Security overview

Everything Freeleapp needs is stored on your Mac, encrypted. There is no Freeleapp account and no backend: nothing is sent anywhere except to your cloud and identity providers.

Data is split by how sensitive it is:

Data	Where it lives	Examples
Operational	An encrypted configuration file in ~/.freeleapp (see Application data).	Sessions, named profiles, proxy settings.
Sensitive	The macOS Keychain, with its own encryption (see System vault).	Long-term access keys, SSO and refresh tokens, cached credentials.

Only temporary credentials are ever written to the files your tools read (~/.aws/credentials, ~/.azure), and Freeleapp rotates them while a session is active. See how they are generated for AWS and Azure.