The short version: DevKeep collects nothing. It has no servers, no analytics, no telemetry, and makes no network connections of its own. Everything — scanning, encryption, backup, and restore — happens locally on your device.
What DevKeep accesses
To do its job, DevKeep reads files and metadata on your Mac:
- Developer state you ask it to audit or back up: SSH/GPG keys, cloud credentials, tokens,
.env files, shell/editor/terminal config, and similar.
- Installed applications (in
/Applications and ~/Applications) and their Info.plist metadata, to build the reinstall guide.
- Package manifests via local tools you already have (e.g.
brew bundle dump, mas list, npm ls -g). DevKeep runs these locally and reads their output; it does not transmit it.
What DevKeep stores, and where
- Backups are written only to the folder you choose. Secrets in a backup are always encrypted with AES‑256‑GCM; the key comes from your passphrase (PBKDF2‑HMAC‑SHA256) or a random key you receive as a recovery code. Without that secret, the backup is unreadable.
- The Keychain may hold a copy of the random backup key for same‑machine convenience, stored
WhenUnlockedThisDeviceOnly — it is not synced to iCloud Keychain.
- Preferences (scan roots, exclusions, default folder, reminder cadence) live in standard macOS user defaults on your Mac. Your passphrase and recovery code are never written to preferences.
What DevKeep does not do
- It does not send any data to us or any third party.
- It includes no analytics, crash reporting, advertising, or tracking.
- It requires no account and asks for no personal information.
Network access
DevKeep makes no network requests on its own. The only time the network is used is when you click a reinstall link in the Apps screen — that opens the Mac App Store or your web browser, governed by Apple's and your browser's own privacy policies.
Your control
You choose what to scan, what to include, where it's stored, and the passphrase that protects it. Delete a backup folder and it's gone. Because DevKeep holds nothing on your behalf, there is nothing for us to delete or disclose.
Contact
Questions about this policy: hello@skywaylabs.io