Privacy & Telemetry Notice

Version 1.0 · 2026-07-24 · applies to all versions of nAppleCleaner

Data privacy, telemetry and analytics

The Software uses extended telemetry and analytics. Here is exactly what that means, what leaves your Mac, and what your rights are.

10. We collect extended telemetry — and we want you to understand it

The Software transmits diagnostic, error and usage telemetry to Sentry, a third-party application-monitoring service, and may use comparable analytics services in future versions. We do this to find and fix bugs, to understand which functions are used and how, to detect crashes and performance problems, and to improve the Software's accuracy, stability and usefulness.

This telemetry is extensive. It is not limited to crash reports. It includes structured logs and performance traces describing what the Software did while you used it.

Some of these data points are sensitive in nature. They are pseudonymised — and, where technically possible, anonymised or reduced — before transmission, but pseudonymised data is still personal data under the GDPR, and we treat it as such. We do not attempt to re-identify you, and we do not sell, rent or trade telemetry data.

11. What is transmitted

Depending on what you do in the Software, the telemetry may include:

• technical context: Software version, macOS version, hardware model, locale, timezone, and a pseudonymous device identifier derived from your Mac's hardware UUID;
• error and crash data: exception types, error messages, stack traces including source file names and line numbers, and the sequence of actions leading up to a fault;
• performance data: timing spans and profiles for scans and background operations;
• usage and result metadata from scans: counts and names of installed, system and "ghost" applications, bundle identifiers, publisher/signature status, process names and identifiers, launch and login items;
• network observations: remote hosts, domain names, IP addresses and ports that processes on your Mac are connected to or listening on, together with the owning process;
• AI/agent inventory: locally installed or running AI models, agent runtimes and AI developer tools, and their local network exposure;
• file-system metadata: file and folder paths, names, sizes and categories of configuration files and files classified as high-risk (for example ".env" files, cloud or AI credential files and SSH keys), and the paths you act on.

IMPORTANT — paths and names can be revealing. We transmit metadata, not file contents: we do not read or send the contents of your documents, and we do not send the contents of credential files, keys, tokens or passwords. However, file paths, application names, host names and process names can themselves disclose sensitive facts — for example your macOS user name, your employer, a client's name, a project's name or an internal hostname. The underlying monitoring SDK is currently configured to attach default identifying context, which can include your IP address and your operating-system user and host name.

Please do not enter confidential information into free-text fields, and be aware of the above before running scans on a machine holding third-party confidential data.

12. Legal basis, processors, transfers and retention (GDPR)

Controller: n-13 analytics UG (haftungsbeschränkt), registered with the Amtsgericht Nürnberg. Contact for all data-protection matters: andrey.income@gmail.com.

Legal basis: your explicit consent under Art. 6(1)(a) GDPR, given by accepting this Agreement, and — where applicable — our legitimate interest under Art. 6(1)(f) GDPR in operating, securing and improving software we distribute free of charge.

Processor: Functional Software, Inc. ("Sentry") and its affiliates, acting as our processor under Art. 28 GDPR. Telemetry from this Software is sent to Sentry's EU ingestion region. Where personal data is nonetheless transferred to or accessed from the United States, that transfer is based on the European Commission's Standard Contractual Clauses and/or an applicable adequacy decision, together with supplementary measures.

Retention: telemetry is retained only as long as needed for the purposes above, in line with the retention period configured at our processor (typically up to 90 days for events and logs), after which it is deleted or aggregated. Aggregated statistics that no longer permit identification may be kept longer.

No automated decision-making: we do not use telemetry for profiling that produces legal effects concerning you, for advertising, or for any automated decision under Art. 22 GDPR.

13. Your rights, and how to switch telemetry off

Under the GDPR you have the right to access your data (Art. 15), to rectification (Art. 16), to erasure (Art. 17), to restriction of processing (Art. 18), to data portability (Art. 20) and to object to processing (Art. 21). Write to andrey.income@gmail.com and we will act on your request without undue delay. Because the data is pseudonymised, we may need your device identifier — shown in the Software's status bar — to locate it.

You may withdraw your consent at any time with effect for the future; withdrawal does not affect the lawfulness of processing carried out before it. To withdraw consent, set the environment variable N13_DISABLE_TELEMETRY=1 for the Software, or write to andrey.income@gmail.com and we will disable and delete your telemetry. You may also simply stop using and uninstall the Software.

You have the right to lodge a complaint with a supervisory authority, in particular in the member state of your residence or workplace. Our competent authority is: Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany.

If you are a California resident: we do not sell or share your personal information as those terms are defined by the CCPA/CPRA, and we do not use it for cross-context behavioural advertising. You may exercise your rights to know, delete, correct and to non-discrimination via the same contact address. Residents of other US states with comparable privacy laws have equivalent rights and may use the same contact address.

14. Security, and its limits

We take reasonable technical and organisational measures to protect telemetry in transit and at rest, including transport encryption and access controls at our processor. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. Transmitting data to us is at your own risk to the extent permitted by law.

The Software stores its own data locally on your Mac (configuration, activity history, consent record and, where applicable, licence data). Uninstalling the Software or deleting its folder under ~/Library/Application Support removes that local data.

This notice is part of the Terms of Use, Licence & Disclaimer, which you accept when you first run the app.

Imprint / Anbieterkennzeichnung (§ 5 DDG)