Your data, your rules.

Last updated: 2 October 2026

This is a courtesy translation. Only the French version is legally binding.

Who we are

TyKaoz is published by Haruni SAS, a French simplified joint-stock company registered with the Rennes trade register under SIREN number 482 371 564.

Registered office: 18 Rue Noël Blayau, 35000 Rennes, France
Legal representative: Sébastien Burel, president
Data controller: Sébastien Burel

What we collect

On this website, we collect a single piece of personal data: your email address, when you give it to us voluntarily through the sign-up form. Buying a licence adds a few more, set out in section 3.

Outside of a purchase, we collect no other personal data: not your name, not your address, not your phone number, not your date of birth, not your job title, not your company. Just your email.

We do measure site traffic for our internal statistics, using a cookie-free tool that cannot identify you. The details are in section 7.

We use no cookies on this site (see section 7).

If you buy a licence

The purchase goes through Paddle.com Market Ltd, acting as Merchant of Record: Paddle takes the payment, applies your country's tax and issues the invoice. We never see your payment details — no card number, no bank account. They do not pass through our servers and we have no access to them.

What we keep, once the purchase completes:

The machine identifier deserves a word, because this is where many vendors take liberties. It is drawn at random on first activation and stored in your Mac's keychain. It derives from nothing about your hardware, cannot be used to recognise you anywhere else, and two installations on the same Mac would produce two different identifiers. Its only purpose is to count the machines a licence covers — three at most — and you can release one from the settings.

This data is hosted in France, at Scaleway, region fr-par. The application contacts the licensing service on activation, then at each launch, to check that a licence has not been refunded.

If you use TyKaoz Cloud

TyKaoz Cloud is the model provider we run ourselves, for those who would rather not open an account with a third party. It works with a key attached to your licence, which the application receives on activation. You are not required to use it: local models and the other providers remain available, and none of what follows applies until you choose it.

With TyKaoz · Germany, your messages are processed by Amazon Nova models hosted in the AWS European Sovereign Cloud, Brandenburg region, Germany — an infrastructure operated by a European Amazon entity, separate from its commercial regions. The content of your exchanges passes through it to produce the answer and is kept neither by us nor by AWS; it is not used to train any model. Our service does not read it and does not log it.

With TyKaoz · France, your messages are processed in Paris by the models Scaleway, a French company, hosts in its fr-par region (Mistral, Qwen, Llama, Gemma, DeepSeek, GLM, gpt-oss). If you chose it to index your wiki, the text of your pages and your searches are sent there too, to be turned into vectors. Same key, same allowance, same guarantees: this content is kept neither by us nor by Scaleway, and trains no model.

With TyKaoz · Switzerland, your messages go through our service in Paris, at Scaleway, which relays them without keeping them, and are then processed in Switzerland by the models Infomaniak, a Swiss company, hosts in its own data centres (Mistral, Ministral, Gemma, Qwen, Kimi, Apertus). If you chose it to index your wiki, the text of your pages and your searches are sent there too, to be turned into vectors. Same guarantees: this content is kept neither by us nor by Infomaniak, and trains no model.

What we keep, for each request:

These counts are recorded by the licensing service, in France, beside your licence. They contain neither your messages, nor your documents, nor the models' answers.

What the application does not send

This is probably the point that matters most: the application sends us nothing about what you do with it. Not your conversations, not your documents, not your wiki, not your indexes, not your queries. No telemetry, no automatic crash reporting, no "product improvement data".

The only requests TyKaoz makes to our servers concern your licence, checking for updates and, if you chose it, TyKaoz Cloud (see the previous section). Everything else — your files, your exchanges — lives on your Mac.

One measurement follows from this, made by our server and not by the application: each successful licence check is counted in our Plausible (see Cookies and trackers). The licensing service passes on the type of request, the application's network identification (its name and the macOS version) and your IP address, which Plausible does not keep. Never your licence key, your Mac's identifier or your email. Without a licence, the application does not contact this service and is not counted.

If you configure a remote model provider (OpenAI, Anthropic, Mistral, Google and others), your messages then go straight to that provider, using your own API keys, without passing through us. What that third party does with them is governed by their terms, which we encourage you to read. Models running on your Mac — Apple Intelligence, local MLX — send nothing anywhere.

Why we collect it

To let you know when TyKaoz is available. You will then receive one email announcing the launch, with a link to download or try the product — and, within the following year, at most one follow-up, and only if the product changes significantly.

You will receive no other email: no regular newsletter, no promotions, no satisfaction surveys. Two at most, never more, and the unsubscribe link is there from the first one.

If you buy a licence, we write to you to send your key and to answer your questions. These are service emails, tied to performing the contract, and separate from the waiting list: buying does not sign you up to it, and unsubscribing from it does not cost you your key.

