CleanYourMac

A free, open-source, native macOS app that reclaims disk space, wipes privacy traces, uninstalls apps cleanly, and audits your security posture — and shows you everything before it touches a single file.

---

CleanYourMac is an open-source alternative to CleanMyMac, rebuilt as a real native SwiftUI app — not Electron, not a shell script. It reclaims disk space, clears privacy traces, uninstalls apps down to the last leftover, and checks your security posture, without ever deleting anything you didn't review. MIT-licensed and free forever: no subscription, no account, no upsells.

Not affiliated with MacPaw. "Open-source alternative to CleanMyMac" is a nominative reference only.

Install

Download the latest version from Releases:

• CleanYourMac-<version>.pkg (recommended) — a standard macOS installer that puts CleanYourMac in /Applications.
• CleanYourMac-<version>.dmg — classic drag-to-Applications disk image.

Requires macOS 14 (Sonoma) or later; universal binary (Apple silicon + Intel).

This is an ad-hoc-signed open-source build (no paid Apple Developer ID), so macOS will ask you to confirm the first launch: System Settings → Privacy & Security → Open Anyway. You can verify your download against the release's SHA256SUMS.txt.

Build from source (Xcode 15+):

git clone https://github.com/Anthony-Pan/CleanYourMac.git
cd CleanYourMac/app
./release.sh   # → dist/CleanYourMac-<version>.{dmg,pkg}

Why CleanYourMac

• Open source & free — no subscription. MIT-licensed and genuinely free, with no account and no pushy upsells. Read the code, fork it, trust it — instead of paying ~$40/yr for a cleaner you can't inspect.
• Truly native. Real SwiftUI with a frosted-glass sidebar and a restrained, editorial "obsidian" aesthetic — a Mac app that feels like it belongs on the Mac.
• Honest by design, no dark patterns. Nothing is deleted without your review, totals are real, and disruptive actions are opt-in. Every privacy item carries an honest impact note like "Signs you out" or "Clears your command history."
• Safety by architecture. A fixed allowlist, a protected-path denylist, symlink canonicalization, and a minimum-depth guard mean it physically cannot target your home folder, your documents, or "/". Everything goes to the Trash, reversibly.

Features

1. Smart Scan — One click runs every module concurrently, then presents the findings for you to review. Nothing is deleted without your approval, and the totals are honest.

2. System Junk — Reclaims disk space from user caches (~/Library/Caches), application logs, Xcode DerivedData, and developer-tool caches (npm / Gradle / CocoaPods). Everything it clears is user-owned, requires no sudo or root, and is safely regenerated by the system.

3. Uninstaller — Removes an app and all its leftovers: Application Support, caches, preferences (+ByHost), containers, group containers, saved state, logs, web storage, WebKit data, cookies, launch agents, and application scripts. Each match carries a confidence level — HIGH (exact bundle identifier) or MEDIUM (matched by app name; review before removing) — and it refuses to touch Apple/system apps.

4. Large & Old Files — Surfaces large and old files so you can review and clear what you no longer need.

5. Privacy — Two things in one:

• Trace clearing across Safari, Chrome, Edge, Brave, Vivaldi, Firefox, Arc, Opera, Opera GX, Chromium, and auto-detected Electron apps — plus macOS subsystems like Recent Items, the QuickLook thumbnail cache, saved window state, the download "where-from" quarantine DB, shell/Terminal history, and crash & diagnostic reports. Every item has an honest impact note, and disruptive items (cookies, site data, open sessions, window state, shell history) are opt-in, not on by default.
• Security & privacy audit that flags real misconfigurations: Remote Login (SSH) enabled, Screen Sharing on, File Sharing on, Firewall off, FileVault off, Mac analytics sharing on, Guest user enabled, AirDrop discoverable by everyone, world-readable SSH private keys / AWS credentials / ~/.netrc, and secrets possibly sitting in your shell history.

6. Mail Attachments — Reclaims the local copies Apple Mail keeps of attachments you've opened or saved. The originals stay with the messages, so the copies are safe to remove — and they go to the Trash, recoverable like everything else.

7. Trash Bins — Reviews what's sitting in your Trash, ranked by size, so you can empty just the big stuff. This is the one module where removal is genuinely permanent (the items were already deleted once), and the UI says so in plain words before you confirm.

8. Optimization — A read-only review of what launches at startup: your launch agents, system-wide third-party agents, and daemons — with run-at-load and disabled flags, reveal-in-Finder, and a shortcut to the Login Items system settings. It never changes anything.

9. Maintenance — Runs a fixed set of safe, no-sudo refreshers: flush the DNS cache, rebuild the Launch Services database (fixes duplicate "Open With" entries), reset the Quick Look thumbnail cache, and relaunch Finder or the Dock. Fixed commands with fixed arguments — never a shell, never your input.

10. Space Lens — A read-only folder-size explorer: scan your home folder, see every file and folder ranked by size, and drill into subfolders with a breadcrumb trail. It only looks; it never deletes.

Safety

Safety isn't a checkbox here — it's the architecture. Four guardrails work together so the app physically cannot delete the wrong thing:

• Declarative allowlist. Cleanable locations are a fixed, known-safe list — never derived from the items being deleted. If a path isn't on the allowlist, it's off-limits, full stop.
• Protected-path denylist. Certain paths are never touched: /, /System, /Library, /usr, /Applications, and your whole home directory — including Documents, Desktop, Downloads, Movies, Music, Pictures, Mail, Messages, Keychains, Photos, and Application Support.
• Symlink canonicalization. Every path is fully resolved before any action, so nothing can use a symlink to "escape" an allowed root and reach a protected one.
• Minimum-depth guard. A path has to be deep enough to be a real, specific target. The app can never aim at something shallow and catastrophic like / or /Users/me.

On top of that: everything moves to the Trash (reversible, not a permanent delete) — with one honest exception: the Trash Bins module, whose entire job is emptying the Trash, and which says "permanent, not recoverable" before you confirm. The app never removes passwords, autofill or saved cards, bookmarks, personal documents, photos, or keychain data. This model is honest and has been adversarially reviewed — because honesty is the brand.

What it does not do: no virus scanning or malware removal (there is no antivirus in this app), and no "speed up your Mac / free your RAM" magic. The value is real and bounded: reclaim disk space safely, clean privacy traces, uninstall cleanly, and check your security posture.

Built by Onyx

CleanYourMac is built by Onyx, an independent studio. Intelligence, cut & polished.

It started as a project by a middle-school student and is now carried forward by Onyx as a native, open-source app.

---

清理你的 Mac，只删你同意的 — 免费、开源、原生 SwiftUI，完整支持 English 与简体中文。