Privacy, by design

Privacy policy

A clear account of what we handle, and what we don’t.

Updated November 12, 2026 · App and website

The app works on your Mac

CmdFlick recognizes a double tap on Command locally and opens the system Spotlight application. CmdFlick itself does not connect to the internet, require an account, or include advertising, analytics, or tracking services.

We do not collect or upload personal data through the CmdFlick app. The app does not read your Spotlight queries or results.

Why Input Monitoring is needed

Input Monitoring allows the app to recognize the gesture while another app is in the foreground. To distinguish taps from ordinary shortcuts and rule out accidental triggers, the app processes necessary key codes, modifier states, mouse states, and event times in memory.

CmdFlick does not extract typed text, save sequences of keystrokes, log keyboard content, or upload input data. Monitoring is read-only: the app does not suppress, modify, or synthesize keyboard or mouse input.

You can revoke permission in System Settings → Privacy & Security → Input Monitoring. Global input is not monitored without permission or while the feature switch is off. Monitoring stops when you turn the feature off or the app’s process actually ends. With the feature switch on, Close in the control window only hides the window and Dock icon; background monitoring continues. While the system’s Secure Input is enabled, gesture monitoring pauses without bypassing that protection.

Local settings and launch at login

The app stores settings only in its own local container. The feature switch starts off on first use. Changes take effect immediately and are remembered for future launches. Launch at login is a separate switch, off by default. Turning it on or off immediately updates the setting, managed by the macOS login item service. macOS may request further approval.

To stop monitoring and end the app, turn the feature off, then click Close. This does not disable launch at login. To disable that too, turn off Launch CmdFlick when I log in. Login launches silently use the remembered feature state. No separate daemon restarts the app.

Spotlight is a system service

CmdFlick opens the system Spotlight app. It does not provide search or read subsequent queries or results. Spotlight’s features and data handling are managed by Apple and your macOS settings.

This website and external links

This website consists of static pages, without accounts, submission forms, ads, tracking pixels, third-party fonts, or page analytics scripts. The pages themselves do not set cookies or store visit records in your browser’s local storage.

The website runs on a server managed by the project maintainer and uses Cloudflare for content delivery and network protection. Server access logs, error logs, and operational statistics may contain network addresses, browser information, request paths, times, and status codes for operation, troubleshooting, and security. Retention follows the server and relevant network services’ log-management policies. These requests are separate from CmdFlick’s on-device input processing.

Cloudflare processes request data needed for its services. Certain security or traffic-management features may use necessary cookies. See Cloudflare’s privacy policy and cookie information. The app’s no-collection statement does not mean website requests create no technical logs or involve no network-service processing.

GitHub links and a future Mac App Store link lead to external services. Their own privacy policies apply when you visit them.

Contact and policy updates

This website and the open-source project are maintained through hoythan / CmdFlick. Contact: GitHub Issues ↗

Do not include private information in a public issue. We will update this page and its date when the app or website’s data practices change.