Privacy Policy
Short version: Storage scanning and review stay on your Mac. Optional Firebase Analytics is off until you allow it. A managed Pro Assistant processes only the prompt context you deliberately send through Firebase and OpenRouter, does not store that content, and never exposes its service key to the app.
Contents
- 1. What Klyr Disk does and doesn't collect
- 2. What stays on your Mac
- 3. What we never see
- 4. AI features (Pro tier, optional)
- 5. Third-party services
- 6. Cookies and tracking on this website
- 7. Data retention
- 8. Your rights (GDPR / CCPA / etc.)
- 9. International data transfers
- 10. Security practices
- 11. Children's privacy
- 12. Changes to this policy
- 13. Contact and data controller
- 14. Governing law
1. What Klyr Disk does and doesn't collect
Both Mac editions offer optional Firebase Analytics, disabled by default. If enabled in Settings, Klyr sends aggregate events such as app launch, scan completion, and the scanner category. It does not send file paths, filenames, file contents, scan results, storage sizes, AI prompts, or advertising IDs. Local diagnostic logs are never uploaded.
When enabled or explicitly triggered, Klyr Disk can make these network calls:
Swipe or use arrow keys to see every column
| Call | When | Where it goes |
|---|---|---|
| Sparkle update check | When you choose Klyr Disk ▸ Check for Updates | dl.klyr.app over HTTPS |
| Firebase Analytics | Only after you enable usage analytics in Settings | Google Analytics for Firebase over HTTPS; aggregate app and feature-use context only |
| AI categorization request | When you trigger AI categorization with a provider key set | The categorization provider you chose (Anthropic / OpenAI / Google), using your key |
| Managed Assistant request | When a signed-in Pro user sends an Assistant prompt | Our Firebase function in US-Central, then OpenRouter and its selected model provider |
| Pro interest signup | If you submit your email in the direct-download Pro app | Our Firebase function submitKlyrWaitlist in US-Central (only when you click Send) |
| Sign in with Apple verification | When you click "Sign in with Apple" in the direct-download Pro app | cleanmymacbook.com/auth and our Firebase verification functions in US-Central |
| Pro promo redemption | When you enter a promo code and sign in with Apple in the direct-download Pro app | Our Firebase entitlement service in US-Central. No payment details are requested. |
| Purchase and license activation | When you purchase or activate Klyr Disk Pro | Gumroad and our Firebase entitlement service. Klyr Disk does not receive your full payment-card or bank details. |
Firebase Analytics is available in both editions and is off by default. The other calls are unavailable in the Mac App Store edition, whose updates are handled by Apple; in Pro they occur only after the corresponding user action.
2. What stays on your Mac
These files persist between launches. None of them are ever uploaded.
Swipe or use arrow keys to see every column
| Data | Stored at | Why |
|---|---|---|
| Watched-folder list | ~/Library/Application Support/Klyr/watched-folders.json | So your sidebar survives a relaunch. |
| Whitelist patterns | ~/Library/Application Support/Klyr/whitelist.json | Glob patterns Klyr Disk will never trash. |
| Scan history | ~/Library/Application Support/Klyr/history.json | Per-scan record (timestamp, root, file count). No filenames. |
| Error + breadcrumb logs | ~/Library/Application Support/Klyr/logs/YYYY-MM-DD.log | Rotated daily, kept 5 days, deletable. |
| AI provider API keys | App memory; optionally macOS Keychain | Saved only after you choose “Remember securely on this Mac”; never read at startup. |
| Account summary | UserDefaults | Non-secret Apple account summary only. Apple identity tokens and authorization codes are never persisted. |
| License token (Pro) | ~/Library/Application Support/Klyr/license.json | Ed25519-signed; verified offline. |
| Settings + UI preferences | UserDefaults (app.klyr.Klyr suite) | Toggles for autoscan, threshold, provider choice. |
To wipe everything: Settings ▸ Reset to defaults clears the whitelist, provider choice, and API keys; Clear logs wipes the log directory; the watched-folder list survives reset by design and can be edited per row (right-click ▸ Remove from watched). To remove the lot, drag the directory ~/Library/Application Support/Klyr/ to Trash. The legacy internal folder name remains stable across the Klyr Disk rebrand.
