync to, or kept on one device if you mark them local-only.
- Export or delete everything whenever you want. Deletion is permanent.