Local checks.
Clear boundaries.

Files are scanned on your Mac

SafeMac AV launches your configured local ClamAV tools to scan selected locations. It does not upload files, scan results or usage data. An optional local clamdscan service is supported; the app does not configure a remote scanning service.

There are no user accounts, analytics, advertising trackers or telemetry in the app. Scanning only covers the checks and locations performed and cannot guarantee the whole Mac is safe.

Definition downloads & app updates

ClamAV’s freshclam connects to its configured servers to download malware definitions during manual or scheduled updates. The direct edition uses Sparkle to check for and download app updates when configured. Those services receive normal request information, such as an IP address and request metadata.

These update connections are separate from local scanning. The earlier direct edition is no longer available for public download. These notes describe its behaviour for anyone who already has a copy.

Settings, reports & quarantine

Settings and scheduled-job metadata are stored locally in your Application Support directory. Per-user schedules are stored as local LaunchAgent jobs. The default quarantine directory is ~/.clamav-quarantine/; you can choose a different location.

Logs and scan history are held in application memory for the current run. History keeps the latest 200 reports for that session. Reports you export remain in the location you choose. Local state and exported reports may contain sensitive file paths and detection details.

Quarantine is local file isolation, not encryption or a privilege boundary. You control exported reports and quarantined files through their storage locations and the app’s controls.

Access & notifications

The development version and earlier direct edition run outside the macOS App Sandbox. It uses filesystem and process access for scans, configured folder monitoring, quarantine and per-user schedules. Configured executable paths are trusted local settings; use only trusted ClamAV tools.

Local notifications omit file names, full paths, threat signatures, schedule names and raw update errors. Open the app to review details. Notification permission and preferences are managed through macOS and the app’s Settings.

This website & the planned App Store edition

The website’s hosting infrastructure may process normal request information, such as your IP address, requested page, request time and browser user-agent, to serve and secure the site. A website visit is separate from local scanning.

If the planned Mac App Store edition becomes available, Apple will handle purchases and associated account or payment information under Apple’s privacy terms. The store edition’s final setup, features and data handling are not yet confirmed; this page will be updated before its release.

Information you send for support

If you email the support contact, Daniel Graetzer receives your email address and the message, attachments and technical details you include. That information is used to respond and investigate the issue. Do not send malware, personal files or unnecessary scan reports; redact personal paths and usernames from diagnostics.

For privacy questions or a request concerning personal information you have sent, contact dan.graetzer@gmail.com. We will consider your request in accordance with applicable data-protection requirements.

App developer & planned seller

Developer and planned App Store seller: Daniel Graetzer, Spain.

SafeMac AV is independent and is not affiliated with or endorsed by Cisco, Talos or the ClamAV project. ClamAV is a separate project.

SafeMac AV support · About the app

We will update this page if the app’s data handling changes.