Privacy Policy

1. Who is responsible

The controller for any personal data processed in connection with Copyo is:

Controller

Rasoul Miri — sole trader (enskild firma), Stockholm, Sweden

Address

Hammarby allé 48, 120 61 Stockholm, Sweden

Email

support@copyo.se

There is no data protection officer; a sole trader of this size is not required to appoint one. Write to the address above about anything on this page.

2. What Copyo processes, and where it is kept

• Clipboard items you copy — text, rich text, links, colours, images, references to files — and your shelves: in the app's own sandbox container on your Mac, ~/Library/Containers/com.copyo/. Only you, on that Mac.
• Settings — retention period, ignore list, shortcuts, panel size, pause state: the same container, per Mac. Never synced, never transmitted.
• The same items and shelves, only if you turn iCloud sync on: the private CloudKit database of your own iCloud account (container iCloud.com.copyo). Apple hosts it under your account; the developer has no access to it, no credentials for it, and no way to read it.
• The date your 30-day trial started: your Mac's preferences, mirrored to your iCloud key-value store so that reinstalling does not restart the trial. The developer never sees it.
• Your purchase: in Apple's systems. Copyo reads only the StoreKit entitlement — "this Apple Account owns this product".

Copyo has no account, no login and no user profile. It never asks for your name, your email address, or any identifier.

Clipboard content is whatever you happen to copy, so it can contain personal data. Copyo does not inspect it, classify it, or send it anywhere — it stores it for you and hands it back when you paste. What you copy is your decision.

What Copyo deliberately does not capture

• Content flagged confidential by the app that copied it — password managers do this — while Ignore confidential content is on (default: on).
• Content flagged transient or auto-generated, while Ignore transient content is on (default: on).
• Anything copied while Copyo is paused, or copied from an app on your Ignore Applications list.

3. Purposes and legal bases

• Storing clipboard items and shelves locally — to provide the clipboard history you installed the app for. Legal basis: performance of the contract, GDPR Art. 6(1)(b). The data never leaves your device, so nothing is transferred to us.
• iCloud sync, when you enable it — to carry your history to your other Macs. Legal basis: your consent, Art. 6(1)(a), given by switching the setting on and withdrawn by switching it off.
• Link-preview metadata, when you enable it — to show a title and preview for a URL you copied, or for the page you copied text from. Legal basis: your consent, Art. 6(1)(a).
• The StoreKit entitlement and the trial start date — to know whether the app is unlocked, and to stop a reinstall restarting the trial. Legal basis: performance of the contract, Art. 6(1)(b), and our legitimate interest in preventing repeated trials, Art. 6(1)(f).
• An email you send to support — to answer you. Legal basis: our legitimate interest in supporting customers, Art. 6(1)(f), or the contract where your message is about a purchase.

There is no profiling and no automated decision-making with legal effects.

4. What the developer collects: nothing

Copyo contains no analytics, no crash reporting, no advertising SDK, no attribution SDK, and no third-party SDK of any kind. There is no server of ours for the app to talk to. Nothing about your usage, your device or your clipboard is sent to us.

This matches the app's App Store privacy declaration, which is Data Not Collected.

The only personal data we ever hold is whatever you choose to put in an email to support.

5. When the app makes a network request

Copyo goes online in exactly two situations, both of which you control:

1. iCloud sync (Settings ▸ General ▸ iCloud sync, off by default). Your history and shelves are copied to the private CloudKit database of your own iCloud account. Items captured before you switched sync on are never uploaded — only items captured while sync is on. Switching sync off stops further uploads; items already in your iCloud stay there until you delete them.
2. Link previews (Settings ▸ Privacy ▸ Generate link previews). When this setting is on, Copyo fetches a page to read its title and preview metadata in two cases: for a URL you copied, when its card is first shown in the panel (which can be later than the copy, and includes older and synced cards), and for text you copied in a browser that records where the text came from, the page it came from. Only public web addresses are requested, never local or private-network ones, and the result is kept on your Mac so the page is not fetched again on every view. The request goes to the third-party website concerned, and nowhere else. That site sees the request as it would see a browser visit — including your IP address — and its own privacy policy applies to it. Nothing about you or the rest of your clipboard is sent along. Turn the setting off and no such request is ever made.

Copyo does not run a listening service and has no login.

