Private by construction
Kempt makes exactly one network request: a daily update check that sends its version number. Reading, naming and answering all happen on the Mac. That single constraint shaped the architecture more than any framework choice did.