🔒 Privacy

DiskInsight is built on a strict 100% local architecture. No file name, folder path, byte count, scan result, or system metric ever leaves your machine.

What DiskInsight can see

When you grant folder access, DiskInsight reads:

• File and directory names
• File sizes (logical and on-disk blocks)
• Modification dates
• File types (directory, regular file, symbolic link)
• Disk partition totals and available space
• CPU/memory/network/battery metrics (Monitor only)

DiskInsight never reads file contents except for duplicate hashing (which is fully local and never leaves memory).

What DiskInsight does not do

• No telemetry — nothing is sent anywhere, not even anonymous usage data.
• No accounts — no login, no signup, no cloud sync.
• No background processes — DiskInsight does nothing when it’s closed, and very little when it’s idle.
• No cloud upload — every scan, snapshot and cleanup lives entirely on your Mac.
• No file content reading (except local duplicate hashing).

What DiskInsight stores locally

• Scan snapshots are saved as small JSON files in your Application Support directory, encrypted with standard macOS file permissions.
• Preferences (accent, theme, palette, smart rules) are stored in the standard macOS preferences system.
• No scan results are persisted unless you explicitly save a snapshot.

Network access

DiskInsight does not make any network requests. If you see a macOS permission prompt for DiskInsight requesting network access, you can safely deny it — DiskInsight will function identically without it.

Apple notarization

DiskInsight is signed with an Apple Developer ID and notarized by Apple. macOS can verify the build has not been tampered with.

Reporting issues

If you find something that concerns you, or if you want to audit DiskInsight’s behavior, you can inspect any saved snapshot file directly — it is plain JSON. We welcome questions at support@diskinsight.com.