Your files never leave your Mac. Kepter reads them where they sit and keeps its notes on your Mac. There's no account. 4 small things do go out, for updates, billing, your plan, and anonymous usage counts and crash summaries, and every one of them is listed below.
Kepter reads the files in the folders you choose, in place. It never moves them, never copies them and never uploads them or anything in them. When you press Delete in Kepter, it moves the real file to the macOS Trash, where you can get it back.
Reading happens on your Mac, using Apple's own frameworks: PDFKit for document text, Vision for text in images and scans, Speech for what's said in audio and video, and Apple's on-device models on macOS 26. If your Mac's speech recognizer can't transcribe a language on-device, Kepter skips the transcript rather than sending the audio anywhere.
For each file, Kepter keeps 3 things: a record of what it read (the text, plain-words nicknames, dates, amounts), a thumbnail, and the path back to the original. It never keeps a copy of the file itself.
All of it lives in Kepter's own folder in your user Library, at ~/Library/Containers/app.kepter.keep. The records are encrypted, and the key is in your macOS Keychain. The thumbnails and transcripts are plain files in that same folder, so scrolling stays fast. Nothing in there is your original.
The full accounting is on What Kepter stores.
No sign-in, no password, no profile. The one thing Kepter makes is a random code, held in your keychain on this Mac. Kepter doesn't copy it to your other Macs: to use your plan on another Mac, copy the code from Settings, Storage & Plan, and paste it there under Restore Purchases. Billing sends the code to RevenueCat and to billing.kepter.app, as listed below. It's not tied to your name or your email unless you buy, and then only at the payment processor.
4 things, and none of them carries a file, a filename or anything Kepter read.
kepter.app whether a newer version exists. The request carries the app version and your macOS version. When it finds one, Kepter downloads it and installs it by itself the next time you've stepped away from your Mac for a few minutes. If you don't step away, a note says it's ready to install. Both switches are in Settings, under Privacy & Security: “Check for updates automatically” and “Install updates automatically”. Both are on until you turn them off. Kepter from Setapp makes no update check of its own: Setapp updates it.pay.rev.cat; your email and card go to RevenueCat and Stripe there and never to us.billing.kepter.app, which we run, so the answer comes back inside the app instead of by email.Nothing else in it talks to the internet.
Kepter is free for 30 days, then paid. The trial clock runs on your Mac and needs no card. Payments are handled by RevenueCat and Stripe. Kepter's own systems never see your card.
kepter.app sets no cookies and runs no analytics or tracking scripts. The site is served by Netlify and the download by Cloudflare. Both may log standard request information, such as your IP address, as part of serving the page.
Quit Kepter and drag the app to the Trash. To remove its notes too, delete ~/Library/Containers/app.kepter.keep. Your files are untouched, because Kepter never moved, copied or held them.
If you bought Kepter and want the purchase record gone, email us and we'll delete it on our side and ask RevenueCat to delete theirs.
And we never will. There's remarkably little of it to sell.
Kepter is made by Maltby Ventures LLC. Questions about privacy go to hello@kepter.app.
If this policy changes, we'll post the updated version here with a new date.
Kepter is made by Maltby Ventures LLC.