Privacy Policy

Tack is a local-first macOS notes app. We do not operate a cloud service that receives your notes, require an account, run advertising or analytics, or track you across apps or websites.

Tack is developed and provided by Shanglong Ning, the legal Application Provider. In this policy, “we,” “us,” and “our” refer to Shanglong Ning. Shanglong Ning is the data controller for information you deliberately send through support; Tack does not collect app data during normal operation.

1. Data We Collect

We do not collect data from the Tack app. In particular, Tack does not automatically send us your notes, images, identifiers, usage activity, location, contacts, or diagnostics.

2. Local Storage

By default, notes, folders, tags, images, preferences, revisions, and local diagnostics are stored on your Mac in Tack's sandboxed containers. We cannot access that storage.

3. Optional iCloud Sync

If you enable iCloud Sync, Apple CloudKit stores note data in your private iCloud database so it can sync between your Macs. The feature is off by default. We do not receive your content and do not have developer-console access to users' private CloudKit records. Apple's handling of iCloud data is governed by Apple's privacy policy and your iCloud settings.

4. Network and System Features

Tack uses network or Apple services only for features you choose:

• Link previews: when a note contains a public URL, Tack may request that page's metadata. The destination website can receive standard connection information such as your IP address under its own privacy policy.
• Calendar mirror: if enabled and permitted, Tack writes reminder events through Apple's EventKit framework. Those calendars may sync according to your macOS account settings; Tack does not receive them.
• App updates: the Mac App Store supplies and updates the App Store version of Tack.

Memory suggestions, semantic connections, OCR, Spotlight indexing, and crash-diagnostic preparation run on-device.

5. Optional Local MCP Helper

The Connections feature is off by default. If you enable it, Tack registers a sandboxed background helper that listens only on your Mac's loopback interface. The helper requires an automatically generated local bearer secret; Tack stores that secret with owner-only file permissions and includes it in connection configurations you choose to create. Requests without the correct secret are rejected.

Compatible apps you configure can then read or change Tack notes through the Model Context Protocol. The helper is not reachable from another device and does not send note content to us. A connected app may process requested note content locally or through its own online service, according to that app's settings and privacy terms. Disable the helper in Tack's Settings or macOS Login Items, and remove Tack from a client's configuration, when you no longer want that client to connect.

6. Exports, Feedback, and Support

You can export notes and backups to a location you choose. Tack does not upload those files. If you deliberately email us or attach an exported diagnostic bundle, we receive the information you choose to send and use it only to respond, investigate the issue, and maintain the app. Do not include private note content you do not want to share.

We retain support messages and attachments only as long as reasonably needed to answer your request, investigate recurring or security-related issues, and meet legal obligations. You may ask us to delete a support conversation by using the contact address below; we will honor the request unless retention is required for legal, fraud-prevention, or security purposes.

7. Your Choices and Deletion

• Keep iCloud Sync, Calendar mirroring, background connection scanning, and the MCP helper disabled.
• Turn enabled features off in Tack Settings and revoke Calendar access in System Settings.
• Disconnect configured MCP clients and disable the local helper in Tack or macOS Login Items.
• Delete individual content, empty Tack's Trash, or use the in-app reset controls.
• Delete private iCloud data through your Apple account and device controls.
• Request deletion of information you deliberately sent to support.

Removing an app does not always remove every macOS App Group container automatically. Contact support if you need help locating and deleting residual local Tack data.

8. Sharing, Sale, and Tracking

We do not sell personal information, share it for cross-context behavioral advertising, display targeted advertising, or combine Tack activity with third-party data for tracking. GitHub and our email provider process limited information only to host this site or deliver support messages under their own terms.

9. Children

Tack is a general-audience productivity app and is not directed to children. Because we do not collect app data or operate accounts, we do not knowingly collect personal information from children through the app.

10. This Website

This site is hosted on GitHub Pages. Loading it sends a standard web request to GitHub, whose handling of that request is governed by GitHub's privacy statement. We do not place our own analytics, advertising pixels, or cookies on this site.

11. Changes

We may update this policy when Tack's behavior or legal requirements change. The effective date above identifies the current version.

12. Contact

Questions, access requests, or deletion requests: hi@cryptoanalyzer.app.