Trunkbase is a local-first desktop application. Your documents, the notes it decomposes them into, and your entire vault live on your own machine. This notice explains the very small amount of data we do and don't handle, and the choices you have.
1. Scope of this notice
This notice applies to the Trunkbase desktop application ("the App") and to this marketing website ("the Site"). It does not apply to third-party services you may separately choose to connect, which are governed by their own policies (see Third-party AI providers).
2. Our role
For the limited data you submit through the Site, Trunkbase acts as the party that decides why and how it is processed. For everything the App does with your documents on your device, you remain in control — that processing happens entirely on your computer and we are not involved in it.
3. Local-first processing
The App decomposes your documents into notes, builds a searchable index, and renders the knowledge graph on your device. Deterministic parsing handles most content locally; any AI assistance runs against a model you choose (a local model, or a provider you connect yourself). None of this sends your files or their contents to Trunkbase.
- Your vault is a normal folder of files on your disk that you own and control.
- We do not receive, store, or have access to your document contents, note text, tags, or index.
- Uninstalling the App leaves your vault files exactly where they are.
4. Data you provide to us
We only hold personal data you actively give us, which may include:
- Contact details — an email address if you join a waitlist, subscribe to updates, or contact support.
- Correspondence — the content of messages you send us and any information you include in them.
- Feedback — bug reports or suggestions you choose to share.
- Basic website telemetry — website visit from ISP provided IP, and clicks on download buttons.
- Basic website desktop app — strictly OPT-IN, for collecting anonymized usage data to improve the product. Focuses on surface level interactions such as triggering a function, errors or crashes.
Data is primarily for improving the product or responding to you, to send the updates you requested, and to improve overall Trunkbase user-experience.
5. Data collected automatically by the Site
When you visit the Site, our hosting provider may record standard server logs (IP address, browser type, pages requested, timestamps) for security and reliability. The App itself contains no profile tracking. We do not build advertising profiles, and we do not use third-party ad networks.
6. Third-party AI providers (MCP)
Trunkbase lets you optionally connect AI providers over MCP. Your choice determines where your data goes:
- Local model (e.g. Ollama): prompts and context are processed on your machine and are not sent anywhere.
- Cloud provider you connect (e.g. Claude, OpenAI, Gemini): when you use it, the relevant prompt and context are sent to that provider under your arrangement with them, governed by their privacy policy and terms — not ours.
Connecting a cloud provider is entirely optional and off by default.
7. How we share data
We do not sell your personal data. We share the limited data described above only with service providers that operate the Site and our email on our behalf (such as hosting and email-delivery vendors), and only as needed to provide those services or to comply with the law.
8. Your choices
- Email: you can unsubscribe from any update email or ask us to delete your address at any time.
- The Site: this website uses very basic analytics — such as page visits — to understand how it's used and improve it.
- The App: the desktop app captures basic telemetry — errors, crashes, and app launches — to help us diagnose problems and improve the experience. It strictly captures no personal identifiers, no document content, and has no visibility into your files: only simple UI and usage signals, used for improvements. Your vault always stays under your control on your own machine.
- Access & deletion: to request access to or deletion of any personal data you've sent us, contact us below. (Only email addresses are considered PII - other infromation we cannot identify users.)
9. Data retention
We keep the personal data you submit only as long as needed for the purpose you gave it (for example, until you unsubscribe or ask us to delete it). Vault data on your device is retained entirely by you.
10. Children
Trunkbase is not directed to children and we do not knowingly collect personal data from anyone under 16. If you believe a child has sent us personal data, contact us and we will delete it.
11. Third-party links
The Site may link to external websites and services we do not control. Their privacy practices are their own, and we encourage you to review them.
12. Changes to this notice
We may update this notice from time to time. When we do, we'll revise the effective date above, and for material changes we'll provide a more prominent notice where appropriate.
13. Contact us
Questions about privacy? Email us at rescueahero@gmail.com.