Privacy Policy

1. Privacy at a glance

This notice explains data processing when you use the Taggy Tagger Mac app, visit taggytagger.com, subscribe to the newsletter, join the release waitlist or contact Fox+Rabbit Innovation Design GmbH.

The Mac app processes your chosen files and Finder tags locally. It does not upload those files to our servers. Optional Apple services, App Store purchases and diagnostics are described in the Mac app section. The website cannot access files or Finder tags on your Mac.

Joining the release waitlist is optional. We ask only for your email address and your consent to receive the Taggy Tagger release announcement. The monthly newsletter is a separate subscription and has its own signup. Support enquiries are handled separately.

2. Responsible party

Phone: +49 (0) 159 01855017
Email: impressum@foxandrabbit.org

You can use these contact details to ask about privacy or exercise your data protection rights. Product support is also available at hello@taggytagger.com.

3. Data processing in the Mac app

You do not need a separate Taggy Tagger account. The app uses file access you grant to monitor folders, match files against your rules and apply Finder tags. Where personal data is involved, the legal basis for providing these requested app functions is Article 6(1)(b) GDPR.

Files, folders & Finder tags

The app reads filenames, paths, existing tags and the metadata needed for your conditions and tag actions. This can include file type, size, dates and embedded photo or media metadata. It writes tag changes to the original files. Your files are not moved into a developer-hosted library or uploaded to us for tagging.

You choose the folders and files the app may access. The app saves access references, called security-scoped bookmarks, so it can use those locations again. Monitoring and tag management can have separate saved access permissions.

Local settings & Activity history

Settings, monitored folders, automations, conditions, workflows, saved templates, tag libraries and file-access references are stored on your Mac. These can contain names, paths and tagging rules that you enter.

Activity history can include file and folder names and paths, processing times, applied tag actions, results and errors. It is stored locally and is not automatically sent to us. The default retention is seven days; you can choose up to 30 days, clear the history or disable recording by setting retention to zero. Cleanup runs periodically. Disabling Activity history does not stop tagging.

On-device tag-name suggestions

On supported Macs, opening Cleanup in tag management can use Apple’s on-device Foundation Models framework to suggest similar or duplicate tag names. Only tag names are passed to the model for this feature; the app does not send file contents, paths or photos to it. The model runs on your Mac. These suggestions do not use a developer-hosted AI service.

Spotlight

Indexing saved tagging definitions in Spotlight is enabled by default. The app adds saved rule and workflow template names, their type and internal identifiers to the local system index so you can open them from search. Turning this option off in Taggy Tagger’s settings removes the app’s saved-definition index entries. Opening a result opens its editor; it does not run a tagging action.

Photo-location conditions & Apple Maps

If you configure a photo location-name condition, the app can send the photo’s embedded GPS coordinates and your current locale to Apple Maps to obtain a place name. This can happen during a sample preview or automatic rule matching. The lookup uses the photo’s coordinates, not your Mac’s live location, and the app does not send the photo itself. Coordinate comparisons and checks for missing GPS data are local.

To avoid these lookups, do not use location-name conditions. Apple may process technical connection and service data under its own Apple Maps privacy notice.

App Store purchases

Apple handles purchases, subscriptions, payments and refunds. Taggy Tagger uses purchase and entitlement information supplied by Apple’s StoreKit framework to check access, restore purchases and show purchase status. We do not receive your payment-card details through the app. Apple may provide us with purchase, subscription and sales reports. See App Store & Privacy.

Diagnostics & TestFlight

The app does not include advertising trackers or a third-party usage analytics SDK. macOS may collect diagnostics, such as crash reports, and share them with us according to your Apple analytics settings. See Apple’s Mac analytics settings. If you send us logs, screenshots or other support material, check them for filenames, paths or other information you do not want to share.

TestFlight beta builds have different diagnostics rules. Apple automatically collects crash and usage data and makes it available to the developer. Feedback you submit can include comments and screenshots. Apple may also share your device and build details and, for email-invited testers, your name and email address. Public-link testers’ names and email addresses are not shown to us. See TestFlight & Privacy.

We use diagnostics and beta feedback to investigate faults and improve the app, based on our legitimate interest under Article 6(1)(f) GDPR. We keep the information we receive only while needed for that purpose, a support enquiry or applicable legal requirements. Apple’s collection and retention are governed by its own notices.

Storage, cloud folders & deletion

Local app configuration remains until you remove it or clear the app’s stored data; Activity history follows the retention setting above. Removing an automation or uninstalling the app does not delete your original files or undo Finder tags already written. Uninstalling may leave preferences, support files or backups that need to be removed separately.

If you use iCloud Drive, another cloud service or network storage, that provider may store or synchronize the files and their tag metadata according to your settings and its own privacy terms. Local app data can also be included in your Mac’s backups. We do not operate a Taggy Tagger cloud-sync service.

4. Website hosting & technical data

This website is hosted by Cloudflare, Inc.. Hosting provider’s privacy information.

