EasyHomebrew
Privacy Policy
Last updated: 01.06.2026
EasyHomebrew values your privacy and is committed to explaining clearly how information is handled when you use our macOS application.
This Privacy Policy explains how WIZHUT TECH SINGLE MEMBER P.C., operating under the name Wizhut.tech ("Wizhut.tech", "we", "us", or "our"), processes information in connection with your use of the EasyHomebrew macOS application, including the main application and the menu-bar agent (the "App").
This Policy applies only to the App. It does not apply to the wizhut.tech website or to any other product, service, or website operated by Wizhut.tech, which may be governed by separate privacy notices.
By installing or using the App, you acknowledge that you have read and understood this Policy. If you do not agree, please uninstall the App.
1. Who we are
For the purposes of the General Data Protection Regulation (EU) 2016/679 ("GDPR") and other applicable data protection laws, the data controller is:
- Controller: WIZHUT TECH SINGLE MEMBER P.C.
- Trading name: Wizhut.tech
- Registered address: 52 Artis, Agios Dimitrios, Athens, Attica, Greece
- Contact email: privacy@wizhut.tech
You may contact us about privacy matters at the email address above. If you have any questions about this Policy or about how the App handles information, you may contact us at the email address above.
2. What the App does
EasyHomebrew is a macOS application designed to make Homebrew easier to use. Homebrew is a package manager commonly used by developers and advanced Mac users to install, update, remove, and manage software packages and development tools.
The App provides a graphical interface and related features for discovering, managing, updating, and understanding Homebrew packages on your Mac. The App is designed to minimise data collection and to perform key functionality locally on your device wherever reasonably possible.
3. Our approach to privacy
The App is designed according to the following principles:
- We do not require you to create an account.
- We do not collect your name, email address, password, Apple ID, or account credentials through the App.
- We do not receive the names, versions, or identifiers of Homebrew formulae, casks, or taps that you install, uninstall, upgrade, browse, or search for.
- We do not receive your search queries.
- We do not receive file paths, file contents, terminal output, Brew Doctor warnings, or data from your home directory,
/usr/local, or/opt/homebrew. - Several App features run locally on your Mac.
- Diagnostic and usage data, where enabled, is limited and may be turned off in the App settings.
4. Information we process
4.1 Diagnostic and usage events
Subject to your App settings, the App may transmit limited diagnostic and usage events to us. These events are short, structured records that help us understand the performance, reliability, and general use of the App.
A diagnostic or usage event may include:
- the event name, such as app launched, tab opened, install attempted, upgrade succeeded, or setting changed;
- whether the event was emitted by the main App or the menu-bar agent;
- the App version;
- the macOS version;
- the user interface language;
- for launch and update-check events, limited cohort information, such as whether the launch is a first launch, whether Apple Intelligence is available, and a broad bucket describing how many packages are installed, for example none, few, many, or a large number.
These events are used for product improvement, stability monitoring, compatibility planning, and quality assurance. They are not used to identify individual users.
4.2 App instance or session identifier
Diagnostic and usage events may be associated with a randomly generated App instance or session identifier. The identifier is not derived from your name, email address, device name, Apple ID, Homebrew package list, or other directly identifying information.
We use this identifier only to understand whether certain events relate to the same App instance or session, to measure basic reliability and usage patterns, and to avoid counting the same activity incorrectly.
We do not use this identifier to identify you, profile you, track you across other apps or websites, or combine it with information that would allow us to identify you.
4.3 Information we do not collect through the App
The App does not transmit any of the following to us:
- the names, versions, or identifiers of Homebrew formulae, casks, or taps you install, uninstall, upgrade, or browse;
- search queries, including queries entered in the Discover view;
- the text of Brew Doctor warnings or other diagnostic output;
- file paths or file contents;
- data residing in
/usr/local,/opt/homebrew, or your home directory; - your name, email address, Apple ID, account credentials, or passwords;
- the contents of your terminal commands;
- the contents of your local project files or repositories.
5. Purposes and legal basis
Where the GDPR applies, we process information for the following purposes and on the following legal basis.
