What Greypaint reads. Greypaint reads application metadata already stored on your Mac, such as an app's name, bundle identifier, installed version, and update-feed settings. It also contacts public update sources you have enabled: appcast feeds, Homebrew, GitHub Releases, and Apple's App Store lookup service.
What leaves your Mac. Greypaint sends ordinary requests to those public update sources so it can compare versions and download updates you request. When you activate or periodically validate a paid license, Greypaint sends your checkout email, license key, and an anonymous installation identifier to Greypaint's entitlement service. It does not upload your app list, file contents, browsing history, or personal documents. The macOS app has no ads and no tracking.
Anonymous update results (optional). If you turn on Share anonymous update results in Settings → General, after each app update Greypaint sends PostHog the app's bundle identifier, where its update came from, whether it worked and passed Greypaint's checks, the Greypaint version, and, if it failed, one short reason from a fixed list (such as "the app was open" or "the download failed"). It never sends the app's name or versions, error messages, your app list, or anything about you or your Mac. Each result gets a new random ID, with no person profile and no location, and PostHog doesn't keep the internet address it came from, so results can't be linked to each other or to you. For people updating from Greypaint 1.2, the What's New screen shows this choice with its box ticked, and closing the screen with it ticked turns it on. New installs ask once, after a few updates. You can turn it off at any time in Settings → General.
Website analytics. The Greypaint website uses Vercel Web Analytics, PostHog and DataFast to understand page visits, download clicks, and checkout-button clicks. PostHog autocapture and session recording are disabled, and Greypaint does not send support messages, license details, or payment information to PostHog. This website analytics is separate from the macOS app, which sends nothing unless you turn on anonymous update results.
Support messages. If you submit feedback from Greypaint's Settings or the support website, the name you provide, reply email, message, optional attachments, and relevant app version are sent through Resend to Greypaint's support inbox so we can investigate and reply. Greypaint does not attach or send your app list automatically.
App reports. If you use "Not working?" on the Apps page, the app you picked, what you chose was wrong, what you wrote, and the email you give (optional) are sent to Greypaint's developer and kept in a private spreadsheet to fix coverage. Nothing else is collected with it.
Payments and licensing. Lemon Squeezy processes purchases as Greypaint's merchant of record and handles payment details, tax, receipts, and fraud checks under Lemon Squeezy's privacy policy. Greypaint does not receive or store your full card details. The entitlement service uses your license information only to issue and validate your lifetime license.
Local data. Preferences, the last scan, update logs, trial state, license activation, and rollback copies are stored locally in macOS application-support, cache, and Keychain locations. You can remove rollback copies from Finder or by uninstalling Greypaint.
Notifications. If you allow notifications, Greypaint creates local security-update notifications. The notification permission is controlled by macOS.
Third parties. Updates are hosted by the source that publishes them. When you choose an App Store or release-notes link, macOS opens that third-party destination. Their own privacy policies apply there. Software attributions are listed on the Licenses page.
Contact. For privacy questions, email hello@greypaint.app.
Last updated: October 2, 2026.