Private by design.

Disk Whisk is made and sold by Intellogic. In this notice, “we” means Intellogic, the controller of the personal data described here: purchases, licenses, optional accounts, support emails, the emails you ask for on the download page, and this website. For any privacy question or request, write to hello@diskwhisk.com.

Seller

Intellogic

Email

hello@diskwhisk.com

Website

diskwhisk.com

Most of what Disk Whisk handles never reaches us at all: scans, cleanup and History stay on your Mac.

Disk Whisk reads filesystem metadata inside the scan locations you choose, including names, local paths, sizes, dates, file types and access state. It does not read file contents for scanning or advice. Containers & VMs reads each engine’s inventory, such as image names, tags, layer sizes and volume totals, and the sizes of virtual machine files. None of this leaves your Mac.

Compress is the one feature that reads file contents, and only when you start it. To estimate what macOS compression would save, it reads up to 512 KB of each file of 16 KB or more in apps you installed, Homebrew, developer toolchains and SDKs, editor extensions, and the dependencies of projects untouched for a month. It compresses those samples in memory and keeps only byte counts. It never reads Desktop, Documents, Downloads or your media folders, never downloads files kept only in iCloud, and changes nothing on disk. Compressing is a separate Pro action you review and confirm; it rewrites the chosen files in compressed form without changing their contents, and Uncompress reverses it. File contents are never stored or sent anywhere.

Scan snapshots, exclusions, “Keep this” choices, cleanup history and recovery references, Maintain rules, Storage Story checkpoints, Disk Runway readings (disk totals only), the list of folders you compressed, and container and VM receipts all stay on your Mac. They are never sent to us or included in Ask Disk Whisk requests.

The app has no telemetry: no analytics, crash reporting or advertising SDK. We don’t sell personal data.

The app connects to our licensing service at licenses.diskwhisk.com, and to DeepSeek only if you set up Ask Disk Whisk with your own key (see the next section). Like any connection, each request carries your IP address.

• Activation and license checks. When you activate Pro, with your license key or by approving the Mac in Your license, and when the license refreshes (normally weekly, and at least every 30 days), the Mac sends the public half of a random signing key it created in your login Keychain, with signed requests. Never scan results, file names, file contents or your Mac’s serial number.
• Starting a trial. From version 0.9.5, starting the 7-day trial also sends a one-way, keyed hash of your Mac’s hardware UUID, so that reinstalling the app or deleting its Keychain item can’t restart the trial. The UUID itself is never sent and can’t be recovered from the hash. It is sent only when a trial starts.
• Update check. From version 0.9.5, the app asks licenses.diskwhisk.com once a day whether a newer version is out, and again when you choose Disk Whisk ▸ Check for Updates… The request carries only what any web request does, your IP address and the app’s version; no license, account or device identifier. You can turn the daily check off in Settings ▸ General.

Free scanning, review, History and restore work offline.

Ask Disk Whisk answers questions about your scan. Without a key, it answers on your Mac from its own rules and sends nothing. If you add your own DeepSeek API key, your question goes to DeepSeek’s API with an allowlisted summary: your question and, for each item, a random ID, its category, a broad storage domain such as “developer cache” or “installer”, its size, last-changed date and safety level, a generic reason and impact, how it can be recovered, and a count of related items, plus your disk’s total size and free space. File names, exact paths, file contents, filesystem identities and application identifiers are never included, so keep names out of your question too.

Your DeepSeek key is stored in the macOS Keychain, is used only to authorize these requests, and can be removed in Settings at any time. The request goes straight from your Mac to DeepSeek under your own DeepSeek account; it doesn’t pass through us. DeepSeek is based in China and handles requests under its own terms and privacy policy.

Stripe processes payments and billing details; we never see your full card number. Resend delivers license keys, verification codes and the emails you ask for on the download page. Supabase provides optional account sign-in and hosts the private licensing database. Cloudflare runs the website and the licensing service. For licensing we store your purchase email, plan, payment references, license and activation records, and, if the purchase came from a campaign link, its source and campaign (see the next section). Emails and license keys are encrypted in the licensing database; lookup and rate-limit identifiers use keyed hashes.

An account is optional. You can sign in with an email address and password, an emailed link, or Continue with Google. With Google, Google confirms your email address to Supabase, which may also receive the name and profile picture on your Google account; we use only the email address. The portal keeps your sign-in session in your browser’s local storage, not in a cookie, and signing out clears it without deactivating any Mac.

We use IP addresses briefly to limit abuse; the licensing database keeps only keyed, expiring rate-limit buckets.

diskwhisk.com sets no cookies and has no advertising or cross-site trackers.

• Visit counts. We use Cloudflare Web Analytics, which is cookieless and doesn’t fingerprint you. It gives us totals such as page views, referring sites, countries and device types, not a record of any one visitor.
• Where a visit came from. If you arrive through a link with campaign tags (utm_source and similar) or a ?ref= code, or from another website, the page notes those tags, the referring site’s name (not the full address) and the page you landed on, in your browser tab’s session storage. The browser deletes it when you close the tab. A download link then carries the source and campaign name, and if you buy, the checkout carries the whole note, so we can see which campaigns lead to purchases.
• Downloads. The licensing service counts downloads per day by source and campaign. It doesn’t store your IP address with them.

