Privacy: where your screenshot goes

When Kipp analyses a screenshot with AI, the image leaves the device. This article explains that journey in full and separates the data Kipp does not retain from data governed by another provider's own terms.

The data flow has four steps

The screenshot you choose first goes to Kipp's secure cloud service, then to an independent AI provider for analysis. The structured result is validated and returned to your iPhone:

1. The screenshot you choose
2. Kipp's secure cloud processing
3. Independent AI analysis
4. The validated result returning to your iPhone

The full image is sent for analysis. Kipp does not claim to hide sensitive parts of the image for you or to perform the analysis entirely on the device. The rest of your Photos library and the contents of Calendar, Reminders and Contacts are not sent as part of this analysis request.

Explicit consent before the first upload

Before the first AI analysis, Kipp shows a consent screen that explains the selected screenshot is sent in full to an independent provider. It also describes the purpose of processing, Kipp's retention boundary, the provider's separate terms and the possibility that results may be wrong.

You should not send sensitive content or content you do not have the right to have processed by someone else. The AI provider is a separate company with its own data processing terms. Its general privacy text says inputs and uploaded images may be collected and used to develop its services, technology and models. Kipp has not identified a Kipp-specific zero-retention or no-training commitment.

The consent version, provider and acceptance time are stored on the device. The consent version and acceptance time are also held as content-free cloud metadata. You can turn off AI consent in Settings. Existing local results remain, but new analysis stops until you consent again.

What Kipp does not retain permanently

Screenshot bytes exist in server memory only while the analysis request is being processed. Memory references are released when the request ends. Kipp does not write the screenshot to persistent cloud storage and does not keep screenshots, prompts or provider responses in application logs.

Kipp's cloud systems may instead contain content-free metadata associated with an anonymous app identifier, such as subscription entitlement, quota, request state, consent version and acceptance time. Secret keys remain protected, while authentication and app-integrity checks are enforced on requests.

What stays on the device, and what you control

Your library, thumbnails, analysis results, Spaces, search index, settings and action history are stored locally under iOS Data Protection. Existing local results and search can therefore remain available offline. The original screenshot stays in Photos unless you delete it there; Kipp does not remove it automatically.

A model result can still be wrong. An external action involving Calendar, Reminders, Maps, a link, email or a contact does not run until you review the fields and confirm it.

For current retention and deletion details, read the full Privacy Policy. For the product sequence, see How it works.