Starcat

Legal

Privacy Policy

Last updated: July 9, 2026 · App Store Version · Contact: dong4j@gmail.com
Starcat for GitHub ("Starcat," "we," "our," or "us") is a native macOS application available on the Mac App Store. This Privacy Policy explains how we handle your information when you use the App Store version of Starcat.

🛡 Our Privacy Pledge

  • We do not collect your GitHub Stars data
  • We do not have access to your API keys
  • We do not sell or share your personal data
  • We do not track your app usage
  • Your data stays on your Mac
  • AI requests go directly to your provider

01 Overview & Scope

Starcat is a local-first macOS application. The vast majority of your data never leaves your Mac. This policy applies to the Mac App Store distribution of Starcat.

Starcat is designed to minimize data collection by default. We believe you should control your data, not us.

Key principle: Starcat does not operate a backend that collects or stores your GitHub data, stars, tags, notes, or AI provider keys. Your data lives on your Mac.

02 Data We Collect

2.1 Information You Provide

GitHub OAuth: When you sign in with GitHub, Starcat receives an OAuth access token with read:user and public_repo scopes. This token is stored locally in your Mac's Keychain and is used only to authenticate GitHub API requests from the app.

AI Provider Keys: If you configure AI features, you provide API keys for your chosen provider (e.g., OpenAI, Gemini, DeepSeek). These keys are stored locally in your Mac's Keychain and are never transmitted to Starcat servers.

2.2 Information Collected Automatically

GitHub Data: When you use Starcat, the app fetches your starred repositories, their metadata (description, topics, language, stars count), README content, and release information from the GitHub API. This data is cached locally in a SQLite database on your Mac.

Starcat Service APIs: The app may request data from Starcat-operated services for discovery features (trending repos, weekly picks, popular repos) and OpenSSF Scorecard data. These requests do not include your personal data, GitHub identity, or API keys.

App Store Receipt Validation: When verifying your Pro subscription, the app communicates with Apple's App Store servers to validate the receipt. This is handled by Apple's StoreKit framework.

03 Data We Don't Collect

Starcat does not collect, transmit, or have access to:

  • Your GitHub Stars list or organization data (tags, notes, status)
  • Your GitHub OAuth token (stored in your local Keychain only)
  • Your AI provider API keys (stored in your local Keychain only)
  • Your app usage analytics or behavior patterns
  • Your README reading history or search queries
  • Crash reports (unless you choose to share via Apple's crash reporting)

04 How Your Data Is Stored

4.1 Local Storage

Your data is stored in the following locations on your Mac:

  • SQLite Database (GRDB.swift): Repository cache, tags, notes, status, settings, and AI summary cache are stored in a local SQLite database in the app's Application Support directory.
  • Keychain: GitHub OAuth token and AI provider API keys are stored securely in the macOS Keychain, encrypted with your login credentials.

4.2 No Cloud Sync

The App Store version of Starcat does not sync your data to any cloud service. There is no Starcat account system, no cloud backup, and no server-side storage of your tags, notes, or organization data.

4.3 Data Export & Deletion

You can export your data at any time via the app's JSON/HTML/Markdown export feature. Deleting the Starcat app from your Mac removes all local data. You can also revoke GitHub OAuth access from your GitHub account settings at any time.

05 How We Use Data

5.1 GitHub API

Your GitHub OAuth token is used exclusively to authenticate requests to the GitHub API for syncing your stars, fetching repository metadata, README content, and release information. These requests originate from the app on your Mac and go directly to GitHub's servers.

5.2 AI Features

When you trigger AI features (summaries, tag suggestions, chat, translation), the app sends the relevant content (e.g., README text) to the AI provider you configured. These requests go directly from your Mac to the AI provider's API using your own API key. Starcat does not proxy, log, or store these requests.

5.3 Starcat Service APIs

Discovery feeds (trending, weekly, popular) and OpenSSF Scorecard requests go to Starcat-operated services. These requests are anonymous — they include no personal identifiers, GitHub tokens, or user data.

5.4 Support Communication

If you contact us at dong4j@gmail.com, we will use your email address only to respond to your inquiry. We do not use support emails for marketing or any other purpose.

06 Third-Party Services

6.1 GitHub

Starcat uses the GitHub API to sync stars and fetch repository data. Your use of GitHub through Starcat is also governed by GitHub's Privacy Statement.

6.2 AI Providers (BYOK)

Starcat supports multiple AI providers (OpenAI, Gemini, DeepSeek, Ollama, and OpenAI-compatible APIs). When you configure a provider with your own API key, requests are sent directly from your Mac to that provider. Each provider has its own privacy policy — please review the policy of the provider you choose to use.

6.3 Apple

Pro subscriptions are managed by Apple through In-App Purchase. Apple processes your payment information and manages your subscription. We do not receive or store your payment details. See Apple's Privacy Policy.

07 Pro Subscription

7.1 Managed by Apple

The Pro subscription is an Apple In-App Purchase. Payment processing, subscription management, renewal, and cancellation are all handled by Apple through your Apple ID. Starcat does not collect or store your payment information.

7.2 Receipt Validation

The app uses Apple's StoreKit framework to validate your subscription status locally on your Mac. Receipt validation communicates with Apple's servers to verify the authenticity and status of your subscription. No personal data is sent to Starcat servers during this process.

7.3 No External Payment

The App Store version of Starcat does not use or support any external payment methods, third-party payment processors, or license key activation systems. All Pro features are unlocked exclusively through Apple In-App Purchase.

08 Your Rights & Choices

8.1 Data Access & Portability

You can export your data at any time via the app's built-in export feature (JSON, HTML, or Markdown format). Since your data is stored locally, you have full access to it at all times.

8.2 Data Deletion

You can delete your data by removing the Starcat app from your Mac. You can also revoke GitHub OAuth access from your GitHub Authorized Applications settings at any time.

8.3 Subscription Cancellation

You can cancel your Pro subscription at any time through your Apple ID account settings (App Store → Account → Subscriptions). Upon cancellation, you will retain Pro access until the end of the current billing period.

8.4 Contact for Privacy Requests

For any privacy-related questions or requests, contact us at dong4j@gmail.com.

09 Children's Privacy

Starcat is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information through the app, please contact us.

10 Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of Starcat after changes constitutes acceptance of the updated policy. We encourage you to review this policy periodically.

11 Contact Us

If you have questions about this Privacy Policy or Starcat's privacy practices, please contact us:

We aim to respond to all privacy-related inquiries within 7 business days.