3. What we never see
- The contents of any file you scan.
- File paths or filenames you've scanned.
- Which apps you uninstalled.
- Which folders you watch.
- Your identity or which individual person opened the app, unless you deliberately sign in to Pro. Managed Assistant allowance counters use a one-way hash of that Firebase user id.
- How much storage you reclaimed.
- Your raw IP address as a stored profile field. Firebase necessarily receives standard HTTPS metadata; for abuse forensics we retain only a truncated SHA-256 hash, not the address itself.
- Your Mac's name, hardware UUID, advertising ID, or MAC address.
The Mac App Store edition never collects your Apple ID. The direct-download Pro edition collects Apple identity data only if you sign in with Apple.
If you submit a support bundle (Settings ▸ Bundle for support), Klyr Disk writes klyr-logs-YYYY-MM-DD.txt to ~/Downloads. Nothing is uploaded — the bundle sits there until you choose to share it. Breadcrumbs are opaque tags (scanner=largeFile, phase=enumerate) and never include file paths.
4. AI features (Pro tier, optional)
The Pro build can route file-categorization questions to a Large Language Model. You bring your own API key for categorization (Anthropic Claude, OpenAI, or Google Gemini), and those requests go directly from your Mac to the selected provider. For a signed-in Pro account, Assistant requests pass through Klyr's Firebase function in US-Central and then OpenRouter. Without a managed session, you can add a personal OpenRouter key and connect directly.
What's sent to the provider:
- The filename of each candidate file (not the contents).
- The size in bytes.
- A safety hint derived from the path (e.g. "lives under
~/.git/").
What's never sent: the file body, your username, your machine name, or any keychain content. Assistant sends the conversation prompt, relevant file paths, and tool results. In managed mode, our Firebase function processes that content in memory but does not log or store it; OpenRouter and its selected model provider also receive it. In personal-key mode, it goes directly to OpenRouter.
Assistant requests OpenRouter's free-model router first. If you leave paid fallback enabled and free capacity is unavailable, managed mode may use GPT-4.1 Nano within a server-enforced allowance; personal mode may consume credits from your OpenRouter account. You can turn off paid fallback in Settings.
To prevent abuse, managed mode stores daily request counts and character totals under a one-way hash of the Firebase user id. It never stores prompts or responses with those counters, which are removed after 30 days. The shared OpenRouter credential remains in Google Cloud Secret Manager and is never returned to the app.
Your usage with the provider you chose is governed by your separate agreement with them. See:
You can keep categorization local by setting Settings provider to rule-based; Klyr Disk then uses a deterministic classifier with no model and no network calls. Assistant makes a network request only when you deliberately send a prompt. Signing out and removing any personal OpenRouter key disables it.
MCP in Pro: Klyr includes an optional local Model Context Protocol server for compatible AI clients. It starts only when a client launches it, communicates through local standard input/output, and exposes read-only folder-size and largest-item tools. It does not expose Trash, deletion, file-content reading, or upload tools. The client receives paths, names, sizes, and scan-completeness information for paths it asks Klyr to inspect; that client’s own privacy policy applies to anything it sends onward.
