diff --git a/Makefile b/Makefile
index 7593a06..3321c52 100644
--- a/Makefile
+++ b/Makefile
@@ -13,12 +13,15 @@ dist/runekit.tar.gz: main.py poetry.lock runekit/_resources.py $(wildcard runeki
 
 # Mac
 
-dist/RuneKit.app: main.py poetry.lock runekit/_resources.py $(wildcard runekit/**/*)
+dist/RuneKit.app: RuneKit.spec main.py poetry.lock runekit/_resources.py $(wildcard runekit/**/*)
 	pyinstaller -w -n RuneKitApp --noconfirm \
 		--exclude-module tkinter \
 		-s -d noarchive \
 		--osx-bundle-identifier de.cupco.runekit \
-		RuneKit.spec
+		$<
+
+dist/RuneKit.app.zip: dist/RuneKit.app
+	cd dist; zip -r -9 RuneKit.app.zip RuneKit.app
 
 # AppImage
 
diff --git a/README.md b/README.md
index 9ea25ae..1fdff77 100644
--- a/README.md
+++ b/README.md
@@ -20,14 +20,14 @@ Alt1-compatible toolbox for RuneScape 3, for Linux and macOS.
 
 ### macOS
 
-See developer guide in the next section.
-
-You will need to add Python in System Preferences > Security > Privacy in these sections:
-
-- Accessibility
-- Screen Recording
-
-Note that Python might appear as the closest macOS application (eg. your terminal emulator) instead of Python
+1. [Download RuneKit.app](https://github.com/whs/runekit/releases) and unzip
+2. Double click it
+  - The first launch may takes a few minutes while macOS verify the application's security (we shipped a bunch of unused libraries - it is harder to remove them than to just ship it). The dock icon will keep bouncing while this is in progress
+3. If permission prompt appears, grant it in System Preferences > Security. **Then quit RuneKit (right click dock icon > force quit) and start it again.** Don't quit RuneKit while it is downloading app list! The list of permissions are:
+   - Accessibility - for access to game window
+   - Input Monitoring - for hooking alt+1 and idle detection
+   - Screen Recording - for capturing game
+4. Once all permission has been granted the application appears as system tray icon
 
 ## Troubleshooting
 
@@ -55,6 +55,14 @@ poetry run python main.py
 Start with `--remote-debugging-port=9222` to enable remote debugger protocol.
 To debug, go to `chrome://inspect` on Chrome/Chromium.
 
+### Building .app on Mac
+
+1. Run the normal build steps
+2. XCode > Settings > Account and download your dev key
+   - I don't have paid Apple Developer CA to test
+3. Set codesign_identity in  RuneKit.spec or leave it None for ad-hoc sign
+5. `poetry run make dist/RuneKit.app.zip`
+
 ## License
 
 This project is [No Maintenance Intended](https://unmaintained.tech/).