Overview
Grove is a native macOS application for browsing and managing SCIM 2.0 resources. We are committed to protecting your privacy. This policy explains what data Grove handles and how it is stored.
Data Collection
Grove does not collect, transmit, or store any personal data. There are no analytics, no telemetry, no crash reporting services, and no third-party SDKs embedded in the application.
Authentication Credentials
Grove supports multiple authentication methods for connecting to SCIM servers. All sensitive credentials are handled as follows:
- Passwords, tokens, and client secrets are stored exclusively in the macOS Keychain on your local device. They are never transmitted anywhere other than the SCIM server you configure.
- OAuth 2.0 access tokens and refresh tokens are stored in the macOS Keychain and are used only to authenticate with the SCIM server you authorized.
- Keychain items are stored as device-local entries and are not synced to iCloud Keychain.
Connection Metadata
Grove stores connection configuration metadata (connection names, server URLs, authentication type selections, and display preferences) using SwiftData with CloudKit integration. This means:
- Connection metadata syncs across your Macs via your personal iCloud account.
- This data is stored under your own Apple ID and is not accessible to us or any third party.
- No authentication secrets are included in the synced data.
Network Communication
Grove communicates only with the SCIM servers that you explicitly configure. It does not contact any other servers, APIs, or services. All network requests are made directly from your Mac to your configured SCIM endpoints.
Third-Party Services
Grove does not use any third-party services, libraries, or SDKs that collect user data. The application is built entirely with Apple frameworks (SwiftUI, SwiftData, CloudKit, AuthenticationServices, CryptoKit).
Apple Privacy Manifest
Grove includes an Apple Privacy Manifest (PrivacyInfo.xcprivacy) that formally declares:
- No tracking of users across apps or websites
- No collection of user data
- No use of required-reason APIs for fingerprinting
Children's Privacy
Grove is a developer tool and is not directed at children under the age of 13. We do not knowingly collect any information from children.
Changes to This Policy
If we make changes to this privacy policy, we will update the "Last updated" date above. Significant changes will be noted in the application's release notes.
Contact
If you have questions about this privacy policy, please contact us at [email protected].