Download Kept

Free, 1.1, for macOS 14 or later, Apple silicon and Intel in one download of about 5 MB. Signed with a Developer ID and notarised by Apple, so it opens like any other app. Nothing is sent anywhere, during install or after.

Download for macOS

Open the disk image and drag Kept to Applications.

Check what you downloaded

The SHA-256 of this release's disk image is a7cf0a8198e4e06dc0847e204b6609a43ba2e1aa76d820ebc1166196f58bddd9. Compare it with shasum -a 256 ~/Downloads/Kept-1.1.dmg. The signature and Apple's notarisation show with spctl -a -vv -t open --context context:primary-signature ~/Downloads/Kept-1.1.dmg.

The app has no networking code. The same check that gates every release is a short shell script you can read and run on the app you installed: check-no-network.sh. It lists the libraries and symbols the binaries use and fails if any of them is a networking API. A firewall such as LuLu or Little Snitch will never see a connection from Kept.

// Poll the pasteboard four times a second let pasteboard = NSPasteboard.general var lastChange = pasteboard.changeCount timer = Timer.scheduledTimer(withTimeInterval: 0.25, repeats: true) { _ in guard pasteboard.changeCount != lastChange else { return } lastChange = pasteboard.changeCount // Password managers mark their copies; never keep them if pasteboard.types?.contains(.concealed) == true { return } store.capture(from: pasteboard, app: frontmostApp()) }