Privacy & security

What leaves your Mac, and what never does.

Every tool page on this site makes the same promise. This is the page that shows the work behind it, including the one tool that does upload and why.

Sixteen tools never send anything. One does, and it is the one whose job that is.

That split is not a policy we could quietly change — it is how the app is built. One module is marked as cloud in the catalogue. The other 16 are not.

Never leaves your Mac

16 of the 17 tools. The file is read, worked on and written back, all on your machine.

  • Remove Background. The model ships inside the 294 MB download and runs on your Mac, on the CPU and GPU.
  • Find Duplicates. Hashing happens locally; only file sizes and contents are compared, and only on your disk.
  • PDF Merge, Compress, Convert, Resize, Strip Metadata, OCR. Apple frameworks and bundled binaries, nothing remote.
  • Audio to MP3. The lame encoder is in the app bundle. No upload, no queue.

Uploads, on purpose

Upload & Share. Sending a large file to someone means putting it somewhere they can reach — every tool that does this uploads.

  • It runs only when you pick it from the menu. Nothing is uploaded in the background, ever.
  • Files go to Cloudflare R2 and the link expires on its own: 3 days on Free, 30 on Pro, 60 on Pro+.
  • When the link expires the object is gone. There is no archive to ask us about.
  • Its own page says so at the top, in the hero, rather than in a footnote.

Then why does it need the network at all?

Three honest answers. None of them involves your files.

Your account

Ricly checks that you are signed in and which plan you are on. That check is what keeps the free ceilings honest — a count that only lived on your Mac would reset with a reinstall.

Your monthly counts

Tools with a free ceiling report that a run happened. The count is mirrored server-side for the same reason: so that reinstalling does not hand out a fresh allowance.

Usage events

If telemetry is left on, the app sends an event name, a random per-event id, an anonymous account token and a timestamp — for example find_duplicates_cleanup_done. No filename, no path, no file content, ever. It can be switched off in the app.

Updates

The app asks a release feed whether a newer version exists. That request contains the version you have, nothing else.

What Apple checked, and what we did on top.

Notarised by Apple

Every release is submitted to Apple and scanned before it ships. That is why the app opens without the warning that unsigned software triggers.

Signed device requests

Requests from the app to our servers carry a device signature. A stolen token on its own is not enough to act as you.

Your originals are never replaced

Every tool writes a new file beside the source. If a name is taken you get a numbered one. A failed run leaves nothing half-written.

Nothing is ever hard-deleted

Find Duplicates moves copies to your Trash, through the same system call Finder uses. Emptying it stays your decision.

The formal version of all of this lives in the Privacy Policy. This page is the same thing in plain English — where the two ever disagree, the Privacy Policy is what binds us.

Right Click. Done.

17 file tools in the Finder menu. 16 of them never send a byte anywhere.

Download for Mac Read the Privacy Policy

Free account, no card · macOS 13 or later · Notarized by Apple

Send the link to your Mac.

Ricly is a Mac app. Drop your email and we send the download link — nothing else.

We email you the download link, plus one reminder if you have not installed. Nothing else, and we delete your address after that. · Free · macOS 13 or later · 294 MB

Or copy the download link ·