Summary
DocGraph has no accounts, no analytics and no telemetry. Your notes are files on your own device, and we never receive them. The app only contacts the internet for features you switch on, buttons you press, and a daily update check that is on by default and can be turned off; each is listed below. This page also covers the website and email. For the design behind this, see how privacy works.
Who is responsible
The controller under the EU General Data Protection Regulation (GDPR) is:
DocGraphEmail: contact@docgraph.app
All privacy requests reach us at that address.
We are not required to appoint a data protection officer.
The DocGraph app
What stays on your device
Your vault, the search index, AI embeddings, settings, and the history of what the app sent over the network are stored only on your device. API keys you enter for cloud AI providers are kept in your operating system's keychain. We have no server that receives any of this, and no way to read it.
The app contains no analytics, crash reporting, advertising identifiers or tracking libraries. Connections it makes off your device are shown to you live and recorded in the app's activity ledger, except a remote Ollama's background status and model-management calls, which are shown but not recorded. Most connections go through one network gate that blocks any host not on its allowlist; git sync and app updates are recorded but use their own connection. Some traffic does not pass through DocGraph at all and so is neither shown nor recorded: external command-line agents and AI tools connected to the integration server, remote content you allow for a vault, and downloads Docker or Ollama make when you ask DocGraph to set them up.
Features that contact other services
Each feature below is off by default or runs only when you press a button, except the daily update check, which is on by default so security fixes reach you. When one runs, your device connects directly to the listed service, which therefore sees your IP address and the request. We do not receive a copy. The service processes that data as its own controller under its own privacy policy. The legal basis for us offering the connection is your request (Art. 6(1)(b) GDPR) and, where you switch a feature on, your consent (Art. 6(1)(a) GDPR), which you withdraw by switching it off. For the daily update check the basis is our legitimate interest in getting security fixes to you (Art. 6(1)(f) GDPR); you can switch it off at any time in Settings → Updates.
| Feature | When | What is sent | To |
|---|---|---|---|
| Update check | About once a day (on by default, switch off in Settings → Updates), and when you click "Check for updates" | Nothing about you: the check fetches one fixed file. If you install an update, the file for your platform is downloaded | GitHub (Microsoft), USA |
| Release notes images | When you open release notes with update checks on, or click "Load screenshots" | Version number in the request URL | docs.docgraph.app, hosted by Cloudflare |
| AI model and runtime downloads | When you choose to download a model (search, voice, or a local chat model) | The file requested | Hugging Face, USA; pyke.io; or a web address you paste for a model |
| Model catalogue refresh | When you click "Check for new models" | Nothing beyond the request | modelfit.docgraph.app (Cloudflare) or GitHub |
| Local AI via Ollama | When you use chat with Ollama | Prompts and note excerpts, to the Ollama program on your own computer | Your device only, unless you allow a remote Ollama, in which case the computer you point it at. A model name goes to registry.ollama.ai only when you click to check for a faster build, and when you ask DocGraph to pull a model, Ollama downloads it from its registry |
| Cloud AI providers | Only if you add an API key and pick a cloud model | Your prompts and the note excerpts the AI needs to answer, with your API key | The provider you chose, e.g. OpenAI, Anthropic, OpenRouter, or a custom endpoint you enter |
| Web search for the AI | Only if you set up a search backend | Search queries | The SearXNG instance you configure, which forwards queries to search engines |
| Git sync | Only if you add a git remote | Your vault's contents, using your own git credentials | The git host you choose |
| External AI agents | Only if you enable a command-line agent, e.g. Claude Code | Whatever that agent sends; it uses its own connection and account | That agent's provider, under its own terms. DocGraph logs that it ran but cannot see its traffic |
Local connections. The optional integration server for AI tools listens only on your own computer and is protected by a token.
The website docgraph.app
The website and its documentation are hosted by Cloudflare, Inc. When you visit, Cloudflare processes your IP address, the page requested, your browser's user agent and the time, to deliver the page and protect it against attacks. Our legal basis is our legitimate interest in a secure, working website (Art. 6(1)(f) GDPR). Cloudflare keeps these logs for a short period under its own policy. We do not have access to individual visitor logs, and the download counter described below keeps no request logs of its own.
The website sets no cookies, runs no analytics, and loads no fonts or scripts from other domains.
Download counting. When you click a download button, we count the click with the platform, the file chosen and the country derived by Cloudflare from your IP address. Your IP address itself is not stored. We use these anonymous totals to know which platforms to support (Art. 6(1)(f) GDPR). GitHub, where the files are hosted, also counts downloads.
If you email us, we use your address and message to reply (Art. 6(1)(b) or (f) GDPR). Email is hosted by Zoho Corporation in its EU data centre. We delete correspondence when it is no longer needed, unless the law requires us to keep it.
Transfers outside the EU
Cloudflare, GitHub and Hugging Face are based in the USA. Cloudflare and GitHub's parent Microsoft are certified under the EU-U.S. Data Privacy Framework. Other transfers rely on the providers' standard contractual clauses. Services you connect to yourself, such as a cloud AI provider, may be located anywhere; check their policies.
What we do not do
- We do not sell or share personal data for advertising.
- We do not build profiles or make automated decisions about you.
- We do not use your notes to train AI models. We never receive them.
Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability, and to object to processing based on legitimate interest (Art. 15 to 21 GDPR). You can withdraw consent at any time, for the future. Write to contact@docgraph.app. Because we hold no accounts, for most requests there will be nothing on our side to provide. We will tell you so.
You also have the right to complain to a data protection supervisory authority, in particular in the EU member state where you live or work.
Children
DocGraph is not directed at children under 16, and we do not knowingly collect their data.
Changes
We update this policy when the app or website changes how they handle data. The effective date at the top shows the current version.