The Kopya app does not collect, transmit, store, or sell any personal information. There is no telemetry, no analytics, no crash reporting, no advertising, and no account to create. This website counts visits with Google Analytics, and you can decline that.
The app: what it collects
Nothing. Kopya has no backend. We do not operate a server that receives data from the app, and through the app we have no way to identify you, contact you, or observe how you use it.
Your files
Kopya copies files between the locations you choose: a folder on your Mac, an external or network drive, or a server you reach over SSH. Those transfers happen directly between your Mac and the destination you configured.
- Your file contents, filenames, and folder paths are never sent to us or to any third party.
- Kopya is sandboxed with a hardened runtime. It can only reach the folders you explicitly pick, through the standard macOS folder picker. Access is held as a security-scoped bookmark tied to that folder.
- Kopya does not require Full Disk Access.
Credentials
If you sync to a remote server, Kopya stores what it needs to connect, on your Mac only:
- SSH private keys are stored inside the app's own container with
0600permissions. - Passwords are stored in the macOS Keychain.
- Host fingerprints go in a
known_hostsfile inside the app's container. Kopya never reads from or writes to~/.ssh.
None of this leaves your Mac except as part of authenticating the SSH connection you configured.
The app: network activity
The only network connections the Kopya app makes are the SSH transfers you set up yourself, to the hosts you specify. The app does not check for updates over the network, does not load remote content, and does not contact any analytics or advertising service.
This website
Separately from the app, kopya.ca uses Google Analytics to count visits and see which pages people read. It records things like the pages you view, roughly where in the world you are, and what kind of device and browser you use. It does not tell us who you are, and we do not try to work that out.
- Google Analytics sets cookies whose names begin with
_ga. - In the EU, the EEA and the UK, nothing from Google loads until you accept the banner. Decline and no analytics script is fetched and no cookie is set.
- You can change your mind at any time with . Declining after accepting also deletes the
_gacookies already set. - Google describes its own handling of this data in How Google uses information from sites that use its services.
The site also loads a web font from Google Fonts, which means your browser requests a file from Google's servers and Google sees the IP address making that request. No cookie is set by that request.
Purchases
Kopya is free for one sync job. Unlocking unlimited jobs is a one-time purchase handled entirely by Apple through the App Store. Apple processes the payment and tells the app whether the purchase exists. We never see your name, payment details, or Apple Account. Apple's handling of that transaction is covered by Apple's Privacy Policy.
Support
If you email [email protected], we receive whatever you put in that message: your email address and anything you choose to tell us. We use it only to answer you, and we do not add it to any mailing list.
Children
Kopya is not directed at children, and the app collects no information from anyone, regardless of age.
Changes to this policy
If this policy changes, the revised version will be posted here with a new date.
Contact
Questions about this policy can go to [email protected].
Kopya is made by Eight-Seven Inc.