Privacy

Tack+ works on your Mac. What it reads there (your calendar, your messages, your contacts, your clipboard) stays on the machine and is not sent anywhere. What leaves the Mac: your account data, which is required to use Tack+, and a few technical requests described below, such as the check for updates.

This page describes exactly what is read, what is sent, and to whom. It is written to be verifiable: each permission mentioned is one that macOS asks you for, and that you can find in System Settings › Privacy & Security.

The data controller is Pensa Corporation (1001771571 ONTARIO INC.), 570 Hood Rd, Markham, Ontario L3R 4G7, Canada, contact support@pensacorp.com. As the company is established outside the European Union, its representative in the Union within the meaning of Article 27 of the GDPR is Adrien Pennetier, its Chief Technology Officer, in France, who can be reached at the same address.

What the app reads on your Mac

macOS asks for your consent to each of these accesses. You may refuse all of them: the app keeps working, and the modules concerned remain empty. None of this data leaves the machine.

• Calendar and Reminders. To show your appointments and reminders for the day at the edge of the screen, and to let you check one off without opening the corresponding app. Does not leave the machine.
• Contacts. To put a name to a phone number in your conversations. Does not leave the machine.
• Messages. The app reads the Messages database, read-only, through the “Full Disk Access” permission. This is the only way to display your recent conversations. Nothing is copied elsewhere, nothing is sent. Does not leave the machine.
• Clipboard. Monitored continuously to keep a history of what you copy. This history is written to a local file, under ~/Library/Application Support. Does not leave the machine.
• Files dropped at the edge of the screen (“the Stash”). The app keeps the file’s path, never its contents: it does not open it, does not copy it, and does not make a thumbnail of it to send elsewhere. Does not leave the machine.
• Other apps, through Apple Events. Spotify, Music, Messages, Safari, Notes and Shortcuts are queried to find out what is playing, which tabs are open, and which shortcuts exist. This is the standard macOS mechanism for one app to control another. Does not leave the machine.
• Your files, through the assistant. If you install the assistant and ask it to organize, search for or read something, it reads the names of your files and folders, and the text of a file when you ask it to, in your home folder, iCloud Drive, your external drives, the Applications folder and the Shared folder (not the Library, not hidden files, not the system). Its artificial intelligence model runs on your Mac: your requests, your files and its answers are not sent anywhere. Does not leave the machine.
• Your calendar, your reminders, your contacts and the clipboard, through the assistant. Since version 1.0.63, when you ask it to, it reads the appointments for a given day, your pending reminders, a contact card (to find whom to write to or call) or the copied text, and it adds an appointment or a reminder. This data stays on your Mac, processed by the local model. Does not leave the machine.

Dictation: the microphone

Dictation writes down what you say, while you hold its shortcut (⌥⇧ Space) or press its button. It asks for the microphone the first time you use it; before that, and if you refuse, Tack+ has no access to it.

• The microphone is open only for the duration of a dictation. It opens when you hold the shortcut and closes when you release it (or after five minutes at most, in hands-free listening): the macOS orange indicator shows it.
• The audio is transcribed on your Mac, by macOS. It goes from the microphone to a temporary file, from that file to macOS speech recognition, which is required to work on the device, and the file is deleted as soon as the text is returned. The audio is not kept, not sent to Apple, and not sent to our servers. macOS may download once, from Apple’s servers, the resources for the dictated language: this is a download; no audio is sent.
• The text is placed where the cursor is, by pasting: Tack+ puts it on the clipboard, pastes, then puts back what was there before. Pasting on your behalf requires the “Accessibility” permission; Tack+ uses it only for this pasting. Without it, the text simply stays on the clipboard.
• The last thirty dictations are kept, as text, in Tack+’s preferences on your Mac, so you can find them again; you can delete them from the Dictation page. They are not synced.

Meetings: call transcription

Since version 1.0.71, Tack+ can transcribe a call (Zoom, Teams, Meet, FaceTime…) while it is taking place. It does so only if you ask it to: with a click, or because you have turned on “Transcribe without waiting for a click” in its settings. Inform the people you are speaking with: in some countries, transcribing a conversation requires their consent.

• Detecting a call. Tack+ checks which app is holding the microphone (macOS reports this, without letting anything be heard); if it is a calling app, it offers to transcribe. It does not listen to anything to find out.
• Two sources, during the call only. The microphone (you), and the audio that the call plays on your Mac (the other participants), which macOS lets it capture after your consent (“Screen & System Audio Recording”). The macOS microphone indicator stays on for as long as the transcription lasts.
• The audio is never kept. Each sentence goes into a temporary file, is transcribed by macOS speech recognition on your Mac, and then the file is deleted. No audio is sent to Apple or to our servers.
• The text stays on your Mac, in Tack+’s folder (Application Support). It is neither synced nor sent. You can delete one call, or all of them, from the Meetings page; “Export” writes a copy to your Documents folder.
• The summary is produced by the local assistant, if you have installed it: the transcript is read by the model on your Mac; nothing is sent.