5.1 Providing the App and its core functionality
Some processing is necessary to provide the App functions you request, including checking package metadata, vulnerability information, author information, update information, and related functionality.
Legal basis: performance of a contract / our legitimate interest in providing the App and its requested functionality.
5.2 Product improvement
We use limited diagnostic and usage events to understand which App features are used, which features may need improvement, and which features may be removed or redesigned.
Legal basis: our legitimate interest in maintaining and improving the App.
5.3 Stability, security, and quality assurance
We use limited diagnostic and usage events to detect regressions, identify failed operations in aggregate, investigate reliability issues, and prioritise fixes.
Legal basis: our legitimate interest in maintaining a stable, secure, and reliable App.
5.4 Compatibility planning
We use limited technical information, such as coarse cohort attributes, to inform decisions about minimum macOS versions and Apple Intelligence integration.
Legal basis: our legitimate interest in maintaining compatibility and planning development of the App.
5.5 Legal compliance
Where necessary, we may process limited information to comply with applicable legal obligations or to respond to lawful requests from public authorities.
Legal basis: compliance with a legal obligation.
6. Legitimate interest balancing
Where we rely on legitimate interests, we have considered the nature, scope, context, and purposes of the processing, as well as the potential impact on users.
We consider the processing of diagnostic and usage events to be limited and proportionate because:
- the App does not transmit package names, package versions, search queries, file paths, file contents, account credentials, or terminal output to us;
- the events are structured and limited in scope;
- the events are used only for App improvement, reliability, quality assurance, and compatibility planning;
- you may disable diagnostic and usage events in the App settings;
- we do not use the events to identify you, profile you, or track you across apps or websites.
You may object to processing based on legitimate interests by contacting us or by disabling diagnostic and usage events in the App settings.
7. Your choices and telemetry controls
You may disable transmission of diagnostic and usage events at any time by opening Settings → Privacy → Share anonymous usage data and turning the toggle off.
When this setting is off:
- it takes effect immediately;
- it applies to both the main App and the menu-bar agent;
- it is preserved across App launches;
- diagnostic and usage events are not emitted while the setting remains off.
Where required by applicable law, non-essential diagnostic or analytics features will operate only with your consent.
8. On-device processing
Several App features operate locally on your Mac. Unless otherwise stated, the inputs and outputs of these features are not transmitted to us.
8.1 Discover
The Discover feature uses Apple's on-device NLEmbedding framework to support semantic package search. Search queries entered in the Discover view are not transmitted to us.
8.2 AI homepage enrichment
Where enabled, Apple Intelligence may generate short package descriptions and select screenshots based on public package homepage content. Outputs are cached locally on your Mac for up to seven days.
8.3 AI category classification
Where enabled, Apple Intelligence may categorise uncategorised packages locally on demand.
8.4 Brew Doctor explanations
Where supported by your version of macOS, Apple Intelligence may rewrite Brew Doctor warnings into plain language locally on your Mac. The text of Brew Doctor warnings is not transmitted to us.
8.5 Author lookups, avatars, icons, and local cache
Author information, avatars, icons, and similar visual or metadata elements may be cached locally on your Mac. You may clear locally cached data at any time from Settings → Storage.
9. Third-party services and network activity
The App connects to certain third-party or public infrastructure services to provide core functionality. These connections are made over HTTPS.
The App does not intentionally include your name, email address, account credentials, package list, search queries, file contents, or terminal output in these requests. However, as with any internet request, the third-party service may receive technical information such as your IP address, request metadata, and user-agent or similar technical information. Each third-party service processes such information under its own privacy notice.
The App may connect to the following services:
9.1 Homebrew API
The App may connect to Homebrew public infrastructure and to the 30/90/365-day install analytics published by the Homebrew project.
9.2 OSV vulnerability database
The App may connect to api.osv.dev to match installed packages against published CVEs.
9.3 Public package homepages
The App may fetch public package homepages on demand when you open a package detail view. This is used solely to support the homepage enrichment feature.
9.4 Sparkle update endpoint
The App may use Sparkle or a similar update mechanism to check for new App releases. Standard update requests may include technical information such as the App version and operating-system version.
