VibeSpace's design promise: your data stays on your Mac. Tasks, keys, and session history never pass through VibeSpace servers.
Where data lives
| Location | Contents |
|---|---|
~/.vibespace/ | main data directory: SQLite database (tasks, runs, approvals, changes), setting.json (with encrypted keys), user skills in skills/, kanban kanban.json, logs |
App folder under ~/Library/ | WebView caches, preferences, and other runtime data |
/Applications/VibeSpace.app | the app itself (one-time install footprint) |
The Storage card under Settings → Data management shows actual disk usage per part and can reveal the app bundle in Finder.
Key and secret protection
- API keys are encrypted with AES-256-GCM, stored separately from everyday config, and decrypted only in memory when sending a request;
- Keys and secrets never enter logs and are redacted from checkpoints and outputs;
- Sensitive workspace paths (
.env*, private keys,secrets/,credentials/) get special protection; - Model requests go directly to the provider; attachments are sent as snapshots without local absolute paths.
Backup and migration
Under Settings → Data management (or the "Personal" area):
- Export: bundle tasks, sessions, and settings into a portable file;
- Import: restore on a new machine or after a reinstall;
- iCloud sync: optional; syncs the data directory to your iCloud (document-level sync on your own account).
Website account ≠ desktop data
The optional Google sign-in on this website is for the website only. A website account never grants VibeSpace access to your local workspace, files, prompts, or API keys — the two data domains are entirely separate.
When uninstalling
- Delete the app;
- Delete
~/.vibespace/to remove all local data (export a backup first).