Privacy Policy

Room Service Privacy Policy

Last updated: October 2, 2026

Room Service is a native macOS app and CLI for scanning storage usage, reviewing reclaimable space, and running cleanup actions on your Mac.

This Privacy Policy explains what Room Service processes, what may be sent to third-party services, and what stays on your device.

The short version

Room Service is designed to work mostly on your Mac. Scans and cleanup workflows run locally. Your scan contents are not uploaded for remote scanning. Anonymous usage signals are sent by default and can be turned off in Settings. Some data may be sent to third-party services for update checks and Pro license verification. Developer Vault data never leaves your Mac. Some data is stored locally on your Mac so the app can remember scans, history, settings, and restore information.

What Room Service processes locally

When you use Room Service, the app may process local information such as file and folder paths, names, sizes, and timestamps, scan results and category groupings, selected cleanup targets and cleanup results, installed app and leftover-file information, startup item information, browser and system trace locations shown in the Privacy workspace, system and performance information shown in the app, and local app settings and preferences.

This information is used to power the app's core features, including scanning, filtering, grouping, cleanup previews, cleanup actions, restore flows, and history.

What Room Service stores on your Mac

Room Service stores some app data locally on your Mac, including recent scan data, cleanup history, quarantine data if you use Quarantine-backed delete flows, app settings and preferences, excluded paths and ignore rules, and scheduled scan and smart alert settings.

If you enable app lock features, your PIN is not stored in plain text. A protected PIN secret is stored in the macOS Keychain. Touch ID authentication is handled by macOS, and Room Service does not receive or store your fingerprint or other biometric template data.

If you activate Pro, Room Service stores the local license state in the macOS Keychain so Pro access can be recognized on that Mac.

Third-party services

Room Service currently uses a small number of third-party services: TelemetryDeck, Sparkle, Supabase, and Gumroad. Each is described below. If Room Service connects to a third-party service, that service may process limited technical, licensing, or purchase-related data as needed for the relevant request.

Anonymous usage analytics (TelemetryDeck)

Room Service sends anonymous usage signals to TelemetryDeck to help improve the app. This is on by default. You can turn it off at any time in Settings, under Analytics, with the "Anonymous Analytics" switch (you can also choose it during onboarding). When it is off, Room Service sends no signals at all, including the signals sent when the app launches, and it does not start the analytics service.

The signals describe what happened, not what is on your Mac. They include: first install and app launch, onboarding completed (with the preferences you chose, such as appearance, language, scan mode, and notification choices), scan started and completed (scan profile and mode, number of categories, and total size found), cleanup preview, started, and completed (deletion mode, whether Quarantine was used, number of items and total size selected or cleaned, number of failures), checkout started or failed, and license session events (such as claim or validation started, succeeded, or failed, with a short reason). Every signal also carries the app build flavor.

Room Service does not intentionally send analytics containing scan contents, file paths, file names, project names, cleanup target names, browser trace contents, file contents, or license keys. TelemetryDeck processes the signals under its own privacy policy.

Update checks (Sparkle)

Room Service uses Sparkle to check for updates in direct-download builds. Automatic update checks are on when the app is built with an update feed. When Room Service checks, it requests the update feed over the internet. As with any web request, that request reveals your IP address to the server that hosts the feed, and the request also identifies the app name and version, the Sparkle version, and the macOS version, as web requests from Mac apps normally do. Room Service does not enable Sparkle's system profiling, so it does not send extra hardware or system details such as your CPU, memory, or display. Update checks are not tied to the analytics switch above.

Pro license sessions (Supabase and Gumroad)

If you activate Pro, Room Service verifies your license with Gumroad and keeps a license session through Supabase. For the session, Room Service sends your license key and a random installation identifier to Supabase, and later sends the session token, the installation identifier, and the sale identifier to confirm that the session is still valid. The installation identifier is a random value created on your Mac and stored in the macOS Keychain. It is not derived from your hardware, name, or files. It is only used for Pro sessions, so if you never activate Pro, nothing is sent to Supabase.

Developer Vault

Developer Vault data stays on your Mac. It is not sent to any service, including analytics.

Permissions

Depending on the features you use, Room Service may request access to Full Disk Access, Notifications, and Touch ID.

Granting a permission allows Room Service to perform the corresponding feature locally on your Mac. It does not, by itself, mean that your scan contents are uploaded to a server.

What Room Service does not do

Room Service does not use your local scan contents for remote scanning or cleanup.

Room Service uses anonymous product analytics and does not use analytics to identify you personally.

Room Service does not intentionally send analytics containing scan contents, file paths, file names, project names, cleanup target names, browser trace contents, file contents, or license keys.

Room Service does not sell your personal information.

Data retention

Most Room Service data stays on your device unless it needs to be sent to a third-party service for a specific function such as analytics, update checks, or license verification.

Local data may remain on your Mac until it is replaced by newer app data, you clear it, you disable the related feature, or you remove the app and its local data.

Third-party retention practices are controlled by TelemetryDeck, Supabase, and Gumroad under their own policies.

Security

Room Service uses macOS and app-level protections intended to reduce risk, including local-first scan and cleanup workflows, user-triggered cleanup actions, confirmation-gated destructive actions, macOS Keychain storage for sensitive local secrets such as app-lock PIN data and local license state, and Touch ID integration through Apple's LocalAuthentication framework.

No software or storage system can guarantee absolute security, and you are still responsible for reviewing cleanup targets before deleting them.

Your choices

You can choose to use Room Service without activating Pro, turn off Anonymous Analytics in Settings, deny optional permissions such as Notifications or Touch ID, decline Full Disk Access with the understanding that some scan results may be incomplete, enable or disable Privacy Mode, PIN protection, and Touch ID unlock, clear your stored Pro license from within the app, or remove the app and its local data from your Mac.

Changes

This Privacy Policy may be updated from time to time. If it changes, the "Last updated" date at the top will be revised.

Contact

If you have privacy-related questions, contact hi@roomservice.pro.