9.5 Public code-hosting services
The App may connect to public code-hosting services such as GitHub, GitLab, Codeberg, Bitbucket, or SourceHut to retrieve public maintainer avatars, display names, or related public metadata for the Authors view.
10. Service providers and other recipients
We do not sell personal data. We do not share diagnostic and usage events with third parties for advertising purposes.
We may disclose limited information, where necessary, to the following categories of recipients:
- our personnel and authorised collaborators, who access information only on a need-to-know basis;
- infrastructure, hosting, security, email, support, analytics backend, or technical service providers that help us operate and maintain the App and related systems;
- professional advisers, such as lawyers, accountants, auditors, or insurers, where necessary for our legitimate business or legal purposes;
- public authorities, courts, regulators, or law enforcement bodies, where we are legally required to do so or where disclosure is necessary for the establishment, exercise, or defence of legal claims.
Where service providers process personal data on our behalf, we take reasonable steps to ensure that appropriate contractual and security safeguards are in place and that such providers process the data only in accordance with our instructions and applicable law.
We may also use aggregated or de-identified information for internal reporting, product planning, and performance analysis.
11. International data transfers
Diagnostic and usage events transmitted by the App are processed within the European Union or the European Economic Area, unless otherwise stated.
Some third-party services used by the App, including public package infrastructure, vulnerability databases, update endpoints, public homepages, or code-hosting services, may operate globally. When your App connects directly to those services, the request is made from your device to the relevant service, and that service may process technical request information under its own privacy notice.
We do not intentionally transfer personal data that we control outside the European Economic Area unless appropriate safety measures are in place or the transfer is otherwise permitted by applicable law.
12. Data retention
We retain diagnostic and usage events for no longer than fourteen (14) months after collection, unless a shorter period is required by law or unless information is needed for the establishment, exercise, or defence of legal claims.
After the retention period expires, diagnostic and usage events are deleted automatically.
Locally cached data on your Mac (icons, AI-generated descriptions, author look-ups) is retained on your device only and may be removed at any time through Settings → Storage.
13. Security
We implement and maintain appropriate technical measures designed to protect information processed in the App against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or unauthorised access.
These measures may include access controls, security procedures, limited internal access, and reasonable technical safeguards appropriate to the nature and scope of the information processed.
No method of transmission or storage is completely secure. However, the App is designed to reduce privacy risks by limiting the information transmitted to us and by performing key functionality locally on your Mac where reasonably possible.
14. Your rights
Subject to applicable law, you may have the following rights in relation to personal data we process about you:
- the right of access;
- the right to rectification;
- the right to erasure;
- the right to restriction of processing;
- the right to object to processing based on legitimate interests;
- the right to data portability, where applicable;
- the right to withdraw consent, where processing is based on consent;
- the right to lodge a complaint with a data protection supervisory authority.
Because the App is designed not to collect directly identifying information, we may not be able to identify information relating to a particular user unless you provide information that allows us to locate it. We will explain this if you make a request that we cannot fulfil for this reason.
To exercise your rights, contact us at privacy@wizhut.tech.
You also have the right to lodge a complaint with your local data protection supervisory authority. If you are located in Greece, the competent authority is the Hellenic Data Protection Authority. If you are located elsewhere in the EU or EEA, you may contact the supervisory authority in your country of residence, place of work, or place of the alleged infringement.
15. Minors
The App is intended for software developers. It is not directed at children under the age of sixteen (16), and we do not knowingly collect personal data from children.
If you believe that a child has provided us with personal data through the App, please contact us so that we can take appropriate action.
16. Changes to this Policy
We may update this Policy from time to time to reflect changes in the App, our processing practices, legal requirements, or operational needs.
When we make material changes, we will take reasonable steps to notify users, such as by updating the effective date, displaying a notice in the App, or using another appropriate method.
The version of the Policy published at the time of your use of the App applies to that use.
17. Contact
For questions about this Policy, the App's privacy settings, or your data protection rights, you may contact us at:
- privacy@wizhut.tech
- WIZHUT TECH SINGLE MEMBER P.C.
- 52 Artis, Agios Dimitrios, Athens, Attica, Greece