Who has access

Your email address is accessible to:

• Sébastien Burel, as data controller at Haruni SAS
• Our email delivery provider, Brevo (formerly Sendinblue), a French company based in Paris, which stores your data on servers located in the European Union — see their privacy policy

If you have bought a licence, add to that:

• Paddle.com Market Ltd, our Merchant of Record, a UK company, which handles payment and invoicing — see their privacy policy. The transfer to the United Kingdom relies on the European Commission's adequacy decision
• Scaleway, a French company, which hosts the licensing service in its fr-par region — see their privacy policy

If you use TyKaoz Cloud, depending on the region you chose:

• Scaleway, for TyKaoz · France: your messages, and the text of your pages if you chose it to index your wiki, are processed there in Paris for as long as it takes to answer, and not kept. For TyKaoz · Switzerland, our service hosted at Scaleway in Paris only relays your requests to Infomaniak, without keeping them
• Amazon Web Services EMEA SARL, a Luxembourg company, our contracting party for the AWS European Sovereign Cloud, whose German infrastructure is operated by Amazon Data Services European Sovereign Cloud GmbH, a subsidiary of AWS European Sovereign Cloud GmbH, a German company run from within the European Union. Your messages are processed there for as long as it takes to produce the answer, without being kept — see their privacy policy
• Infomaniak Network SA, a Swiss company based in Les Acacias, near Geneva, for TyKaoz · Switzerland: your messages, and the text of your pages if you chose it to index your wiki, are processed there in Switzerland for as long as it takes to answer, and not kept — see their privacy policy. The transfer to Switzerland relies on the European Commission's adequacy decision

We never sell, rent or share your email with any commercial third party. Ever.

How long we keep it

Your email is kept until TyKaoz launches, then for 12 months after the launch email is sent — exactly the window of the follow-up described above.

After that, your address is permanently deleted from our systems and from Brevo's, with no action needed on your part.

You can of course ask us to delete your address at any time (see the section on your rights).

Data tied to a purchase follows a different rule. Your licence is perpetual: we must be able to revalidate and reissue it for as long as it exists, so we keep it for as long as it is active. The related accounting records are kept for 10 years, a period French law imposes and from which we cannot depart.

A refund closes the licence: the machine identifiers attached to it are deleted, and only the accounting record of the transaction remains.

TyKaoz Cloud usage counts are kept for 12 months, long enough to answer a question about a billed period, then deleted.

Your rights

Under the General Data Protection Regulation (GDPR), you have the following rights at any time:

Right of access

You can ask us what information we hold about you. In our case it is simple: your email address, and nothing else.

Right to rectification

If your address changes, write to us and we will update it.

Right to erasure (“right to be forgotten”)

You can ask us to remove your address from our list at any time, by a simple email. We commit to doing so within 7 days.

Right to object and to withdraw consent

You can withdraw your consent at any time. In practice: every email you receive from us contains a one-click unsubscribe link.

Right to data portability

You can ask us for a copy of your data in a readable format (your email address will be sent to you by email, unsurprisingly).

Right to lodge a complaint

If you believe your rights are not being respected, you can lodge a complaint with the CNIL, the French data protection authority: cnil.fr/fr/plaintes. If you live elsewhere in the European Economic Area, you may also contact the supervisory authority of your own country.

To exercise any of these rights, write to us at demat@tykaoz.bzh. We will reply within 7 working days at the most.

Cookies and trackers

No cookie is placed on your device by this site. No Google Analytics, no Meta, no advertising tracker, no banner to click through.

We measure traffic to this site with Plausible Analytics, and only for our internal statistics: knowing how many people visit the site and which pages they read. These figures are for us alone. They are not sold, not shared, and not used for advertising.

Plausible is cookie-free and uses no persistent identifier: it does not follow you from one site to another, builds no profile, and does not retain your IP address. We host it ourselves, on our own infrastructure, at analytics.haruni.net — so no browsing data is passed on to a third party.

The information measured is strictly aggregated: page viewed, referring site, device type, browser and country. None of it can identify you, or link a visit to the email address you may have left in the form.

The same Plausible also counts, under a separate name (app.tykaoz.bzh), the licence checks our service receives: how many licensed Macs launch each day, and from which country. Our server sends this, not the application, with the same guarantees: no identifier, IP address not kept.

The only other external requests made are to fonts.googleapis.com, to load the site's typefaces. Google may log the IP address requesting those fonts, without associating it with an identity. We regularly reassess serving these fonts from our own infrastructure, to remove that dependency.

Changes to this policy

This policy may change if the product changes what it collects, or if we start relying on a new provider.

Any substantial change will be notified to you by email before it takes effect, and you will remain free to withdraw your consent at that point. The date at the top of this page shows the last revision.

Contact us