1. Who is responsible?
Tommy Haacke
Ricarda-Huch-Str. 25, 80807 München, Germany
Email: jackjack@tommy-haacke.com
Phone: +49 176 66856790
We are responsible for the personal data we receive through operating this website and handling support and beta feedback. Your meeting content is processed locally under your control; we do not receive it through JackJack’s meeting-processing workflow.
2. Local processing in JackJack
The public Mac app transcribes microphone audio and, when enabled and permitted, audio from your Mac on the device. Normal live captures are transcribed in memory and do not create a saved audio recording. Transcripts, summaries, suggested tasks, project information and your settings are stored locally. Summaries and task suggestions are generated on your Mac.
This public release does not provide cloud AI processing or an API-key option. Meeting content is not sent to external AI providers, and a failed local operation does not switch to a cloud service. After the required models have been installed, meeting processing works offline. We do not receive these local meeting contents to train AI models.
You choose which conversations to capture and what to keep, edit, export or share. Inform participants and obtain any permissions required for your use. Access to the microphone and Mac audio is controlled through macOS permissions, which you can withdraw in System Settings.
3. Files, imports and deletion
JackJack saves readable Markdown files in the knowledge folder, or Vault, you choose during setup. If you choose a folder synchronized by iCloud Drive or another service, that service can transfer the files independently of JackJack. Its own settings and privacy terms apply. Local AI processing does not prevent a storage service you select from synchronizing your files.
Imported audio and older saved audio files are different from live captures. JackJack may hold its own imported copy until a complete matching transcript is safely saved; it then removes that copy before generating notes. A transcription or storage failure retains the copy for recovery. Legacy regeneration can retain the earlier source until the replacement is saved. External original files are not deleted.
Saved meeting content remains until you delete it. Archiving keeps content available for restoration. Confirmed permanent project deletion removes the JackJack-managed scope shown in the app. It does not erase external originals, independent backups or another Mac’s private app data. Uninstalling the app alone does not delete your Vault or copies you have exported.
4. Downloading local models
Installing or repairing the local models connects your Mac to Hugging Face and its delivery infrastructure. The provider receives technical connection information, including your IP address, the requested files and request timing. These requests do not include meeting audio, transcripts or notes. Downloads enable the local processing you request (Article 6(1)(b) GDPR).
Hugging Face, Inc. operates the download service under its own privacy policy. Connection information may be processed in the United States and other countries outside the EU or EEA. The provider uses service information for delivery, security and improvement and retains it as needed for those purposes and legal requirements; it does not specify a fixed period for download logs. We do not receive or control those logs. Its EU establishment is Hugging Face SAS, 9 rue des Colonnes, 75002 Paris, France; privacy requests can be sent to privacy@huggingface.co.
Once the required models are installed, meeting processing runs locally on your Mac. Model delivery is separate from meeting processing.
5. App Store, TestFlight and Apple services
Apple handles App Store downloads, updates, account and payment information under its own terms. We do not receive your Apple password or payment-card details. If you choose to share app analytics or diagnostic reports with developers through Apple, Apple may make usage statistics and crash or performance reports available to us. We use these to understand use of the app and fix problems; JackJack has no separate analytics or advertising SDK.
The beta is distributed through Apple TestFlight. Apple collects beta installation, usage and crash information and makes information available to the developer. If you send feedback, Apple also shares your comments and any screenshots or other information you provide. Apple states that your name and email are not shown to the developer when you join through a public invitation link alone; submitted feedback can identify you.
We use the beta information made available to us to investigate problems and improve JackJack, based on our legitimate interest in maintaining a reliable app (Article 6(1)(f) GDPR). Please avoid including other people’s meeting content in feedback unless it is necessary and you are entitled to share it.
Apple’s handling of its services is described in TestFlight & Privacy and Apple’s privacy policy. Apple sets the retention periods for its own systems. Our separate support-retention information below applies to copies we receive or download.
6. Support and voluntary sharing
If you email us, we receive your email address, message and any attachments. We use these to respond to your request: Article 6(1)(b) GDPR for enquiries connected with your contract or pre-contractual request, and Article 6(1)(f) GDPR for our legitimate interest in answering other enquiries and resolving technical issues.