Delivering and protecting a website involves processing technical request data, such as your IP address, browser and operating system, requested page, request time, and referring page when supplied by your browser. The purpose is reliable delivery, troubleshooting, and prevention of misuse. The legal basis is our legitimate interest in operating a secure website under Article 6(1)(f) GDPR.

Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA, delivers the website through its global network. Technical data is retained as needed to provide and secure the services and meet legal obligations; Cloudflare’s privacy notice explains its retention criteria. Its Data Processing Addendum forms part of its self-serve agreement and includes safeguards for international processing, including standard contractual clauses where applicable.

5. Cookies, local storage & external content

The website code does not include advertising trackers, analytics scripts, or externally hosted fonts. When you change the animation preference, the value taggy-motion is stored in your browser so the site can remember your choice. It contains no personal identifier and can be removed by clearing this website’s browser data. It is used to provide the display preference you requested (§ 25(2) TDDDG; Article 6(1)(f) GDPR).

The newsletter and release waitlist use Mailchimp. Submitting a signup connects your browser to Mailchimp. The form and Mailchimp badge are served locally; no Mailchimp script runs before submission. Our support page connects to Formspree when you submit a message. These services may process technical request data to deliver their forms and prevent misuse. Links to other websites take you to services with their own privacy notices.

6. Newsletter & release waitlist — Mailchimp

We use Mailchimp, provided by The Rocket Science Group LLC, an Intuit company in the United States, to collect newsletter and release-waitlist signups and send the communications you request. We ask for your email address and affirmative consent under Article 6(1)(a) GDPR. The newsletter contains approximately monthly updates about new features, development, useful discoveries and stories about Taggy Tagger. Selecting Subscribe on the newsletter form requests this newsletter; there is no second checkbox. The release waitlist requests only the release announcement. Neither signup subscribes you to the other purpose or gives access to the closed TestFlight beta.

We use double opt-in: after you submit the form, Mailchimp sends a confirmation email. Your subscription is activated only after following its confirmation link. Mailchimp records signup and confirmation details, including timestamps, IP information and the permission requested, to document the request and help prevent misuse.

You can withdraw consent at any time by writing to dennis@taggytagger.com or using the unsubscribe link in our emails. Withdrawal does not affect processing that was lawful before withdrawal. We retain newsletter data while your subscription remains active and waitlist data while needed for the release announcement, subject to limited legal retention and consent-evidence requirements. A restricted suppression record may be retained to respect an unsubscribe request and prevent accidental resubscription.

Mailchimp may process data in the United States and other countries where its subprocessors operate. Its Data Processing Addendum forms part of its agreement and describes processing on our behalf, subprocessors and international transfer safeguards. Mailchimp states that it participates in the EU–US Data Privacy Framework through Intuit and provides standard contractual clauses where applicable. See Mailchimp’s privacy information and its European data transfer information.

7. Contact & support — Formspree

If you use the support form, we receive your name, email address, subject, and message. Formspree, Inc. processes the submission to deliver it to us and may process technical request data for security and spam prevention. We use the information to respond to your enquiry, not to subscribe you to marketing.

The legal basis is Article 6(1)(b) GDPR for requests relating to a contract or steps before entering a contract. For other enquiries, it is our legitimate interest in answering messages under Article 6(1)(f) GDPR. The same purposes and legal bases apply when you contact us directly by email or phone.

Messages are retained while needed to resolve your enquiry and meet applicable legal retention requirements or establish, exercise, or defend legal claims. Where these reasons no longer apply, the information is deleted. See Formspree’s privacy policy.

8. Recipients & international processing

Website recipients are the hosting provider, Mailchimp for the newsletter and release waitlist, Formspree for support submissions, and the email services used to receive and answer enquiries. For the Mac app, Apple provides the purchase, Maps and diagnostic services described above; any cloud or network storage you choose is subject to that provider’s terms. Local tagging data is not routinely sent to us. Information may also be disclosed when a legal obligation requires it.

Formspree states that its services use infrastructure in the United States and that it relies on standard contractual clauses as a data processor. See Formspree’s security and data protection information. International processing may also involve Apple and other providers’ subprocessors. Apple’s Privacy Policy describes its international processing and safeguards for Apple services. Where processing occurs outside the European Economic Area, safeguards can include an adequacy decision or the European Commission’s standard contractual clauses. The hosting and Mailchimp sections above describe those providers’ arrangements.

9. Your rights

Subject to the conditions of the GDPR, you can request access to your personal data, correction, deletion, restriction of processing, and portability. Where processing relies on consent, you may withdraw that consent at any time with effect for the future.

You may object at any time to processing for direct marketing. Where processing relies on Article 6(1)(f) GDPR, you may object for reasons arising from your particular situation. We will stop the affected processing unless there are overriding legitimate grounds or it is needed for legal claims.

You may lodge a complaint with a data protection supervisory authority, including one in the EU country where you live or work or where you believe an infringement occurred. Contact the responsible party listed above to exercise your rights or request further information.

10. Security & changes

The Mac app uses macOS sandboxing and user-granted file access. The website and form services use HTTPS to protect information in transit. No storage or communication method can guarantee absolute security.

This policy covers the Taggy Tagger Mac app and website. We will update it when their features, services or data-processing arrangements change.