Roomy
Download

Security & Privacy

Careful with your files. Quiet about your data.

A Mac cleaner has access to a lot. Here is exactly how Roomy decides what may be removed, what it sends over the internet, and how your purchase is protected.

Safe cleaning

Six rules, built into every clean

These rules aren’t settings you have to find. They apply to System Junk, the uninstaller, developer cleanup, duplicates and large files alike.

  • Only rebuildable data is selected for you

    Every item has a kind: Cache, Logs, Temporary, Build data, Downloads cache, App data, Download, Your files or Backup. Only the first five can be preselected, and only when rated Safe. Everything else waits for you to pick it.

  • App data is opt-in

    Browsers lose only their web cache; bookmarks, passwords, history and logins live elsewhere and are never touched. Uninstalling an app keeps its documents, settings and logins unless you switch on “Also remove app data & settings”.

  • Every row says what goes and what stays

    The ⓘ popover shows the exact location, size, file count and whether an item is deleted or moved to the Trash. The confirmation lists every item, and anything that isn’t a cache needs an extra tick.

  • Review and Caution when it matters

    Caches of apps that are open, macOS caches, unknown caches over 1 GB and app data are rated Review. Device backups and Xcode archives are rated Caution. None of them is ever preselected.

  • Every path is checked right before removal

    It must be inside your home folder, Applications or a cache, log or temporary folder. It can’t be an important folder itself, can’t be inside iCloud Drive, Keychains, Mail, Messages, Photos, Contacts or Calendars, can’t pass through a symbolic link and can’t be on your exclusion list.

  • Trash first for anything that isn’t a cache

    Caches, logs and other rebuildable data are deleted, because apps recreate them. Downloads, backups, archives, large files, duplicates and uninstalled apps go to the Trash, so you can put them back. One setting sends everything to the Trash.

Your password stays with macOS. Items installed for all users are moved with the standard macOS administrator dialog. Roomy never sees your password, nothing is ever deleted as the system administrator, and those items go to the Trash too.

macOS system folders are off-limits. /System, /usr and the other core folders are outside the allowed areas, so no selection can reach them.

What the app sends

Your scan stays on your Mac.

Roomy contacts our server only to activate and check a Pro license, and to load current prices for its Plans screen. That’s it.

Sent for license checks

  • Your license key. To check that it’s valid and which plan it is for.
  • A one-way hash of your Mac’s hardware ID. A SHA-256 fingerprint, never the ID itself, so one license can count your Macs without identifying them.
  • Your Mac’s name. Sent once, when you activate, so you can recognize the Mac on your account page and deactivate it later.
  • The app version. So the server answers in a way your version understands.

As with any connection, our server also sees your IP address. Checks happen when you activate and then about once a day.

Never sent

  • File names, folder names or paths
  • The contents of any file
  • Scan results, sizes or what you cleaned
  • Your list of installed apps
  • Analytics, usage tracking or crash data

There is no analytics SDK in the app. Free users never send a license key; the app only downloads the price list.

Purchases and licenses

Protected end to end

Payments by Stripe

You pay on Stripe’s secure checkout. We never see or store your card number; we receive only what we need to issue your license, such as your email address and plan.

Signed licenses

Your license is a token signed with our private key and verified in the app with a public key. It can’t be forged or edited, and it keeps working offline for up to 21 days between checks.

HTTPS everywhere

The app, this website and the license server talk only over encrypted HTTPS connections. This site also sends strict security headers, including a Content Security Policy.

Passwords stay unreadable

Your account password is stored only as a salted, one-way hash, so nobody can read it, us included. Sign-in and reset links sent to your email work once and expire quickly.

Only what’s needed

We keep your email, your licenses and the Macs they’re active on, and your payment history from Stripe. You can deactivate Macs yourself on your account page.

No background helpers

Roomy doesn’t install launch agents, login items, system extensions or browser extensions. Quit it and nothing of it keeps running.

This website

The website uses a session cookie to keep you signed in and to protect forms, and a cookie that remembers your consent choice. If we run ads, Google’s ads and analytics cookies are used only as described in the consent banner, and visitors in the EEA, the UK and Switzerland start with them off. You can change your choice any time with Cookie settings.

The site loads no third-party fonts or scripts other than Google’s tag when it is enabled. Details are in our Privacy Policy and Cookie Policy.

Found a security issue?

Please tell us privately at [email protected] with the steps to reproduce it. We read every report, reply as soon as we can and fix confirmed issues quickly. Please give us a reasonable time to fix it before sharing it publicly.

For how the app decides what to clean, see Safe, Review and Caution and What Roomy removes.

Clean with confidence.
Start with a free scan.

Download Roomy, see exactly what is taking up space, and clean up to 500 MB for free. Nothing is removed until you say so.

Download free See pricing

Version 1.0.0 5 MB macOS 14 Sonoma or later Apple silicon and Intel