Security and privacy

What Gaze stores on your Mac, when it uses the camera, and its security limits.

Stored on this Mac

Your face is not an encryption key. Recognition decides when Gaze may submit your saved password. You can use recognition-only mode without enabling automatic unlocking.

Face data

Your face measurements are encrypted with a key generated inside and confined to this Mac's Secure Enclave. Only encrypted data is stored on the Mac, and the key never leaves the enclave. Camera frames are processed locally; no image is stored and nothing is uploaded.

Saved password

If you enable automatic unlocking, Gaze stores an encrypted copy of your password on this Mac, never synced and never sent anywhere. After the configured recognition and movement checks pass, it decrypts and submits that password to macOS.

Portraits

Optional portraits you choose are kept as local image files, outside the encrypted vault. They are not uploaded or used to recognize you.

Camera access

Setup, recognition tests, and automatic unlocking can use the camera. Optional walk-away locking checks for your presence while the Mac is idle. You control these features in Settings.

See the unlocking flow

Security limits

Gaze uses a regular camera. Movement prompts and spoof checks can still be fooled by photos or replay; they do not provide Face ID’s depth sensing.

Your Mac password remains available. After a restart, sign in normally so Gaze can start.