Planty: Clipboard & Screenshot Privacy Policy

Planty: Clipboard & Screenshot is engineered by sunson with a strict privacy-by-design architecture. All clipboard clippings, captured screenshots, quick scratchpad notes, custom folders, and search indexes remain strictly on your local Mac. Planty does not maintain user accounts, cloud databases, or remote telemetry servers. Your personal clippings and data never leave your device.

When operating on macOS, Planty processes the following information strictly on your local disk inside its sandboxed container directory (`~/Library/Application Support/planty/`): • Clipboard History: Text snippets, formatted code, URLs, HEX/RGB colors, file references, and image clippings that you copy to the macOS system pasteboard. • Screenshots (Optional): Newly captured screenshots detected within your designated screenshot directory (e.g. Desktop) via security-scoped bookmarks. • Quick Notes: Short notes authored directly by you inside Planty's menu bar popover. • App Preferences: Customization settings such as active theme, keyboard shortcuts, menu bar icon style, auto-cleanup intervals, and excluded applications. All records are stored locally in an on-device SQLite database (`history.sqlite`), accompanied by local image files (`images/`) and an ephemeral disk cache for web previews (`web_cache/`).

Planty is built to safeguard your sensitive credentials and passwords. It actively inspects pasteboard metadata using an automated filter (`PasteboardFilter.swift`) and automatically discards: • Any content flagged with standard concealment or transient markers, including `org.nspasteboard.ConcealedType`, `org.nspasteboard.TransientType`, `org.nspasteboard.AutoGeneratedType`, and `com.agilebits.onepassword`. • Password managers and credential vaults, including 1Password, Bitwarden, Apple Passwords / Keychain, KeePassXC, Strongbox, and Enpass. • User-Defined Excluded Applications: You can specify custom applications in Settings › Privacy to be permanently excluded from clipboard tracking.

Planty operates strictly within Apple's App Sandbox (`ENABLE_APP_SANDBOX = YES`), ensuring it cannot access files, hardware, or system capabilities without your explicit consent: • Accessibility Trust (`AXIsProcessTrusted`): Used solely to simulate the standard `⌘V` keystroke via macOS Core Graphics (`CGEventPost`) to paste your selected clipping directly into your active application upon user selection. Planty does NOT monitor, record, or intercept keyboard typing, and contains zero event tap keyloggers. If Accessibility is denied, Planty continues to work seamlessly by copying the item to the pasteboard so you can press `⌘V` manually. • User-Selected File & Folder Access: Requested when you choose a screenshots folder via macOS `NSOpenPanel`. Planty receives a security-scoped bookmark allowing it to read new screen captures in that specific folder and, if enabled in settings, move used captures to the Trash. Planty cannot access any other files or directories on your Mac. • Outgoing Network Client: Used exclusively for web metadata previews (see Section 5).

Planty's sandboxed entitlement includes `com.apple.security.network.client` for a single, transparent feature: When you copy a public web link (`http://` or `https://`), Planty's local metadata cache (`WebMetadataCache.swift`) can perform an ephemeral direct HTTP/HTTPS GET request to the destination website using Apple's native `LPMetadataProvider` and `URLSession` to retrieve open-graph titles, domain icons, and favicons. • These network requests occur directly and ephemerally between your Mac and the target website. • Zero data, user identifiers, or clipboard contents are transmitted to sunson.dev or any intermediary servers. • Fetched titles and favicons are stored in your local cache directory (`~/Library/Application Support/planty/web_cache/`) and are purged automatically during routine memory management.

Upgrades to Planty Lifetime Pro are handled natively through Apple's StoreKit 2 API. • All payment transactions, invoicing, and receipt validation are processed directly by Apple Inc. via your Apple Account. • Planty does not collect, receive, or store credit card numbers, billing addresses, banking credentials, or personal payment details.

Planty does not contain any third-party analytics libraries, advertising trackers, crash-reporting SDKs, or behavioral monitoring tools (such as Google Analytics, Firebase, Sentry, Mixpanel, or Meta SDKs). Diagnostic messages generated by the app utilize Apple's native unified logging framework (`os.Logger`) and remain strictly local on your Mac.

You maintain total ownership and control over your clipboard history: • Instant Deletion: You can remove any individual text or image clipping at any time by pressing Delete (`⌫`) or clicking the Trash icon. • Scheduled Auto-Cleanup: In Settings, you can configure Planty to automatically prune unpinned items older than 7, 14, 30, or 90 days. • Complete History Wipe: You can purge your entire clipboard history and image database instantly via the "Clear All History" command in Settings. • Application Removal: Deleting Planty and clearing `~/Library/Application Support/planty/` permanently and irrecoverably removes all stored data from your Mac.

Planty does not collect, store, or transmit personal data from anyone, including children under the age of 13.

If our privacy practices or macOS platform capabilities change in future releases, updates will be reflected on this page with an updated revision date. If you have any questions or feedback regarding privacy or data isolation in Planty, please contact us: • Developer: sunson (Komsan J.) • Email: [email protected] • Website: https://sunson.dev/product/planty/