Clipo Privacy Policy

Last updated: July 30, 2026

Clipo is a personal notes app that lets you save links, text and files, and automatically organizes them with the help of artificial intelligence. This policy explains what data the app handles and how.

What data we store

• Your notes: the text, links (URLs) and files (PDF, images, audio, text) you choose to save, along with the category, tags and summary generated automatically.
• Secure notes (encrypted vault, Pro Max): if you use the vault, we store only the encrypted result of those notes — we cannot read their title or content. See "Secure notes" below.
• Account: you sign in with Sign in with Apple or with email and password. If you use email, your email address is stored to identify and secure your account. With Sign in with Apple, an identifier links your notes to your account and we don't store your name unless Apple shares it.
• Voice input (optional): if you use dictation or the voice command feature, your device's microphone is used only while it is active. On Apple devices the speech is converted to text by Apple's speech recognition, and only the resulting text is used to search or organize your notes. We do not keep the raw audio.
• Usage & diagnostics: basic analytics and crash reports (Google Firebase Analytics and Crashlytics) to understand app usage and fix bugs. This data is not used to build advertising profiles.
• Advertising (free version only): the free version shows ads. To do so, the ad provider (Google AdMob) may process your device's advertising identifier and basic ad-interaction data — see the "Advertising" section below. Paid plans are ad-free.

How it is used

Your notes are stored privately and only you can see them from your account — unless you explicitly share a note, in which case the people you invite can also see and edit that shared note (see "Shared notes" below). To classify your notes (assign a category, tags and a summary), the relevant content of the note (for example, the link metadata, pasted text or a file's content) is sent to the Anthropic (Claude) artificial intelligence service solely to generate that classification. If you use the AI assistant (available on Pro Max plans), the content of the notes relevant to your request is also sent to Anthropic (Claude) to generate the response —for example, to answer a question, summarize, suggest, or total your notes— and, likewise, only to generate that response. To find the notes relevant to your request, the text of your notes is also sent to Google Cloud Vertex AI to generate the embeddings used for semantic search. In every case we send only the content of the note or your request: we never send your name, email address, account ID or device identifiers to these AI providers. Your conversations with the assistant are stored only on your device (you can delete them from the assistant at any time); we do not store them on our servers. None of this is used for advertising or to train models.

Notes in your secure vault are the exception: they are never sent to any AI provider. They are not classified, they generate no embeddings and the assistant cannot see them — we could not send them even if we wanted to, because we do not have the key to decrypt them. See "Secure notes".

Shared notes

Some plans let you invite other people to a note. When you share a note, the people you invite can view and edit its content, and the note is stored so that all its members can access it. Only the note's owner can invite or remove people, and can revoke access at any time. You should only share content you have the right to share.

Advertising

The free version of Clipo shows ads served by Google AdMob (a Google service). To show and measure ads, AdMob may process your device's advertising identifier (Apple IDFA / Android Advertising ID), coarse device information and ad-interaction data. On iOS, personalized ads and access to the advertising identifier only occur if you grant permission through App Tracking Transparency; if you decline, you still see ads, but non-personalized ones. Paid plans are ad-free. You can learn about Google's ad practices and opt out of personalized ads at policies.google.com/technologies/ads, and on iOS you can manage tracking in Settings → Privacy & Security → Tracking.

Where it is stored

Data is stored in Google Firebase (Firestore and Cloud Storage), which acts as the infrastructure provider. Classification runs in Firebase Cloud Functions, which calls the Anthropic API.

Security & encryption

All communication between the app and our servers is encrypted in transit (HTTPS/TLS). Your regular notes stored in Google Firebase (Firestore and Cloud Storage) are protected by Google's infrastructure security, but are not end-to-end encrypted: technically, we and the infrastructure provider can access their content to operate the service. For information you do not want us to be able to read, Clipo offers secure notes, which are end-to-end encrypted — see the next section.

Secure notes (encrypted vault)

Pro Max plans include a vault for secure notes, designed so that only you can read them.

• End-to-end encryption on your device. A secure note is encrypted on your device (AES-256-GCM) before being sent. Our servers only ever receive and store the encrypted result: an opaque blob.
• We cannot read them. Neither Clipo, nor Google Firebase — which hosts the encrypted data — nor any AI provider can read the title or content of a secure note.
• They are never sent to AI providers. Unlike regular notes, secure notes are not sent to Anthropic (Claude) or to Google Cloud Vertex AI: they are not classified, they generate no embeddings, they are not indexed for search on our servers and the AI assistant cannot see or query them. They are stored separately from the rest of your notes, precisely so that no automatic process can reach them.
• The key never leaves your device. The key that decrypts your secure notes is derived from a vault passphrase that you choose and is kept on your device (protected by biometrics where available). We never receive that passphrase or the key itself.
• If you lose the passphrase, the notes cannot be recovered. If you forget it and do not have your recovery code, nobody can recover those notes — not even us. This is a consequence of the design: we hold no copy of your key. Keep your recovery code somewhere safe.
• What we can see. Even without being able to read the content, our servers do see technical data about each secure note: the account it belongs to, the creation and update dates, the size of the encrypted blob, and the (non-secret) parameters used to derive the key.
• Deletion. You can delete a secure note at any time; it is deleted immediately and does not go through the trash. If you delete your account, your secure notes and your vault are removed from our servers along with the rest of your data.
• Not shared. Secure notes cannot be shared with other people.

Third parties

• Google Firebase — authentication, database, file storage, plus Analytics and Crashlytics for anonymous usage analytics and crash diagnostics.
• Google AdMob — ads shown in the free version (paid plans are ad-free).
• Apple — Sign in with Apple and, if you use dictation, on-device speech recognition.
• Anthropic (Claude) — automatic classification of note content, and the AI assistant that answers questions and reasons over your notes (Pro Max). Secure notes are never sent.
• Google Cloud Vertex AI — generates the text embeddings used for the assistant's semantic search (Pro Max). It runs in the same Google Cloud project as our backend. Secure notes are never sent.

We do not sell your data. The free version shows ads through Google AdMob; paid plans are ad-free. We do not track you across other companies' apps and websites for advertising without your consent.

Children

Clipo is not directed to children under 13 (or the minimum age required in your country). We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.

Deleting your data

You can delete any note from the app. You can also delete your entire account from the profile menu (person icon → "Delete account"): this permanently removes all your notes, files, your secure notes and your vault, and your account.

Contact

For any privacy question: rtga.apps@gmail.com

Terms of Use