JackJack’s support-bundle export creates a local file at your request; the app does not upload it for you. The regular bundle omits transcripts, generated content, API keys, personal file paths and device names. It can contain app and operating-system versions, model identifiers, short technical IDs, timestamps, text lengths and performance measurements. Review it before sharing. Follow-up emails created by JackJack are drafts and are not sent automatically.
We delete support emails, attachments and our downloaded copies of TestFlight feedback and diagnostic reports when they are no longer needed, and no later than 90 days after the case is closed, unless a legal retention obligation or the establishment, exercise or defence of legal claims requires longer retention. This limit applies to copies under our control, not to Apple’s own systems. Data needed for a legal obligation is retained under Article 6(1)(c) GDPR; information required to establish or defend legal claims may be retained under Article 6(1)(f) GDPR.
Our contact mailbox is hosted by IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany. IONOS processes messages and connection information to deliver and store our correspondence. Details of its services are available in IONOS’s privacy information. Providing personal data for an enquiry is voluntary, but without a way to contact you and the relevant information we may be unable to respond. We do not make automated decisions with legal or similarly significant effects about you.
7. Hosting and delivery of getjackjack.app
The production website uses IONOS Webhosting Premium, provided by IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany. Delivering the website requires processing your IP address and technical request information. IONOS describes access data including the requested page or file, referrer, access time, browser, operating system and device type.
The purpose is to deliver the website and maintain its stability and security, based on our legitimate interest under Article 6(1)(f) GDPR. IONOS’s standard Webhosting documentation describes anonymized visitor IP addresses and an eight-week retention period for visitor data. See IONOS’s Webhosting data-processing information.
IONOS processes hosting and mailbox data on our behalf under a data-processing agreement. The separately hosted development preview is not the IONOS production website covered by this notice.
8. Cookies, Analytics and embedded content
The website does not integrate advertising trackers, an analytics script, a newsletter or a contact form. Fonts, images and demonstration videos are served with the website itself. Playing a demo does not load a YouTube or Vimeo player. The site displays a short privacy notice. When you dismiss it, a sessionStorage entry called “jackjack-privacy-notice-v1” remembers that choice in the current browser tab until the session ends. It is not an analytics identifier and does not enable or disable IONOS processing. This storage is used only to carry out your requested dismissal (section 25(2)(2) TDDDG). The corresponding purpose is based on our legitimate interest in respecting that choice (Article 6(1)(f) GDPR).
IONOS WebAnalytics remains enabled for this website. It uses hosting access data to provide aggregate visitor statistics and help improve the site. No analytics pixel is embedded by our website code. IONOS states that WebAnalytics does not use cookies and anonymizes IP addresses directly after transmission. The processing needed for these limited statistics is based on our legitimate interest in understanding and improving our website (Article 6(1)(f) GDPR). See IONOS’s WebAnalytics information.
The privacy notice’s “Got it” button only dismisses the notice. It is not a consent request and does not stop server logging or IONOS WebAnalytics. Your right to object to processing based on legitimate interests is explained below.
The TestFlight button is an ordinary external link. Apple receives a request when you follow it. Other external links similarly lead to the respective provider’s website and privacy terms.
9. Your rights
Where the GDPR applies and its conditions are met, you may request access, correction, deletion, restriction of processing and data portability. You may withdraw consent for future processing at any time; this does not affect the lawfulness of processing before withdrawal.
Right to object: If we process personal data on the basis of Article 6(1)(f) GDPR, you may object on grounds relating to your particular situation. We will stop that processing unless compelling legitimate grounds override your interests, rights and freedoms, or processing is needed for legal claims.
Contact jackjack@tommy-haacke.com to exercise your rights concerning information we hold. We cannot retrieve or delete local meeting files we have never received; you manage those in JackJack and your chosen storage.
You may complain to a data-protection supervisory authority, including the authority in your place of residence, work or the alleged infringement. Our local authority is the Bavarian State Office for Data Protection Supervision (BayLDA), Postfach 1349, 91504 Ansbach, Germany.
10. Changes
We update this notice when the app’s data flows, hosting or support arrangements change. This notice describes the public local-only release, not internal development tools or retired cloud-processing options.