Privacy Policy
Privacy summary
CopyLion stores your Text-Snippets, Collections, and final response on your device by default. You can use its local features without an account. When you choose account features or encrypted sync, account information and service metadata are processed online. Your synced text and Collection titles are encrypted on your device before upload.
CopyLion does not monitor your clipboard in the background, sell your personal data, use advertising or behavior analytics SDKs, or send your text to an AI service.
Information you choose to add
CopyLion stores text you create, paste, import, or explicitly share with it, together with Collection titles, ordering, Favorites, and the final response you compose. Clipboard, Share Sheet, and Shortcuts imports happen when you choose to pass content to CopyLion.
When you choose an image for text recognition on iPhone, Apple Vision recognizes text on the device. CopyLion does not upload the source image for recognition. Extracted text becomes a Text-Snippet only as part of the import you choose. If you then sync that text, it is encrypted like your other Text-Snippets.
In the Chrome extension, you can explicitly save selected webpage text or a selected link through the right-click menu. CopyLion does not scan pages or collect browsing history in the background.
When you choose an image for text recognition in Chrome, the bundled Tesseract OCR engine and HEIC/HEIF decoder process it locally in your browser. English and German language data, workers and WebAssembly are included with the extension; the source image is not uploaded for recognition. Review the recognized text before adding it as a Text-Snippet. Text you later choose to sync is encrypted before upload.
Optional accounts and authentication
When you sign in by email, Supabase processes your email address, an assigned account identifier, authentication/session records, and the information needed to issue and verify sign-in codes. Resend, the email-delivery service, processes the recipient address, sign-in email, and delivery information. These records are used to authenticate you and operate and secure your account; they are not used by CopyLion for marketing.
Connecting a device through an authorized pairing invitation associates that device with the same account and encrypted vault. Signing in alone does not give a new device the keys to read your encrypted content.
Encrypted sync and visible metadata
If you enable sync, the CopyLion relay hosted on Supabase stores encrypted versions of your Text-Snippets, Collection titles, final response, and related content. Content keys are held by your authorized devices; recovery and device-key material sent to the service is protected in encrypted key envelopes. The relay is not supplied the plaintext content keys needed to decrypt your text.
Encryption does not hide all service metadata. The service processes account, vault, device, record, and revision identifiers; record types and parent relationships; public cryptographic keys and signatures; encrypted key envelopes; payload sizes; sync cursors and timestamps; device authorization/revocation status; pairing/recovery state; and deletion markers. This information allows devices to synchronize, resolve changes, and manage access. It can be linked to your account.
Keep your recovery kit and authorized devices secure. We cannot restore readable content from an encrypted vault without the required keys. Content you explicitly export or share is readable by the destination you choose unless you select an encrypted export.
Purchases
Apple handles App Store payments. CopyLion does not receive your payment card details. StoreKit supplies verified transaction information to unlock purchased features locally.
If you are signed in, CopyLion can submit Apple-signed transaction information to the account service to verify eligible access. The service processes your account identifier and purchase information such as product and transaction identifiers, purchase/signing dates, revocation status, and a purchase-to-account token. This is used for entitlement verification, restoration on authorized devices, and preventing duplicate or fraudulent purchase claims.
Technical and support information
Network connections to authentication and sync infrastructure expose technical information such as IP address, request time/path, response status, and client information. Infrastructure providers may retain service, authentication, security, and error logs, including account identifiers where present. CopyLion uses operational information to provide the service, investigate failures, and prevent abuse; it does not use it to profile your behavior for advertising. Gateway request logs also retain IP-derived country and city information for security and diagnostics.
If you contact support, we process your email address and the information you include to answer your request. Do not send recovery keys or content you do not want us to read.
Service providers and disclosures
Supabase supplies account authentication, the encrypted relay, database hosting, and associated infrastructure. Resend sends authentication emails. Apple provides App Store purchases and platform services. Our public support and privacy website is hosted on GitHub Pages; visits to that website are also subject to GitHub's handling of technical access data.
