Privacy notice · version 1.0 · November 5, 2026
MyMole works on your Mac and nowhere else.
MyMole scans folders you let it see, shows what it found, and removes only what you choose. It makes no network requests, has no account, no sync and no telemetry. Nothing it reads or records leaves your Mac.
What MyMole reads
Scans read file names, sizes, dates and kinds in your home folder, Applications and, if you include it, the startup disk. Uninstall reads app bundles' identifiers and signatures to match their leftovers. Live Status reads CPU, memory, volume, throughput, battery and process counters from macOS. Projects reads the paths that Codex, Claude Code and Xcode recorded for a project so their data can be tied to it. File contents are not read beyond what is needed to recognise a kind, and are never stored.
What MyMole stores
MyMole keeps scan results, the last 30 Disk Map snapshots of each folder, your keep lists, settings and a history of its moves to the Trash, as counts and sizes only, in its own local support folder. These files are for the app's own use on this Mac. You can remove them with your own device controls.
Folder access and Full Disk Access
MyMole asks once for Full Disk Access so macOS does not prompt for every protected folder a scan touches. The App Store edition first asks for the folders it may work in and keeps them as security-scoped bookmarks on your Mac. Both grants can be withdrawn in System Settings at any time; MyMole then shows what it can no longer read instead of pretending the folder is empty.
The privileged tool (direct edition)
System Clean, Optimize's administrator tasks and the removal of uninstalled apps' system-wide leftovers run through MyMole's privileged tool. macOS asks for an administrator's password in its own prompt, once per request, and runs the tool as root with the request as its one argument. MyMole never sees or stores the password. The tool does only what the request lists, checks every path against its own rules again, removes nothing still installed, and exits. Nothing is installed or left running.
What is never removed
Keychains, SSH and GPG keys, Time Machine backups and the folders holding them are never moved. Tool caches holding sign-in tokens are not offered. Source files, git history, files Git tracks and an agent worktree's uncommitted work are never offered by Projects. Your own files go to the Trash with Undo; only root-owned system caches are deleted for good, after your confirmation and password, and the confirmation says so.
Support
MyMole's support action opens this website's support form or an email draft in your own mail app; you review and send it yourself. Nothing about your files, scans or paths is attached. For privacy questions, use the support form and select MyMole.
This website
The MyMole product page uses first-party site analytics for page views, link actions and broad engagement ranges. The site tracker uses no cookies or persistent visitor identifier and has no connection to the app. This privacy notice page does not load that tracker.
Changes and contact
We will update the version and date above when this notice changes. For privacy questions, use the support form and select MyMole.