5. Third-party services
Swipe or use arrow keys to see every column
| Service | Purpose | Data shared |
|---|---|---|
| Apple App Store (MAS Free) | Distribution, updates, payment | Whatever Apple collects when you install or update the app. See Apple's privacy policy. |
| Sparkle (Pro DMG only) | Update delivery | Request to our update server only; no user data sent beyond standard HTTPS metadata. |
| Your chosen AI provider or OpenRouter (Pro) | File categorization, optional | See section 4 above. |
| Firebase Analytics (optional) | Aggregate website and app usage measurement after you opt in. | Page or screen context, coarse device and app information, and aggregate feature events. Never file paths, names, contents, scan results, storage totals, form contents, AI prompts, or advertising IDs. |
| Firebase Auth, App Check, Functions, and Firestore (managed Pro Assistant) | Authenticating Pro access, protecting the assistant endpoint, proxying requests, and enforcing daily allowances. | Firebase user id and Pro claim; a short-lived custom App Check token issued after the Pro session is verified; conversation prompts, relevant paths, and tool results processed transiently; daily counts and character totals stored under a one-way user-id hash for 30 days. Prompt and response content is not logged or stored by Klyr. |
| Google Cloud Firestore (Klyr Disk Pro interest signup) | Storing your contact details so we can reach out about Pro access, only if you submit the form. We run a Cloud Function on Firebase that writes to Firestore; the data lives in Google Cloud (US-Central region). | The email address you typed, optionally your name and phone number if you chose to include them, an optional flag for whether you want beta access, the source page tag, the signed-up-at timestamp, a truncated SHA-256 hash of your IP (not the IP itself — kept only for abuse forensics), and your browser's User-Agent header. Klyr Disk usage data on your Mac is never linked to your interest signup. We control the data ourselves; no third-party email-marketing service holds it. |
| Google Cloud Firestore (Klyr Disk Pro account identity) | Direct-download Pro only: storing your Apple identity (opaque user id), email and name (if Apple shared them), and app/OS version when you sign in with Apple. Data lives in Google Cloud (US-Central region). | The Apple user id (Apple's opaque per-app identifier; not your Apple ID itself), email + verified flag + relay flag, optional name, app + macOS version, signed-up-at + last-seen-at timestamps, a truncated SHA-256 of your IP. Klyr Disk usage data on your Mac is still never linked to your identity. |
| Google Cloud Firestore (Klyr Disk Pro promo entitlement) | Preventing repeat redemption and restoring the original three-month expiry after sign-in. | A one-way hash of Apple's opaque per-app user id, redemption time, expiry time, and campaign identifier. No payment-card or bank information. |
| Gumroad (when you purchase or activate Pro) | Payment processing, receipt, taxes, refunds, and purchase verification. | Information you provide at checkout. Klyr Disk receives purchase status, product, order identifier, and purchase email needed to deliver and manage the license, but not full card or bank credentials. |
Withdrawal. Email vivek.yadav@stringswaytech.com with the subject "delete my updates" (or "unsubscribe") and we'll delete your klyr_waitlist record the same business day. To delete your Sign in with Apple account record, email the same address with the subject "delete my account" and we'll purge the klyr_users record the same business day.
6. Cookies and tracking on this website
This website uses Firebase Analytics only after you choose Allow analytics. It measures page visits and feature interest; advertising signals and ad personalization are disabled. Your choice is stored in your browser's local storage. Form contents are not included in analytics events. You can at any time.
7. Data retention
- Local logs: rotated daily, deleted automatically after 5 days. You can clear earlier via Settings ▸ Clear logs.
- Firebase Analytics: retained according to the Google Analytics data-retention setting for this property. You can stop future app collection in Settings and change the website preference above.
- Scan history: retained until you click Clear all history in the History tab.
- Watched folders, whitelist, license: retained until you remove them or uninstall the app. AI API keys are discarded on quit unless you explicitly choose to remember them securely.
- Pro interest signup: retained on Stringsway's mailing-list infrastructure until you ask us to delete it. Email vivek.yadav@stringswaytech.com with the email address you signed up with and we'll purge it within 7 days.
- Pro account identity: retained while your account is active or until you ask us to delete it. Browser sign-in bridge sessions expire after 10 minutes and are single-use.
- Managed Assistant counters: daily request and character totals, stored under a one-way user-id hash, are deleted after 30 days.
- Pro promo entitlement: retained until account deletion so the same Apple identity cannot repeatedly restart a time-limited promotion.
- Purchase entitlement: retained while the license is active and as required for accounting, fraud prevention, refunds, and legal obligations.