Providers receive the information necessary to perform their services. Encrypted sync content is stored by the infrastructure provider, but is not supplied as plaintext text. Your account information and operational metadata are separate from that encryption. We may disclose information where necessary to comply with applicable law or protect the service from abuse. We do not sell personal data or share it for cross-app targeted advertising.
Processing location
The primary CopyLion database is configured in Frankfurt, Germany. Resend routes authentication emails through its configured Ireland sending region, but stores email content, delivery logs, and related customer records in the United States. Other provider and subprocessor operations may also occur outside the European Union. The providers' data-processing terms include Standard Contractual Clauses for applicable international transfers. Contact us for a copy or information about these safeguards.
Retention and deletion
Local content remains on your device until you delete it or remove the local copy. Deleting content in the app removes it from the active view. With sync enabled, deletion markers are propagated to other authorized devices; encrypted prior revisions and change records can remain in the vault. Signing out stops account access on that device and lets you keep or remove its local content; signing out does not delete the account or its server vault.
You can request account deletion in Settings under the account controls. A recent sign-in is required. The process removes the account's encrypted vault and related active database records, then deletes the Supabase authentication account. A durable background job retries an unavailable authentication deletion; the account cannot create another vault while deletion is pending. If the app reports a pending deletion, the request remains queued. Contact us if it does not complete. Local copies on other devices and exports you created are not remotely erased.
To prevent another account from claiming the same lifetime purchase, we retain the original transaction identifier, product identifier, claim date, and a closed-claim flag for as long as that purchase can confer access. The former account association is removed; no hash of its account identifier is needed for the closed flag. Pending deletion jobs retain the account identifier only until authentication deletion completes. The completed job then has no account identifier and is removed after seven days. Apple notification deduplication records are removed after seven days; purchase linkage in those audit records is cleared when the account is deleted. Expired pairing invitations, pairing sessions, and recovery challenges are removed during scheduled maintenance.
Provider retention is separate from account deletion. Supabase's current Free-plan API/database log retention is one day and its external Auth audit-log window is one hour; these windows do not define every internal provider record or an independently stored database audit copy. Resend retains email and log data for 30 days on the current Free plan, with backups persisting for seven days. Those email records can remain after deleting a CopyLion account. Resend's separate 90-day deletion provision applies if we terminate our Resend provider account, not when an individual deletes a CopyLion account. Support correspondence is kept while resolving your request and necessary follow-up, then removed unless a specific dispute or legal obligation requires retention.
Removing the app is separate from deleting the account. Device backups, system credential storage, other authorized devices, and copies you export may retain information under their own settings. Use the account-deletion controls before uninstalling if you also want the server account and vault removed.
Your choices and rights
You can use CopyLion locally, choose whether to sign in and enable sync, export your content, manage authorized devices, sign out, and request account deletion. Contact markus.untch@gmail.com to ask about access, correction, deletion, portability, restriction, or objection to processing of your personal information. Rights and permitted retention exceptions depend on the law that applies to you. We may need to verify your identity before acting on an account request.
Where European data protection law applies, account authentication, delivery of sign-in emails, encrypted sync, and purchase-entitlement processing are necessary to provide the features you request (performance of a contract, Article 6(1)(b) GDPR). Security, operational troubleshooting, limited deletion confirmation, and prevention of repeated purchase claims serve our legitimate interest in protecting the service (Article 6(1)(f) GDPR). Where applicable, processing to meet a specific legal obligation relies on Article 6(1)(c). You may object to processing based on legitimate interests and complain to your competent data protection authority. Account information is necessary for account features, but you can use local features without creating an account.
Children
CopyLion is a general utility and is not designed specifically for children. If you believe a child has provided personal information through an online CopyLion account, contact us so we can review the account and respond as required by applicable law.
Changes and contact
We may update this policy when the app or its processing practices change. The published policy will show its updated effective date.
Markus Untch is responsible for CopyLion. For privacy and support requests, email markus.untch@gmail.com.