Your keys never meet
our servers. We barely have any.
Greenwick is local-first by architecture, not by policy: the app runs on your Mac, talks directly to your broker and your AI provider, and there is no Greenwick cloud in between that could hold your money, your keys, or your trades. This page says exactly what leaves your machine — and what never does.
Your broker API keys and AI keys — stored in the macOS Keychain, referenced by
the app, never written to files, logs, or chat, and never sent to Greenwick.
Your trades, positions, journal, lessons, chats, and settings — in a local
database under your own user account, with local backups.
Your Help questions — the Help assistant runs a small model locally; even if your
trading AI is a cloud model, Help never uses the cloud.
Calls you configured: your broker's API (orders, positions, market data), and —
only if you chose a cloud AI — your AI provider's API under your own key, plus optional web search
under your own key.
License validation: your license key and an install identifier, checked against
our license service.
Update checks: the app fetches a signed update manifest — a standard web request.
That's the whole list. No analytics, no telemetry, no tracking pixels — in the app or on this
site.
How the app protects itself
Password-protected, properly
You set an owner password on first run — stored as an argon2id hash, never plaintext. Every route and connection requires your session; repeated failed logins lock the door. The app can lock itself after inactivity.
Nothing listens to your network
The engine binds to your machine only (127.0.0.1) — it is never reachable from your network or the internet. Requests are checked against a strict origin allowlist, and served pages carry a strict Content-Security-Policy.
Signed, notarized, verified updates
The app is Developer ID-signed and notarized by Apple. Updates carry a pinned cryptographic signature the app verifies before installing, and version downgrades are refused. A backup of your database is taken before every update applies.
A tamper-evident audit trail
Approvals, configuration changes, and orders are recorded in an append-only ledger where each entry carries the cryptographic hash of the previous one — an altered history breaks the chain visibly.
Secrets are scrubbed everywhere
A global redaction filter strips key-shaped strings from every log and diagnostic surface, and secrets never enter AI prompts: tools receive credentials server-side; agents see only results.
Untrusted content stays untrusted
News, filings, and web results are injected into agent context inside clearly delimited untrusted-data blocks, and the tools that fetch external content cannot themselves place trades. A planted headline can argue; it can't act.
How the trade path is protected
AI output is never executable
An analysis produces a proposal — data, not action. The deterministic risk engine validates it, the execution service enforces approval rules server-side, and idempotency keys prevent duplicate orders on retries. The AI cannot skip a step; there is no step it runs.
Paper and live are separate worlds
Every account starts in your broker's paper environment — and the current release trades paper only. Live trading arrives in a future update after our legal review, behind its own deliberate, typed enable ceremony with distinct visual chrome. Greenwick cannot drift from paper into live on its own.
The brake survives everything
STOP cancels Greenwick's open orders and halts all its trading in under two seconds. Its state is persisted — it survives restarts — and it works from the menu-bar tray even if the app window is frozen.
Protection isn't a paid feature
If your trial or subscription lapses with positions open, safety exits, reconciliation, and the kill switch keep running, and the updater keeps delivering fixes. Locking safety behind a renewal would be wrong, so we built it the other way.
Disconnecting, exporting, deleting
Your data is yours to keep or destroy. Remove a broker or AI connection in Settings and its key is deleted from your keychain — and since the keys are your own, you can also revoke them at your broker or provider at any moment, independently of the app. Your database and backups are local files: export them, copy them, or delete the app's data folder and everything is gone. There is no Greenwick account to close, because there is no Greenwick account.
Reporting a security issue
If you believe you've found a vulnerability in Greenwick, email support@greenwick.app with the details. Reports go straight to the people who wrote the code, and we'll respond honestly about what we find and fix.
Software you can audit with your own eyes
The demo shows the real app — including the guardrails and the STOP button — doing its job.