Copyfold Privacy Policy
Last updated: November 6, 2026
Controller: Huseyin Gulsen (sole proprietorship), Istanbul, Türkiye, privacy@copyfold.com.tr ("we").
Summary
- Your clipboard content is processed on your device. If you use sync or teams, it is end-to-end encrypted before it leaves your device; we cannot read it.
- Sensitive values (passwords, card numbers, IBANs, ID numbers, API keys) are detected on your device and, by default, never leave it.
- No advertising, no tracking, no selling of data, no third-party analytics.
Data we process
| Data | When | Why | Legal basis (GDPR) |
|---|---|---|---|
| E-mail address, or the Apple ID identifier and (relay) e-mail from Sign in with Apple | You create an account | Sign-in, account messages | Contract (Art. 6(1)(b)) |
| Device name, platform, push token | You sign in on a device | Device list, sync notifications | Contract |
| Encrypted records and their size/time metadata | You use sync or teams (Pro/Team) | Sync between your devices / team | Contract |
| Your public encryption key | You use sync or teams | Let team members share keys with you | Contract |
| App Store transaction data (product, dates, transaction IDs; not your payment details) | You subscribe | Grant your plan, including team seats | Contract; legal obligations |
| Team membership, roles, invitations, team action log (no content) | You join or manage a team | Team features and security | Contract; legitimate interest (Art. 6(1)(f)) |
| Technical logs (IP address, time, endpoint, error) — never request bodies | Every request | Security, abuse prevention | Legitimate interest; kept 30 days |
Payments are handled by Apple. We never see your card or bank details.
Where data is stored
Servers operated by VeriUp Bulut İnternet Hizmetleri A.Ş. in Istanbul, Türkiye. Apple processes data for Sign in with Apple, push notifications and purchases under its own privacy policy. Sign-in codes are sent through our own mail server in the same data centre.
Retention
Account data is kept while your account exists. Deleted records are removed from the server after sync. When you delete your account (Settings ▸ Account ▸ Delete Account) we delete your account, devices, encrypted records and files within 30 days, except transaction records we must keep by law. Backups roll over within 30 days.
Encryption and recovery
Your encryption key is stored in your iCloud Keychain and as a recovery code you keep. We do not have it. If you lose both, your synced data cannot be recovered.
Your rights
Access, rectification, erasure, restriction, portability, objection, and complaint to a supervisory authority. Contact privacy@copyfold.com.tr. Users in Türkiye: see the Turkish version (KVKK notice).
Children
Copyfold is not directed at children under 13 (16 where required).
Changes
We will announce material changes in the app or on this page.