gmacFTP Privacy Policy

gmacFTP 2 is a native FTP, FTPS and SFTP client for macOS. The app contains no advertising, analytics, profiling or user tracking.

The app connects only to addresses and ports selected by the user. GMAC does not operate a user-account service or a server through which files are routed.

gmacFTP stores connection profiles, server and place ordering, workspace settings and the transfer queue journal on the Mac. Profiles do not contain secrets.

FTP passwords and SSH key passphrases are stored in the macOS Keychain. They may be marked synchronizable so Apple's iCloud Keychain can move them between Macs using the same Apple Account. The app does not write them to profile JSON, transfer logs or its own iCloud KVS.

Private SSH keys remain at the location selected by the user. The app uses a security-scoped bookmark and does not copy the key into its own data directory. SFTP host-key fingerprints are stored locally in the app's known_hosts.

Optional synchronization uses iCloud Key-Value Store for connection profile metadata only: identifier, name, protocol, host, port, user, path and connection settings.

gmacFTP does not send private keys, host keys, files, sandbox bookmarks or directory contents to iCloud KVS. Passwords and passphrases are handled by Apple's iCloud Keychain. Profile deletion uses a time-limited tombstone so it is not restored on another Mac.

Plain FTP does not encrypt login or file data. The app warns about this and requires an explicit choice. FTPS validates the certificate and SFTP verifies the host key before authentication.

File data is transferred between the Mac and the server selected by the user according to the chosen protocol. It is not sent to GMAC or automatically to analytics services.

Imports from gmacFTP 0.3.x, FileZilla, ForkLift 2, Cyberduck, Transmit and ~/.ssh/config happen only after the user selects a file or folder. Imported metadata is stored locally; secrets are placed in the macOS Keychain after the required consent.

Folder bookmarks are used only to restore access granted by the user through the system file-selection panel.

Errors, the transfer queue and diagnostic logs are local. The app does not automatically send them to GMAC. Users may voluntarily provide a redacted support report.

Profiles can be removed in the app and their corresponding secrets can be removed from Keychain. Local app data and iCloud synchronization can be cleared in system settings. Data stored on a remote server remains under its owner's control and must be deleted separately.

Questions about gmacFTP and privacy can be sent to kontakt [at] gmac [dot] pl . This policy may be updated when the app's features or legal requirements change; the date above identifies the current version.

gmacFTP does not include an SSH agent. Private keys are selected through the macOS system panel and passphrases are handled by Keychain.