Cloudflare, which serves the website, keeps its own short-lived operational and security logs.

On the download page you can ask us to email you the download link, for example when you’re on your phone. We use your address to send that one email. If you arrived through a tagged link, the emailed link carries the same source and campaign, so we can see which campaigns lead to downloads.

If you also tick “Send me occasional updates”, you join our updates list: occasional emails about new versions and new guides. Every email has an unsubscribe link and our postal address, and unsubscribing takes one click.

• If you only ask for the link. We keep no list of who asked. The licensing service holds your address, encrypted, only until the email is sent: normally a minute, and never more than about a day. A keyed hash of it limits repeat requests and expires after a day.
• If you tick the updates box. Your address is stored with Resend, our email provider, as a contact on our updates list. When you unsubscribe, it stays there marked as unsubscribed so you aren’t emailed again. Write to us to have it deleted completely.

Scanning is read-only. Ask Disk Whisk can’t invent paths, run commands, authorize automation or start a cleanup. A cleanup happens only after you review a fixed plan and approve it, and approved items move to the macOS Trash, where they stay restorable from History until the Trash is emptied.

Some actions you confirm are permanent: removing container images and stopped virtual machines through their own tools, Empty Trash, and Maintain’s optional final removal, which applies only to exact items Maintain moved to the Trash at least seven days earlier. Maintain is off by default, and automatic cleanup needs separate authorization, advance notice and fresh safety checks. Compressing rewrites files in place without changing their contents, and Uncompress reverses it.

Optional personal-folder and Trash scans may trigger macOS permission prompts. If you say no, the rest of the scan still works. Full Disk Access is optional too: with it, Disk Whisk can also size Mail, Messages and other app data, and scans still only read. You can change permissions in System Settings, and manage exclusions, History, Storage Story, Maintain, update checks and your DeepSeek key in Disk Whisk’s Settings.

Uninstalling Disk Whisk does not empty the Trash. After quitting the app, its local data can be removed from ~/Library/Application Support/DiskWhisk along with its preferences.

Under the GDPR and the UK GDPR, we rely on these legal bases:

• Contract: to sell you Pro, deliver and recover your key, activate and check licenses, run your optional account, and answer your support emails.
• Legal obligation: to keep payment, tax and accounting records.
• Legitimate interests: to prevent abuse and fraud, including rate limits and stopping trial resets; to offer update checks; and to understand, in aggregate and without cookies, how people find and use the website and which campaigns work. You can object to these at any time.
• Your choice: Ask Disk Whisk sends anything only after you add your own DeepSeek key and ask a question; remove the key to stop. We email the download link only when you ask, and send updates only if you tick the box; unsubscribe to stop.

• Purchases and licenses: while the license exists, then as long as tax and accounting law requires, typically six to ten years depending on the country.
• Activations: until the Mac is deactivated or released after 45 days without a connection.
• Trial records: the keyed hash, for as long as we offer trials, so the same Mac can’t start a new one.
• Accounts: until you ask us to delete yours.
• Verification codes and rate-limit buckets: minutes to hours, then they expire.
• Download-link requests: your address until the email is sent, about a day at most.
• The updates list: until you unsubscribe, then marked as unsubscribed so you aren’t emailed again, unless you ask us to delete it.
• Support emails: while we help you, then up to two years.
• Website analytics and download counts: kept only as totals.

We share personal data only with the providers who run Disk Whisk for us, under data processing terms, and only for that purpose: Stripe (payments), Supabase (sign-in and the licensing database), Resend (email and the updates list) and Cloudflare (the website, the network in front of the licensing service, analytics and backups). If you choose Continue with Google, Google is involved in that sign-in under its own terms.

These providers may process data in the United States and other countries outside the UK and the European Economic Area. Where they do, the transfer is covered by safeguards such as the European Commission’s standard contractual clauses, the UK addendum to them, or the EU–US Data Privacy Framework.

DeepSeek is different: it receives data only if you add your own key, and the request goes from your Mac to DeepSeek in China directly, under your agreement with DeepSeek. There is no adequacy decision for China, and we have no contract with DeepSeek covering your data, so please consider this before adding a key.

You can ask us for a copy of your personal data, to correct it, to delete it, to restrict or object to how we use it, or to receive it in a portable format. Where we rely on your choice, you can withdraw it at any time. Write to hello@diskwhisk.com, ideally from your purchase email, and we’ll reply within one month. We may need to confirm it’s you first, for example with a code sent to that address.

Some records, such as payments, must be kept for tax and accounting even after you ask us to delete your account. Deleting your account doesn’t remove a purchase or a Mac’s activation. Nothing on your Mac is affected by these requests; you control it in the app.

If you’re unhappy with how we handle your data, please tell us first so we can put it right. You also have the right to complain to a data protection supervisory authority, in particular where you live or work: in the UK, the Information Commissioner’s Office (ico.org.uk); in the EU and EEA, your national data protection authority, listed by the European Data Protection Board (edpb.europa.eu).

Disk Whisk isn’t aimed at children under 16, and we don’t knowingly collect their personal data. If you think a child has given us personal data, write to us and we’ll delete it.

We’ll update this notice when Disk Whisk changes, with a new date above. Any new analytics in the app, an additional AI provider, or broader sharing of data would need an updated notice first and will never be turned on silently.