LEGAL
Impressum
Nicolas MallinckrodtVolkarstr. 42
80636 Munich, Germany
nicolas.mallinckrodt@tum.de
This is a private website operated by Nicolas Mallinckrodt,
currently not a registered company.
Privacy Policy
Only for the Nodes MacOS app. This is not the privacy policy for the web page - that one is here.
Effective date: 2026-07-31
Developer: Nicolas Mallinckrodt
Contact: nicolas.mallinckrodt@tum.de
Summary
We do not collect, store, share, or sell any personal data from anyone who uses this app.
We run no server. Requests do leave your Mac, and they go to two places, neither of which is us: Apple, which Nodes asks at every launch what this Mac is entitled to and what the plans cost, and again when you buy or restore; and Hugging Face, when you download a model. Your notes are in neither, and once a model is downloaded the AI features need no connection at all.
Details
1) Information we collect
None. The app does not request, transmit, or store personal or device data on our servers, because we have none.
No analytics, advertising IDs, crash reports, or diagnostics are collected by us.
Nodes has no account of its own: nothing to sign up for, nothing to log into. The only account involved anywhere is your Apple Account, which Apple uses to carry a purchase between your Macs. We never see it.
2) On-device processing
Any settings or preferences are stored locally on your device and never leave it.
Your notes are files on your own disk. The Rosetta features - tag suggestions, semantic search, descriptions, and reminders - run on a model on your Mac, and what that model reads stays on the machine it reads it on. Nothing you write is sent anywhere to be processed, by us or by anyone else.
3) Permissions
The app requests no sensitive permissions.
If a platform requires a basic permission for the app to function (e.g., offline storage), it is used only on-device and never sent to us.
Network access reaches two destinations, both named below: Apple's App Store - at launch, to see what this Mac is entitled to and what the plans cost, and again when you buy or restore - and Hugging Face, when you download a model. Nothing else needs a connection. Every one of those requests is allowed to fail and the app carries on without it, and once a model is downloaded the AI features run entirely offline.
4) Buying a plan
Alexandria and Rosetta are bought through the App Store. Apple is the seller: Apple takes the payment, holds the payment details, and ties the purchase to your Apple Account, which is what lets a second Mac signed into the same account already have it and what makes restore purchases work. That is Apple's processing under Apple's privacy policy, not ours.
We receive no name, address, email, or card detail, and no list of who bought what. Nodes asks the App Store whether this Mac is entitled, and that check happens on the device - there is no server of ours for a receipt to go to.
Both unlocks are one-time purchases. Nothing renews, and nothing has to phone anywhere to keep working.
5) Third-party services & SDKs
We use no third-party analytics, advertising, or tracking SDKs. Two providers are reached at all:
Apple (Apple Inc., One Apple Park Way, Cupertino, CA 95014, USA), through the App Store. Nodes asks at every launch what this Mac is entitled to and what the plans cost, without waiting to be told to, and asks again when you buy or restore - see section 4.
Hugging Face (Hugging Face, Inc., 20 Jay Street, Brooklyn, NY 11201, USA), when you download a model from the catalog in Settings ▸ Agent. That is the only time Nodes talks to them, and it happens once per model: the request tells Hugging Face your IP address, your user agent, and which model you are fetching, and carries nothing about you and nothing from your library. Once the model is on your disk that is the end of it - tag suggestions, semantic search, descriptions and reminders all run with no connection at all. Browsing the catalog fetches nothing either; what the cards show is already in the app. (A model downloaded by a much older version of Nodes can be missing one small template file. If so, Nodes fetches that once, from the same place.)
Choose the Apple Foundation Model instead - on an eligible Mac running macOS 26 with Apple Intelligence turned on - and macOS supplies the model, so nothing is fetched from Hugging Face at all. If Apple Intelligence is still setting itself up, that download is macOS's own, from Apple, and Nodes takes no part in it.
If this changes, we will update this policy before release.
6) Children's privacy
Because we do not collect data, the app is suitable for users of all ages. If you believe a child has provided data to us by any means, contact us and we'll address it - though we don't have any systems that accept such data.
Nodes does offer in-app purchases. They are made through the App Store, where Apple's account settings and Screen Time restrictions decide whether a purchase can be made at all.
7) International transfers
We hold no data of yours, so there is nothing for us to transfer.
What does leave your Mac are the requests in section 5, and both providers are US companies, so an App Store check, a purchase, or a model fetch may be processed in the United States. Where a provider is certified under the EU-US Data Privacy Framework, that processing rests on the adequacy decision; otherwise it rests on the EU Standard Contractual Clauses.
The Hugging Face request is one you start. The App Store request Nodes makes on its own, at launch, to see what this Mac is entitled to. Neither carries your notes.
8) Changes to this policy
If we ever introduce features that collect data, we will update this policy, disclose exactly what is collected and why, and seek consent where required.
9) Contact
Questions? Email nicolas.mallinckrodt@tum.de.