6. Third parties

• Apple. Apple distributes the app, is the seller of record for every purchase, processes all payment data, and hosts iCloud. For your iCloud data, Apple acts as your service provider under Apple's own terms. For purchases, Apple is the seller and Apple's privacy policy applies. We never receive your payment details, card number or billing address; the only purchase records we can see are the transaction records and reports in App Store Connect.
• Websites you copied links or text from, and only while link previews are on — see section 5.
• The host of this website — see section 10.

No data is sold, shared for advertising, or passed to anyone else. We make no international transfer of personal data on our own account; where Apple transfers data outside the EEA in running iCloud or the App Store, Apple's own safeguards apply.

7. Retention and deletion

Retention is entirely under your control. Copyo keeps history for the period you choose in Settings — a day, a week, a month, a year, or forever — and deletes older items automatically.

To delete everything:

1. Erase History — menu-bar icon ▸ Erase History…, or ⌘⇧⌫ in the panel. Deletes the clipboard history permanently. With iCloud sync on, it removes the history from every Mac signed into that account. Shelves are unaffected and can be deleted individually.
2. Uninstall Copyo — drag it to the Trash. macOS removes the app's container and the local database with it.
3. Remove the iCloud copy — either erase history before uninstalling while sync is still on, or delete the app's iCloud data afterwards in System Settings ▸ Apple Account ▸ iCloud ▸ Manage Account Storage.

We hold nothing to delete. Support emails are kept only as long as they are needed to deal with your question.

8. Your rights

Under the GDPR you have the rights of access, rectification, erasure, restriction, portability and objection, and the right to withdraw consent at any time without affecting processing already carried out.

For the app itself you exercise those rights directly, without asking anyone: the data is on your Mac and in your iCloud. You can read it, copy it back out, correct it in the item editor, and delete it. Consent for the two optional features is withdrawn by turning the setting off.

For anything we do hold — essentially your correspondence — write to support@copyo.se. You will get an answer within one month.

If you think your data has been mishandled you may complain to a supervisory authority. In Sweden that is Integritetsskyddsmyndigheten (IMY). You may also complain to the authority where you live or work.

9. Children

Copyo is a productivity tool for general audiences. It is not directed at children, and we do not knowingly process data about anyone under 13 — or under the applicable digital-consent age, which is 13 to 16 depending on the EU country. The app has no sign-up, collects no data, and shows no advertising.

10. Website

The Copyo website at copyo.se is plain static HTML.

• No cookies. The site sets none, of any kind — so there is no consent banner to click.
• No analytics, no trackers, no third-party requests. Every icon is inline SVG and the type is the system font stack, so nothing is fetched from anywhere else.
• Hosting logs. The company hosting this site (Hetzner Online GmbH, Germany, on a server in Helsinki, Finland) may keep standard server logs — IP address, time, page requested, user agent — for security and to run the service. Those logs are the host's, under the host's own privacy terms; we do not analyse them or combine them with anything else.
• Links out to the App Store, to Apple's pages and to reportaproblem.apple.com take you to Apple, where Apple's privacy policy applies.

11. Security

• App Sandbox. Copyo runs inside the macOS App Sandbox. Its database lives in its own container, which other applications cannot read — and Copyo cannot read theirs.
• Files you copied. Copyo reaches a file only through the security-scoped bookmark macOS hands it at copy time. It has no general access to your disk, and requests no permission for the camera, microphone, contacts, calendars, photos, location, or your Documents, Desktop and Downloads folders.
• Accessibility. If you grant it, this permission is used for one thing: simulating a ⌘V keystroke so an item pastes into the app you came from. It is never used to read, log or transmit what you do in other applications, and the app works without it — it puts the item on your clipboard and asks you to press ⌘V yourself.
• Screen sharing. Settings ▸ Privacy ▸ "Show during screen sharing", turned off, hides the panel and previews from screen recorders and screen-sharing sessions.
• At rest. Data on your Mac has whatever protection your Mac has — turn on FileVault. Data in your iCloud is protected by Apple under your Apple Account and its security settings.
• Nothing central. There is no server and no account, so there is nothing central to breach.

A clipboard history is readable by whoever is sitting at an unlocked Mac. Pause, the ignore list, the confidential-content filter and the screen-sharing switch exist for exactly that reason.

12. Changes to this policy

If this policy changes, the new version is published at this same URL with a new effective date, and a change that materially affects you is noted in the app's release notes. The version in force is the one published here on the day you use the app.

13. Contact

↑ Back to top