Security
What the app does
- Local storage. Guides and screenshots live only in your Library folder on your Mac. There is no Freshguide cloud and no account.
- Two hosts. The app contacts
api.polar.sh(licences) andfreshguide.app/updates/appcast.json(updates), over HTTPS, and nothing else. You can confirm this with any network monitor. Details in the Privacy Policy. - Listen-only input. Freshguide observes clicks and keys while recording. It cannot change or block them, and it never clicks or types for you, including during Re-verify.
- Password fields. Text in password fields, and in fields that look like password fields, is never captured; it shows as
••••. - Redaction. Blurred and blocked areas are burned into exported images, not a layer that can be removed.
- Distribution. The app is signed with a Developer ID, built with the hardened runtime and notarized by Apple. It contains no third-party libraries.
- Licence keys are stored in your macOS Keychain.
Blur suggestions can miss things. Check every screenshot before you share a guide.
Report a vulnerability
Email hello@freshguide.app with the subject “Security”. Include the Freshguide version, macOS version and steps to reproduce. We aim to acknowledge within 2 business days and to keep you updated until it is fixed. Please give us reasonable time to fix an issue before you publish it. We don't run a paid bounty program.