Privacy and Safety

Privacy

• No telemetry, analytics, or usage tracking
• No background daemons
• All operations run locally on your device
• The only network connection is a startup update check against the GitHub Releases API (can be disabled in Settings)
• Apple Intelligence uses Apple's on-device FoundationModels — no data leaves your Mac

Safety

Protected Paths

SafetyManager blocks deletion of critical system paths:

• /System, /usr, /bin, /sbin, /private
• ~/.ssh, ~/.gnupg
• ~/Documents (and other user data directories)
• Browser user-data roots (logins, cookies, sessions are preserved)

File Deletion

• Smart Cleanup and App Uninstaller move files to Trash via trashItem(at:)
• Files in Trash are recoverable by default
• Permanent deletion ("Empty Trash During Cleanup", "Bypass Trash on Uninstall", "Empty Trash Immediately") is opt-in and clearly marked in the UI

Process Safety

ProcessSafetyPolicy protects critical system processes:

• kernel_task, launchd, WindowServer, loginwindow, Dock, Finder, and 20+ others are always blocked
• PID 0 and PID 1 can never be terminated
• Users can create Whitelists (always protect) and Blacklists (allow termination)

App Uninstaller

• Apps are terminated before cleanup (graceful terminate → force-kill after 3s)
• All residual file candidates are validated against SafetyManager before deletion

Permissions

The app requests Full Disk Access at startup to scan system and user cache directories. It also requests Accessibility access if needed for managing startup services.