Privacy Policy

ClipCard: Paste Keyboard

Last updated: September 2026

Introduction

This Privacy Policy describes how ClipCard: Paste Keyboard ("ClipCard", "we", "our", or "us") handles information when you use our iOS app and its secure paste keyboard.

The short version: the app collects nothing. It has no analytics, no crash reporting service, no advertising identifier, no user account and no server of ours. It contains no networking code at all, so there is no data to send and nothing for you to opt out of.

Data Storage

ClipCard is designed with privacy as a core principle. Your sensitive data (card numbers, crypto wallets, recovery phrases, 2FA secrets, phone numbers, URLs and text) is stored:

  • Locally on your device using iOS Core Data with complete file protection, which makes the database unreadable while the device is locked
  • In the private database of your own iCloud account, if you enable iCloud sync
  • CVV codes, in the iOS Keychain only, restricted to that single device and never synced

We do not have access to your data. We cannot read, decrypt, or retrieve your stored information.

Information We Collect

What We DO NOT Collect

  • Your stored cards, wallets, phrases or any other saved data
  • Credit card numbers or financial information
  • Cryptocurrency wallet addresses or recovery phrases
  • Biometric data (Face ID/Touch ID is processed entirely by iOS)
  • Images captured by the camera scanner
  • Usage analytics, feature telemetry or crash reports
  • Device identifiers, advertising identifiers or any profile of you

What We Collect

Nothing. There is no analytics or telemetry code in the app. If you write to us for support, we obviously hold the email you chose to send, and nothing beyond it.

Third-Party Code

The app depends on one external library, AnyFormatKit, which formats text as you type it. It runs entirely on your device and transmits nothing. There is no advertising SDK, no analytics SDK and no crash reporting SDK in the app.

The ClipCard Keyboard

The keyboard is an iOS extension, and it is deliberately built with less access than the app itself:

  • It has no network access. The extension declares Full Access as off, so iOS blocks it from the network entirely. You can confirm this in iOS Settings under General, Keyboard, Keyboards, ClipCard: there is no Full Access switch to turn on
  • It does not use the clipboard. Text is inserted straight into the field you are typing in, so nothing is left behind for another app to read
  • It is read-only. It can insert text and nothing else. It cannot create, edit or delete anything in your vault
  • It only sees what you allow. It reads an AES-256-GCM encrypted snapshot containing only the clips you switched on, stored in a shared App Group on your device
  • Suggestions never see your secrets. The on-device suggestion engine receives only the title and type of a clip. The data structure it is given has no field for the text at all
  • Some data never reaches it. Recovery phrases, BIP39 passphrases and 2FA secrets are excluded from the keyboard for every user, on both plans

Camera & Scanning

ClipCard uses your camera to read card numbers with optical character recognition. Images are processed entirely on-device using Apple's Vision framework, are discarded immediately afterwards, and are never transmitted, stored or sent to any server. Expiry dates and CVV codes are not scanned; you type them yourself.

iCloud Sync

If you enable iCloud sync, your data is stored in the private database of your own iCloud account through Apple's CloudKit. Apple encrypts it in transit and at rest, and if you turn on Advanced Data Protection in your iOS settings it becomes end-to-end encrypted, so not even Apple holds the keys. Your data is handled under Apple's terms and privacy policy while it is in iCloud. We never see it, and there is no server of ours involved at any point. You can disable iCloud sync at any time in the app settings.

Biometric Authentication

Face ID and Touch ID are handled entirely by iOS. ClipCard only receives a success/failure response. We never access or store your biometric data. Note that the keyboard extension never invokes Face ID, because iOS does not allow a keyboard to do so: the app authenticates and passes a short-lived encrypted token to the keyboard instead.

Data Security

  • All data encrypted at rest using iOS Data Protection, with complete file protection
  • Biometric or passcode required to open the app
  • The keyboard's snapshot and the optional password-protected backup both use AES-256-GCM
  • No server-side storage and no transmission of your data by us
  • Clipboard copies made inside the app are marked local-only and expire automatically

Purchases

Subscriptions and the lifetime purchase are processed by Apple through the App Store. We never see your payment details. The app checks your entitlement through StoreKit on your device.

Your Rights

You have full control over your data:

  • Delete individual items or all data at any time
  • Export everything to plain JSON, free of charge, on any plan
  • Disable iCloud sync to keep data only on-device
  • Turn the keyboard off, or choose clip by clip what it may see
  • Uninstall the app to remove all local data

Children's Privacy

ClipCard is not intended for children under 13. We do not knowingly collect information from children.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

Contact Us

For questions about this Privacy Policy, contact us at: info@wilderlopezelias.com

← Back to ClipCard