Effective: October 8, 2026 (revised October 17, 2026 for the Play launch: AI requests go through the ClipKeeper relay — no API keys, no accounts, works out of the box; AI lookup limits are set by plan)
The short version: ClipKeeper keeps your clips, recipes, and lists on your phone. When you use the AI features (movie identification, recipe extraction), the app sends your request through ClipKeeper’s relay service, which forwards it to Google’s Gemini API. The relay also receives a random ID unique to your install so it can enforce fair-use limits (5 AI lookups per day on the Base plan, including the free trial, and 15 per day on Pro). No accounts. No analytics. No ads. Your data is never sold.
Everything you save — movie and trailer clips, recipes (ingredients and steps), collections, and settings — is stored in a database on your device. It is never sent to us, and we have no way to access it.
When you ask ClipKeeper to identify a movie or extract a recipe, the app sends the clip’s caption or link, plus any thumbnail or still images shown on screen, from your phone to ClipKeeper’s relay service (a Cloudflare Worker at clipkeeper-api.bailey644.workers.dev), which forwards the request to Google’s Gemini API and returns the answer. The Gemini API key lives on the relay — it is never on your phone, and you never need to paste or manage any key.
Along with your request, the app sends a random device ID: a random identifier generated on your phone the first time you use an AI feature, stored only on your device. It is not your phone’s hardware ID, advertising ID, or anything linked to your name, email, or identity. It exists for one purpose: fair-use rate limiting.
To identify movies and fetch titles and posters, the app queries free public services directly from your phone: Wikidata, Wikipedia (including Wikimedia Commons), DBpedia, TVMaze, Apple’s iTunes Search, and TikTok’s and YouTube’s embed services. Those services receive only your search query (for example, a movie title or a clip URL), subject to their own privacy policies. No paid movie databases (such as TMDB) are used.
Backups are encrypted files that you export yourself. They are encrypted on your phone (AES-256-CTR + HMAC-SHA256, with the key derived from your passphrase) before the file is written. The file goes wherever you save it; your passphrase never leaves your phone. We cannot read your backups.
Release-date reminders and the weekly nudge are scheduled locally on your phone. No data leaves your device for them.
The system share sheet sends only what you choose, to the app you choose.
ClipKeeper is not directed at children under 13. Because we collect no personal information, there is nothing for a parent to request or delete.
If this policy changes, the new version will be posted here. Continued use of the app after a change means you accept the updated policy.