The Beacon: “Input Monitoring”

The Beacon makes the Caps Lock LED blink with each keystroke, if you turn it on; it is off by default. A single permission comes into play, Input Monitoring, for two tasks:

• Knowing that a key has just been pressed. While the Beacon is on, and only then, Tack+ installs a read-only keyboard listener: macOS notifies it of each key pressed, in every app. The notice that macOS sends contains the character, the key code and the modifiers; the Tack+ code reads none of this and keeps only the moment, long enough to light the lamp for a fraction of a second. Turning the Beacon off removes this listener.
• Writing to the indicator light. macOS places writing to a keyboard indicator under the same permission as reading keystrokes. Tack+ only writes to it, to light the lamp.

It must therefore be stated clearly: this permission would make it possible to read what you type, and Tack+ uses it only to make a light blink. The Beacon records no keystrokes, reads no characters from them, and transmits none of them, neither on the Mac nor anywhere else. The permission can be refused: without it, the Beacon stays off and its page says what is missing. Nothing else changes.

What leaves the Mac

An account is required to use Tack+: it carries your license. Here is everything it sends, and nothing more.

The Mac’s name is the one macOS gives it (Host.current().localizedName): it often contains a first name, because that is how macOS composes it. You can change it in your Mac’s System Settings.

Communications are encrypted in transit (HTTPS). Session tokens are stored in the macOS Keychain, never in a configuration file.

Payment is processed by Polar (polar.sh). When you make a purchase, you are redirected to its secure checkout page: your email address and your billing and payment details (including your card number) are entered on Polar’s site and processed by Polar. The publisher never sees or stores your card number. Polar sends us back only the purchase confirmation, the amount and a transaction reference, to activate the license on your account.

The app’s other requests

Apart from the account, the app sends only three kinds of requests, and two more if you install the assistant. None of them carries what Tack+ reads on your Mac.

• The check for updates. About once an hour, and when the panel opens if the last check was more than fifteen minutes ago, Tack+ reads the list of published versions, tackplus.app/updates/appcast.xml, on the website hosted by Vercel, whether or not you are signed in. The request carries your IP address, the name and version of the app and those of its update module (Sparkle); no identifier, no account, no macOS version. A new version is then downloaded from the same website.
• The account service check. Before offering you sign-in, once per launch, Tack+ checks that the account service is responding. This request carries no data about you, apart from the IP address that every request carries.
• Album artwork, with Spotify. When the music comes from Spotify, the Spotify app provides the address of the current track’s artwork, and Tack+ downloads that image from Spotify’s servers, once per track. Spotify then receives your IP address, just as when its app displays the artwork. With Music, the artwork comes from the app itself, without any request.

The assistant, if you install it

The assistant is optional. As long as you do not download its model, none of what follows takes place.

• Downloading the model. When you request it, Tack+ downloads the assistant’s model (Qwen3.5 4B, 2.74 GB) from Hugging Face (huggingface.co), which then receives your IP address, as with any download. Nothing else is sent to it: no account, no identifier. The file stays on your Mac, and you can delete it from Tack+.
• Web pages you have it read. When you ask the assistant to read or summarize a web page, Tack+ fetches that page directly from its website, without your cookies or your session. The website receives your IP address, as if you were opening it. A request that has read a web page no longer touches your files or your personal data (calendar, reminders, contacts, messages, clipboard), and vice versa: what a page contains cannot cause what your Mac contains to leave it.
• Messages you have it send. When you ask it to write to someone, the assistant shows you the recipient and the text, and nothing is sent without your approval. The message is then sent by Apple’s Messages app, as if you had written it. An email is never sent: the assistant opens a draft in your mail app. It reads neither your conversations nor your inbox.

Opening a website or running a search at your request goes through your browser, as if you were doing it yourself. The assistant pays for nothing, fills in no forms and enters no passwords.

The website

The website measures its audience with Vercel Web Analytics, the tool provided by its host (listed below among the processors). This tool works without cookies and stores nothing in your browser: no identifier follows you from one website to another, and the figures are aggregated and anonymous (page views, country, browser type). It is the only measurement tool: there is no Google Analytics, no social network pixel, and no advertising cookie.

