Privacy

Last updated July 2026

The short version: Wairy reads sensitive information about your Mac so it can show it to you. None of it ever leaves your machine. There is no account, no server, and no analytics inside the app.

Wairy is a security auditor, so it has to be held to a higher standard than most apps. It reads a database that is, by design, sensitive. This page explains exactly what it reads, why, and where that data goes (nowhere).

What Wairy reads

To do its job, Wairy reads the following on your Mac, all locally:

The user permission database (TCC.db), the record macOS keeps of which apps have been granted or denied access to things like the camera, microphone, screen recording, Full Disk Access, and your files. This is why Wairy needs Full Disk Access.
AI tool configuration files, the config files for apps like Claude Desktop, Claude Code, Cursor, and VS Code, to list the MCP servers you've registered.
Browser extension and native-messaging manifests, to identify AI-related browser extensions and the local bridges they use.
Launch agents and the running process list, to show what starts automatically and what AI software is running right now.
Model cache directories, to report their size (never their contents).

Wairy reads this information. It does not copy it, upload it, or share it.

Where your data goes

Nowhere. Everything Wairy reads is processed and displayed on your device. The app keeps one local file of its own, a history database in Wairy's application-support folder, so it can show you how permissions change over time. That file never leaves your Mac, and you can delete it at any time.

Reading vs. changing

Reading is strictly read-only. Wairy never writes to macOS's permission database. When you choose to clean up a grant, it uses Apple's supported tccutil tool or opens the relevant System Settings pane, and only when you explicitly click that action. Wairy never changes anything on its own.

The only network requests Wairy makes

Wairy is local-first, but two features do reach the internet, and only these two:

Update checks, when you ask it to, Wairy fetches a small version file from wairy.app to see if a newer release exists. This request contains nothing about you or your Mac.
Pro license verification, if you buy Pro, Wairy sends your license key to Gumroad to confirm it's valid. That request includes the license key and nothing else.

Neither request includes any information about your permissions, apps, or files.

This website

wairy.app uses Plausible, a privacy-friendly, cookieless analytics tool, self-hosted by us. It records aggregate page views without cookies and without collecting personal data. If you use the contact form, the details you type are emailed to our support inbox so we can reply, and are not used for anything else.

Contact

Questions about privacy? Reach us through the support page.