8. Your rights
Most Klyr Disk data stays on your Mac. If you enable analytics, join the Pro interest list, or use Sign in with Apple, the limited information described above is processed by the corresponding service. Depending on where you live, your rights may include:
- Right of access: email us to request a copy of any interest or account record associated with your email address.
- Right to rectification: ask us to correct inaccurate contact or account information.
- Right to erasure: delete the app and its Application Support directory for local data; email us to purge a Pro interest or account record.
- Right to data portability: local Klyr Disk data is stored in readable files under Application Support; you may also request an export of your server-side account record.
- Right to object / withdraw consent: turn off usage analytics in Settings, change the website preference in section 6, or stop using another optional network feature.
- Right to lodge a complaint: contact your local data-protection authority. In the EU, find your authority at edpb.europa.eu.
9. International data transfers
Klyr Disk's storage analysis remains local. Optional network features can transfer limited data internationally:
- Pro interest signup — submitted to a Stringsway Technologies endpoint. Our infrastructure is hosted in the US and India.
- Pro Sign in with Apple — the authentication response is verified by our Firebase backend in the US-Central region.
- AI categorization and personal-key Assistant requests — go directly from your Mac to your chosen provider's infrastructure.
- Managed Pro Assistant requests — pass through our Firebase function in US-Central and then OpenRouter and its selected provider.
- Firebase Analytics — consented app and website events are processed by Google's infrastructure.
By deliberately using one of these optional features, you request the corresponding transfer.
10. Security practices
- Encryption at rest: AI API keys are held only in process memory unless you explicitly choose to save one in macOS Keychain. Local logs and settings files use file permissions; if you need at-rest encryption, enable FileVault.
- Encryption in transit: every outbound call uses HTTPS / TLS 1.2+.
- Code signing: The MAS Free build is signed by Apple Distribution and notarized by Apple. The DMG Pro build is signed by Developer ID Application and notarized.
- Sandbox: the MAS Free build runs inside Apple's App Sandbox with only the entitlements it needs (user-selected file read/write).
- License verification: Ed25519 signature over the license token, verified offline against the embedded public key.
- Managed Assistant: Firebase Auth, App Check, per-user quotas, model allowlists, and a Secret Manager credential protect the proxy.
- Vulnerability reports: email vivek.yadav@stringswaytech.com with "security" in the subject. We acknowledge within 48 hours.
11. Children's privacy
Klyr Disk is not directed to children under 13 (or the higher minimum age required in their jurisdiction). We do not knowingly collect personal data from children. If you believe a child submitted account or interest information, contact us and we will delete it.
12. Changes to this policy
If this policy changes, we will update the version and effective date on this page. We will provide additional notice for material changes when required by law or reasonably appropriate for the change.
Version history
- v1.6 — 2026-09-12: documented the optional managed Pro Assistant, transient Firebase processing, account-based quotas, and personal-key fallback.
- v1.5 — 2026-09-11: added consent-gated Firebase Analytics disclosures for the website and Mac apps.
- v1.3 — 2026-09-09: clarified Klyr Disk's storage-management positioning and documented the planned payment and purchase-activation data flow.
- v1.2 — 2026-09-09: updated the website domain and documented the browser-based Sign in with Apple flow used by Klyr Disk Pro.
- v1.1 — 2026-06-02: added Sign in with Apple (opt-in, Pro build); updated §1 network-calls table; added §3 Apple ID qualifier; added
klyr_usersFirestore row in §5; updated withdrawal paragraph. - v1.0 — 2026-05-26: initial policy.
13. Contact and data controller
Data controller: Stringsway Technologies (the entity publishing Klyr Disk)
Email: vivek.yadav@stringswaytech.com
Website: stringswaytech.com
Email us with privacy questions, takedowns, "I think Klyr Disk did something unexpected", security disclosures, or anything else covered by this policy. Average response time is under 48 hours, weekdays.
14. Governing law
This policy is governed by the laws of India. Disputes — to the extent they survive the privacy-first design above — are resolved in the courts of Pune, Maharashtra, India.
If you spot a clause that does not match Klyr Disk's behavior, email us. We treat documentation drift as a product bug.