Privacy policy
Nine Boxes is a Mac app that stores things you copy so you can paste them later. Because of what it does, it necessarily touches content you care about. This page explains exactly what happens to it.
What stays on your Mac
Everything you save into a box, and everything in your history, is stored on your Mac in an encrypted database. The key is generated on your Mac, stored in your macOS Keychain, and marked so it never leaves the device and is only available while the Mac is unlocked. We do not have a copy of it and cannot produce one.
This includes previews and labels. There is no plaintext copy of your content anywhere in the database.
What we never capture
Password managers mark what they put on the clipboard as concealed. Nine Boxes checks every clipboard change and skips those items entirely. It is never saved, never previewed, never written to disk, and never sent anywhere. The same applies to items marked transient or auto-generated.
You can also exclude specific apps in Preferences. Nothing copied while those apps are in front is captured.
When you turn on syncing
Sync is optional and off by default. If you turn it on, the contents of your boxes are encrypted on your Mac before they are uploaded. We store the encrypted bytes. We cannot read them, and neither can anyone who obtains them from us.
When you use AI features
This is the part where content does leave your Mac, so read it carefully.
Some Nine Boxes features use AI: cleaning up a table, pulling labelled fields out of a receipt, rewriting a snippet, answering a help question. When you explicitly trigger one of those actions, the specific piece of content you selected is sent to Anthropic to be processed. It travels over an encrypted connection through our server, and it is in readable form while it is being processed. That is unavoidable. A model cannot process text it cannot read.
What this means in practice:
- Nothing is ever sent to AI automatically. It happens only when you press the button.
- Only the snippet you acted on is sent. Not your other boxes, not your history, not your files.
- We log that a request happened, its size, and what it cost. We do not log the content.
- Anthropic processes it under their commercial terms and does not use it to train their models.
- If you never use an AI feature, no content ever leaves your Mac.
We say "your saved boxes are encrypted and we cannot read them, and AI actions you explicitly trigger send that snippet to Anthropic for processing." We do not claim to be zero-knowledge, because that would not be true.
Your account
If you create an account, we store your email address so we can tell you when your trial is ending, when a payment fails, and when your subscription changes. That is all your account email is used for. We do not send marketing email unless you separately ask for it.
You can use Nine Boxes without giving us an email at all, including the full 14-day trial.
The notify list
Nine Boxes is not released yet, so the download button on this website asks for an email address instead of giving you a file. If you give it one, we store that address and which page you were on when you gave it.
We use it to send you one email, on the day the app is available. That is the only thing it is for. It is not attached to an account, it is not added to any other list, and there is no second email.
The list is a table in our own database, not a mailing list service. Nothing in the website can read it back: the page can add an address and cannot retrieve one, including your own. Ask us at any time and we will remove you before anything is sent.
Payments
Payments are handled by Stripe, which acts as the merchant of record. Your card details go to Stripe and never touch our servers or the app. We receive a customer identifier, a subscription status, and a renewal date. We do not receive your card number.
Anonymous product analytics
Nine Boxes reports a small number of events so we can see where people get stuck, mainly during install and the permission step. Each event carries a random identifier for the installation, the app version, the macOS version, and a timestamp.
These events contain no content of any kind. Not what you copied, not previews, not labels, not the names of apps you copied from. The random identifier is not connected to your account, and cannot be used to look up who you are.
You can turn this off in Preferences → Privacy. It changes nothing about how the app works.
Crash reports
If you opt in, Nine Boxes sends crash reports so we can fix the bug that caused them. Crash reports are scrubbed before they are sent: anything that looks like clipboard content is removed. This is off unless you turn it on.
Who we share data with
We use these services, and only these:
| Service | What it handles |
|---|---|
| Supabase | Accounts, subscription status, encrypted sync data, anonymous analytics |
| Stripe | Payments, as merchant of record |
| Anthropic | Processing AI actions you trigger |
| Resend | Transactional email about your trial and subscription, and the release announcement |
| Netlify | Hosting nineboxes.app and app updates |
| [Crash reporter] | Crash reports, if you opt in |
We do not sell your data. We have never sold your data. There is no advertising in Nine Boxes and no third-party tracking in the app.
How long we keep things
- Your local boxes and history: on your Mac, under your control, until you delete them. History expires after 7 days by default.
- Encrypted sync data: until you turn off sync or delete your account.
- Account and subscription records: for as long as you have an account, then for the period we are required to keep financial records.
- Anonymous analytics: 12 months, then deleted.
- AI request logs (metadata only, never content): 90 days.
- Notify list addresses: until the release email has been sent, and then we delete them.
Your rights
Email chase@chaseyoursolutions.com and we will:
- tell you what we hold about you
- send you a copy
- correct it
- delete your account and everything associated with it
We aim to respond within 30 days. If you are in the EU, the UK, or California, you have these rights by law and we honour them for everyone regardless of where you live.
You can also wipe everything locally at any time with Panic Wipe, which clears every box, all history, and all on-disk data in under a second.
Children
Nine Boxes is not directed at children under 13 and we do not knowingly collect their information.
Changes
If we change this policy in a way that affects what happens to your content, we will tell you in the app before it takes effect, not after.
Contact
Chase Your Solutions LLC chase@chaseyoursolutions.com
Questions about any of this? Email chase@chaseyoursolutions.com.
Privacy · Terms · Refunds · Subprocessors · Security