Privacy Policy

Timo Zurhove · Last updated: October 19, 2026 · Deutsche Fassung

This policy covers the apps I publish on the App Store. The first part applies to all of them. After it, each app has a section of its own: what the app stores, what it sends and to whom, and how you can stop it and delete your data.

Who is responsible

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Timo Zurhove
Imprint
Email: info@tz-develop.de

Write to this address with any question about this policy or about your data.

Downloads through the App Store

My apps are distributed through Apple's App Store. Downloads, purchases and payments are handled by Apple, on its own responsibility and under Apple's privacy policy (apple.com/legal/privacy), and through the App Store I do not receive your name, your Apple Account or your payment details. Apple gives me only the reports it gives every developer: aggregated download and sales figures and, if you have chosen to share analytics with app developers in your device's settings, usage statistics and crash reports that do not identify you.

Support requests

If you write to me, about support or anything else, I use your message and your email address only to answer you. I delete them once they are no longer needed for that, unless the law requires me to keep them longer.

Legal basis: my legitimate interest in answering your message (Art. 6(1)(f) GDPR). If your message concerns a contract with me, such as the license for one of my apps, or one you want to enter into, it is Art. 6(1)(b) GDPR. Where the law requires me to keep a message, the legal basis for keeping it is Art. 6(1)(c) GDPR.

Your rights

Under the GDPR, you have the right to ask which personal data about you I hold (Art. 15), to have it corrected (Art. 16) or deleted (Art. 17), to have its processing restricted (Art. 18), and to receive it in a common, machine-readable format (Art. 20). You can withdraw a consent you have given at any time, with effect for the future (Art. 7(3)). Write to info@tz-develop.de. What each app stores on your device, and how to delete it, is described in that app's section below.

Right to object: where I process your data on the basis of my legitimate interests (Art. 6(1)(f) GDPR), you can object to that processing at any time, on grounds relating to your particular situation (Art. 21 GDPR).

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).

Changes to this policy

If this policy changes, I publish the new version on this page and change the date at the top.

RAG Desk

RAG Desk is a Mac app that indexes folders of documents you choose, so that you can search them and ask questions about them. This section describes what it does with your data. Who is responsible, how to reach me and your rights are at the top of this policy.

In short

RAG Desk has no account, no analytics, no advertising and no server of its own. The app sends me nothing: not your documents, not your searches, no usage data. The only reports I get are Apple's, described under Downloads through the App Store.
Your documents are read on your Mac, and the index RAG Desk builds is stored on your Mac.
To create embeddings and written answers, RAG Desk sends text to OpenAI using your own OpenAI API key, and only after you have allowed it.

Data stored on your Mac

Your data pools: their names, settings and folders, including the macOS security-scoped bookmarks that let RAG Desk reopen those folders after a restart.
Each pool's index: the text extracted from your documents, split into passages, the embeddings of those passages, and each file's path, size and modification date, which are used to update the index when files change.
Your settings, such as the text size, search options and whether you have allowed sending content to OpenAI.
Your OpenAI API key, which is stored in the macOS Keychain.

RAG Desk only reads the folders you add. It never changes or deletes your documents. Apart from what RAG Desk sends to OpenAI, described below, none of this data leaves your Mac, and I have no access to it.

Data sent to OpenAI

RAG Desk uses the OpenAI API for embeddings and text generation. Requests go directly from your Mac to OpenAI, authenticated with your API key. They do not pass through any server of mine. What is sent, and when:

Indexing: the text of the documents in a pool, to create embeddings. Whole documents are also sent to an OpenAI language model when the pool uses Semantic chunking or Contextual Retrieval. File names are sent with the text when “Embed each chunk with its filename” is switched on.
Searching by Meaning or Hybrid: the text you search for.
Written answers (“System Prompt” switched on): your question, your instructions for the pool, and the passages found, each with its file name and folder.

Nothing is sent for keyword searches without an answer. Scanned PDFs are read with Apple's on-device text recognition; the recognized text is then indexed like any other text.

Legal basis: RAG Desk sends this data only with your consent (Art. 6(1)(a) GDPR), which you give in the app before anything is sent and can withdraw at any time; see “Your consent” below.

OpenAI is the only third party RAG Desk sends data to. OpenAI processes it under your own agreement with OpenAI, and its terms for the API protect your data at least as well as this policy does: OpenAI does not use data sent through its API to train its models unless you have chosen to share it with OpenAI, and it keeps the data only for a limited period. What OpenAI keeps, and for how long, is set out in its policies: openai.com/policies.

Transfer to the USA

OpenAI is headquartered in the USA and processes the data there as well. For transfers of personal data from the EU to the USA, OpenAI relies on the standard contractual clauses adopted by the European Commission (Art. 46(2)(c) GDPR). Even so, US authorities may be able to access the data.

Your consent

RAG Desk asks for your consent before it sends anything for the first time, and lists what it sends. You can withdraw your consent at any time in Settings (⌘,) › Privacy, by switching off “Allow sending content to OpenAI”; RAG Desk then asks again before the next action that would send anything. Withdrawing it does not affect the lawfulness of what was sent before (Art. 7(3) GDPR). If a later version of RAG Desk sends something it does not send today, it asks for your consent again.

Deleting your data

RAG Desk sends me nothing, so I hold no data from it. Everything it stores stays on your Mac until you delete it:

Deleting a pool deletes its index.
“Remove” in Settings deletes your API key from the Keychain. Do this before you delete the app.
Then delete the app. macOS may keep the app's data folder, ~/Library/Containers/de.develop.tz.ragdesk (Finder may show it as “RAG Desk”), which holds your pools, their indexes and your settings. If it is still there, delete it as well.

What you have sent to OpenAI is held by OpenAI under your account. To delete it, use the controls of your OpenAI account or contact OpenAI.