Privacy

Keepout stores notes locally. Optional cloud AI sends the prompt and context you choose.

Your choices

Using Keepout's local vault does not require a Keepout account. Keepout does not sell your notes or use them for advertising. Optional online features contact the services you connect, as described below.

Local storage and encryption

Notes and attachments are encrypted locally using platform-specific vault formats. Apple apps use CryptoKit AES-256-GCM and Keychain-managed keys. Android vault storage is protected by Android Keystore keys; Android Cloudflare OAuth access and refresh tokens remain in that encrypted vault, not in preferences or saved UI state.

Local AI

Apple Foundation Models and Natural Language embeddings run on-device. Models installed for on-device inference also process prompts locally. Online AI is used only after you explicitly select a cloud provider; unavailable local AI does not silently fall back to it.

Optional Cloudflare sign-in and online AI

If you choose Sign in with Cloudflare, Keepout opens Cloudflare's authorization flow and requests permission to discover your account and AI Gateway choices, run AI requests, and create a gateway when you explicitly confirm that action. You can disconnect in Keepout Settings or revoke access in Cloudflare. When you select Cloudflare AI Gateway and an upstream model provider, Keepout sends the prompt and any note or file context you selected to Cloudflare and that provider for the request. Gateway requests include headers that ask for request logging and caching to be disabled; those headers are not a blanket guarantee about Cloudflare's or an upstream provider's handling of data. Their own privacy policies apply to the information they process.

Optional encrypted note and clipboard sync

When you pair devices and enable sync, Keepout sends encrypted note snapshots to a Harborline-operated relay on Cloudflare. The decryption key stays with your paired devices. Clipboard sync is a separate opt-in: the relay retains only the latest encrypted text item for ten minutes, without clipboard history. Plaintext clipboard content is not logged or stored by the relay. Choosing Save as note saves that text in your encrypted notes; otherwise clipboard text remains temporary. Device preferences and replay receipts are encrypted locally. The relay processes network addresses and authentication metadata needed to serve requests and limit abuse. Device clipboard access follows the operating system: Mac captures new copies while unlocked, Android requires focus or an explicit Paste/Share action, and iOS uses an explicit Paste action to send. Mobile devices receive while Keepout is active and unlocked.

Other optional connections

Keepout also uses the network when you explicitly enable another integration, sharing or sync workflow, or web destination. Information you submit to those services is handled under their own terms and privacy practices.

Contact

Email help@pdx.software. Do not attach private notes, spoken text, API keys, or Keychain exports.