01Summary
Local onlySettings, backups, logs and benchmark results never leave your Mac.
Nothing collectedNo analytics, crash reports, identifiers or usage data, in the app or on this site.
One optional requestA daily check for new versions on GitHub. You can turn it off.
Tests you startBenchmark network tests run only when you start them.
02What Keel stores on your Mac
Keel keeps its records in ~/Library/Application Support/Keel/ and its preferences in ~/Library/Preferences/com.mohdmahmodi.keel.plist. Nothing in these files is sent anywhere.
- Recorded originals. The value, file or launch item a tweak replaced, so it can be restored exactly.
- Activity log. A plain-language record of what Keel changed and the commands it ran.
- Benchmark results. Each run you save, with the conditions it ran under.
- Hardware profile. Chip, memory, macOS version and power sources, read at launch so tweaks match your Mac. It is held in memory and not uploaded.
03Network connections
The app connects to the network in two situations only.
| Feature | Destination | What is sent |
|---|---|---|
| Update check | api.github.com, at most once a day | A standard HTTPS request with User-Agent: Keel/<version>. No identifiers or cookies. Turn it off in Settings, Updates. |
| Ping tests | Your router, 1.1.1.1, 8.8.8.8 and the nearest AWS region | Ping packets and TCP handshakes, only when you run the benchmark. |
| DNS test | Your network's DNS server, 1.1.1.1, 8.8.8.8, 9.9.9.9 | Lookups of well-known domains such as apple.com and github.com. |
| Responsiveness | Apple, through macOS's networkQuality tool | Download and upload traffic for up to 20 seconds each. Apple's privacy policy covers this tool. |
| Ollama test | Your own Mac, 127.0.0.1:11434 | A short prompt to a model you installed. It never leaves your Mac. |
As with any web request, GitHub, Cloudflare, Google, Quad9 and AWS can see your IP address when these tests or checks contact them. Keel never downloads or installs updates by itself.
04macOS permissions
Keel asks for nothing up front. macOS asks the first time a feature needs a permission, and each one is optional.
| Permission | Used for |
|---|---|
| Administrator password or helper | Applying and reverting tweaks that need root, through a fixed list of allowed operations. |
| Automation (Finder) | Measuring and emptying the Trash. |
| Local Network | The router ping and local DNS benchmark tests. |
| Full Disk Access | Measuring the Trash, Mail downloads and device backups in Cleanup. Granted by you in System Settings. |
05This website
keel.mohdmahmodi.com sets no cookies and runs no analytics or advertising. To show the page and the download link, your browser contacts these services, which receive standard request data such as your IP address:
- Cloudflare Pages hosts the site and may keep short-term logs for delivery and security.
- cdnjs (Cloudflare) and jsDelivr serve the animation and graphics libraries.
- GitHub answers the request for the latest version and serves the download.
06Removing your data
Turn off every tweak first, so your original settings are restored. Then quit Keel and delete its folder and preferences:
rm -rf ~/Library/Application\ Support/Keel
Followed by defaults delete com.mohdmahmodi.keel. The read me has the full uninstall steps.
07Changes and contact
If this policy changes, the new version is posted here with a new date, and the history is public in the repository.
Questions go to GitHub Issues. Report security problems privately through GitHub's vulnerability reporting.