The website itself keeps three things in your browser, none of them to track you:

• Your session, when you sign in: the authentication library stores it in the browser’s local storage (sb-…-auth-token), so that you do not have to re-enter your password on every page. It disappears when you sign out.
• The language of the last translated page you opened (tackplus.lang, in local storage), to display in that language the header and footer of pages that exist only in French. It remains after you sign out; clearing the website’s data in your browser removes it.
• A language cookie (tackplus_lang, one year), set only if you choose a language in the selector, to bring you back to that language when you return to the home page. It is the website’s only cookie.

These three items serve what you ask of the website, and nothing else: no consent banner is therefore required.

The website’s typeface is hosted on our own domain, not on Google Fonts. Your browser therefore contacts no third-party server to display it: no IP address leaks to Google or to anyone else from simply browsing. This is a compliance choice: loading a font from Google Fonts transmits the visitor’s IP address without their consent, which the CNIL (the French data protection authority) and European case law consider contrary to the GDPR.

The website contains an outbound link to macplus.pro. By following it, you leave this website and enter the scope of the privacy policy of its destination.

On what legal basis

Each processing operation relies on one of the bases provided for in Article 6 of the GDPR:

• The account, the license, settings sync and the list of devices fall under the performance of the contract (Article 6(1)(b)): without this data, the service cannot be provided.
• Retention of records relating to a purchase falls under a legal obligation (Article 6(1)(c)): French accounting law requires supporting documents to be kept.
• Sign-in with Google relies on your consent (Article 6(1)(a)): it is an option you choose, and sign-in with an email address always remains available.
• The check for updates, the check that the account service is reachable and the security of the service fall under legitimate interest (Article 6(1)(f)): keeping the app up to date, making it work and protecting accounts, without sending anything other than what is described above.

How long

• Account data is kept for as long as the account exists. You may request its deletion at any time; it is then erased, with the exception of records relating to a purchase, which the French Commercial Code (Article L123-22) requires to be kept for ten years in the accounts.
• The clipboard history and the contents of the Stash live on your Mac, and nowhere else. The app lets you clear them; uninstalling the app and deleting its folder in ~/Library/Application Support removes them.
• The technical logs that Vercel’s and Supabase’s servers keep for each request (IP address, date, requested address) are used for security and for the proper operation of the service. They are kept for the periods specific to these providers.

Your rights

Regulation (EU) 2016/679 (GDPR) gives you, with respect to your account data, a right of access, rectification, erasure, portability, restriction and objection. You may also withdraw your consent at any time, without affecting what was done before.

These rights are exercised by sending a message to support@pensacorp.com. You will receive a reply within one month. No proof of identity is requested beyond what is necessary to make sure the request really comes from you.

Data that concerns only your Mac (clipboard, Stash, calendar, messages) is not in our possession: we can neither provide it to you nor erase it. It is yours, and on your machine.

If a reply does not satisfy you, you may lodge a complaint with the Commission nationale de l'informatique et des libertés (CNIL), the French data protection authority, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, www.cnil.fr.

Data controller: Pensa Corporation (1001771571 ONTARIO INC.), 570 Hood Rd, Markham, Ontario L3R 4G7, Canada, contact support@pensacorp.com. Representative in the European Union (Article 27 of the GDPR): Adrien Pennetier, France, at the same address.

Processors and recipients

Four providers are involved, and no others.

If you sign in with a Google account, Google knows that you signed in to Tack+, and we receive in return your email address and your display name. You can avoid this by creating an account with an email address and a password.

Hugging Face is not a processor: it processes no data on our behalf. If you install the assistant, it serves the model file and, in that capacity, receives your IP address for the duration of the download.

Supabase, Vercel, Polar and Google may host or process data outside the European Union. These transfers are governed by the safeguards provided for in Chapter V of the GDPR (standard contractual clauses of the European Commission). The publisher, Pensa Corporation, is established in Canada, a country recognized by the European Commission as ensuring an adequate level of protection for organizations subject to the Canadian Personal Information Protection and Electronic Documents Act (Decision 2002/2/EC). No data is transferred to a third party for commercial purposes.

What Tack+ does not do

• No data is sold, rented or transferred to anyone.
• No advertising, in the app or on the website.
• No profiling, no automated decision-making concerning you.
• In the app, no audience measurement, no usage statistics, no telemetry: what you open in the panel, how long you use it, what you copy. None of this is reported.
• No keystroke typed in another app is read or recorded: the Beacon keeps only the moment.
• No content from your files, messages or appointments is transmitted.
• None of your requests to the assistant is sent to an artificial intelligence service: its model runs on your Mac.

Changes

If this page changes, because the app changes, the date below changes along with it. A change that would expand what is sent would be announced in the app before taking effect.

Last updated: October 18, 2026.