Keys stay on your Mac.
Effective 26 September 2026
A. Short version
Your API keys are stored in the macOS Keychain, on your Mac. Claude Keychain does not require an account to use. The app has no analytics and no crash reporter. It makes three kinds of outbound requests: a lookup of a small icon for a service you add a key for, a periodic check for app updates, and a periodic check that your license is still active. None of these ever includes a secret's name or value.
B. What the app reads and writes on your Mac
The macOS Keychain. Each secret is stored as its own Keychain item, under the service name claude-vault, holding the value you typed in. This is the only place a secret's value is ever written.
~/.claude-vault/index.json. The name of each secret and its metadata: when it was added, when it was last used, and its cached icon. Never the value.
~/.claude-vault/audit.log. A record of when a secret was used and what triggered it, the app's own interface or a command run through Claude Code, including that command's name. Never the secret's value.
~/.claude-vault/settings.json. Your preferences: how long a copied secret stays on your clipboard, the app's accent color, whether you've finished setup, and a license key field. All of it stays in this file, in plain text, on your Mac; nothing in the app's current code reads this file over the network.
~/.claude-vault/icons/. Cached icon images for the services you've added keys for.
~/.claude-vault/server.log. The background server's own startup and error log. It does not write secret values to this file.
~/.claude/CLAUDE.md and ~/.claude.json. When you connect Claude Code, Claude Keychain edits these two files, which belong to Claude Code, to register itself and add one instruction telling Claude Code to check for a stored secret before asking you to paste one.
A login item. Created only if you turn on "Open at Login" in Settings.
Claude Keychain does not ask for access to your camera, microphone, documents, or screen recording, and its app permissions do not request any of them. Revealing a secret can ask for Touch ID or your Mac password first; that prompt is handled entirely by macOS, and Claude Keychain only ever receives a yes or no, never your fingerprint or password.
C. Network
Claude Keychain makes three kinds of outbound requests, and nothing else.
Icon lookup. When you add a secret, or set its icon manually, it asks a public icon service for a small logo matching the service's guessed domain (for example, a secret named STRIPE_KEY sends a request for stripe.com's icon, not the secret's name or value). That request is cached, so the same secret does not trigger it again. If you're offline, adding a secret still works; it just won't have an icon yet.
Update check. The app periodically checks whether a newer version is available. This request contains the app's current version number and nothing else; it never includes a secret's name or value.
License check. If you bought Claude Keychain, the app periodically checks that your license is still active, so a refunded or cancelled purchase eventually stops working. This request contains your license key and a hardware identifier for your Mac; it never includes the name or value of any secret you've stored. This check happens whether or not you use the app to run any commands with a secret.
Beyond these three, the app does not run any analytics or crash-reporting software. If a future version adds anything else, this page will say so before that version ships.
D. Buying
Purchases are handled by Lemon Squeezy, our payment processor and merchant of record. We do not receive or store your full card number. After a purchase, we receive what Lemon Squeezy provides: your email address, name, the plan you bought, the date, and your tax country. Lemon Squeezy's own handling of your payment details is covered by their privacy policy.
E. Email
There are two kinds of email, and buying only ever gets you one of them.
Transactional. Your license key, the download link, receipts, refund and claim confirmations, and replies if a license stops working. Buying implies these; there is no way to opt out of them and still receive a working purchase.
Marketing. Launch announcements, other apps, tips, and anything else that isn't required to fulfil your purchase. Claude Keychain does not currently send marketing email, and buying does not add you to a marketing list of any kind. If that changes, checkout will show a separate, unticked box, "Email me about Claude Keychain and other apps," and only ticking it will sign you up. Every marketing email will carry an unsubscribe link, honored the same day it's used.
F. If Claude Keychain is sold or transferred
If the business changes hands, customer emails, names, order history, and license records may transfer to the new owner, so purchases keep working and support continues. If you had opted into marketing email, that consent transfers with it, under these same rules, not new ones. Your API keys are a different matter entirely: they live in the macOS Keychain on your Mac, not in any database we hold, so there is nothing of that kind to transfer or sell. We will not describe a sale as anything to do with your secrets. This page, or a direct email, will be updated if a transfer happens. You can ask us to delete our copy of your email or order data at any time, aside from what we're required to keep for tax or fraud records.
G. This website
This site uses Cloudflare Web Analytics, a cookie-free page-view counter; it doesn't use cookies, doesn't build a profile of you, and can't track you across other sites. We don't run any other analytics, advertising pixel, or tracking script. Checkout is provided by Lemon Squeezy; while our own checkout flow is still being finished, buttons on this site currently open an email instead of a live checkout, so no payment processor script runs on the page yet.
H. The "get the month back" claims inbox
Claiming that offer means emailing us a link to your post, a screenshot of its view or impression count, and the email address you used at checkout. We use that only to verify the claim, and keep it for as long as needed to resolve it and to keep the records a payment like this legally requires, then remove it.
I. Your rights and how to reach us
You can ask what we hold about you, and ask us to delete it, at the address below. We can delete what's in our own records, emails, order history, claim submissions; we cannot delete anything already stored in your own Mac's Keychain, that's yours to remove at any time from within Claude Keychain or Keychain Access. A person reads and answers privacy requests sent to [email protected].