Privacy model

Clash is an on-device client. You configure the subscriptions, servers, and network services you choose, while its account-free architecture keeps the experience local-first.

On your device

Profiles, settings, connection history, logs, and diagnostics are handled locally. Sensitive local proxy-sharing credentials are stored in the device Keychain. Profiles are stored in the app container with iOS data protection.

At your direction

Clash makes external requests only to provide features you configure or start, including:

• subscription, provider, proxy, and DNS servers named by your configuration;
• resource-update sources shown in the app;
• network-quality, STUN, and latency-test endpoints you select;
• your iCloud account when you explicitly create an iCloud backup.

Those services receive the network information needed to perform the operation, such as your IP address. Data travels directly to the services you choose, with the developer outside that path.

Under your control

You can disconnect, remove profiles, disable configured updates, delete local data, remove iCloud backups, and decide whether to export any diagnostic information.

The Privacy Policy is the authoritative legal description.