Privacy Policy

Effective date: February 15, 2026

Tagalong is a native macOS application for meeting recording, transcription, and AI-powered summary generation. We are committed to your privacy. This policy explains how your data is handled across the two licensing modes available in the application.

1. Product Overview

Tagalong operates in two distinct modes, each with different data handling characteristics:

Mode	Data Routing	API Keys
Private License	Direct to third-party APIs	User provides their own
Subscription	Through our proxy at api.tagalongai.com	Managed by Tagalong

2. Private License Mode

In Private License mode, Tagalong operates entirely between your Mac and the third-party AI services you configure. No data is sent to Tagalong servers.

• Audio recording is captured and stored locally on your Mac.
• Transcripts, summaries, infographics, and meeting notes are generated and stored in a directory you choose (default: ~/Documents/Tagalong/).
• API keys (OpenAI, AssemblyAI, Google Gemini) are stored securely in the macOS Keychain using Data Protection. They are never transmitted to Tagalong.
• Audio and transcript data is sent directly from your Mac to the third-party APIs (OpenAI, AssemblyAI, Google Gemini) for processing. These transmissions use the API keys you provide and are governed by the respective third-party privacy policies.

3. Subscription Mode

In Subscription mode, audio and transcript data is routed through our proxy server at api.tagalongai.com before being forwarded to the underlying AI services.

• Ephemeral processing only. Audio chunks and transcript data pass through our proxy in real time and are forwarded to OpenAI, AssemblyAI, or Google Gemini for processing. We do not store audio, transcripts, summaries, or any meeting content on our servers.
• Authentication is handled via JWT tokens. Your subscription credentials are used to authorize proxy requests — the underlying API keys are managed by Tagalong and are not exposed to you.
• No long-term storage. Our proxy does not retain any meeting data after the request completes. Request logs may include metadata (timestamps, request sizes, endpoint called) for operational purposes but never contain meeting content.
• Local storage of final outputs (transcripts, summaries, infographics, notes) remains on your Mac, identical to Private License mode.

Optional AI assistant connections

Release status: Tagalong 3.4.1 includes the Claude Desktop extension and a private ChatGPT setup kit. Interactive ChatGPT rendering has not been validated.

When you enable “Allow AI assistants to read this folder” in Tagalong 3.4.1, a local permission file records the library folder and your access choice. Current and future supported meeting Markdown and personal-note text in that folder and subfolders become available for retrieval. Audio, images, hidden files, symlinks and hard links are excluded. The connector searches on demand; it does not replicate the library or create a cloud index. Task status is read-only. Changing folders disables access until you enable it again; upgrading older individual-document permissions does not silently grant folder-wide access. Folder restrictions are enforced by the connector, not an operating-system sandbox.

Search results and retrieved excerpts are sent to the connected AI provider. They may remain in the provider’s conversation history according to your account and workspace policies. Turning sharing off stops future retrieval; it does not remove content already sent to an AI conversation. The ChatGPT private connection uses OpenAI Secure MCP Tunnel and requires the Mac and tunnel client to be available.

4. Third-Party AI Services

Both licensing modes rely on the following third-party services for AI processing. Your use of Tagalong means your audio and text data will be processed by these services according to their respective privacy policies:

• OpenAI — Whisper (speech-to-text transcription) and GPT (meeting summary generation). OpenAI Privacy Policy
• AssemblyAI — Speaker diarization (identifying who said what). AssemblyAI Privacy Policy
• Google Gemini — Infographic image generation. Google AI Terms

We encourage you to review these policies to understand how your data is handled by each provider.

5. Local Data Storage

All meeting outputs are stored locally on your Mac:

• Default location: ~/Documents/Tagalong/{meeting-name}/
• Transcript: Markdown file (.md) with speaker labels and timestamps
• Meeting notes: Plain text file (_notes.txt), human-editable
• Infographic: JPEG image (_infographic.jpg)
• Audio recording: WAV file (.wav), if recording was used

You can move, copy, delete, or back up these files. Tagalong reads saved meeting files when you reopen or search them. AI features may send relevant meeting content for processing, and enabled integrations may receive content you choose to share. A folder in iCloud Drive or another storage service may also sync according to that service’s settings. Deleting local files does not remove content already sent to a provider or integration.

6. Keychain Security

API keys and license keys are stored in the macOS Keychain under the service identifier com.tagalongai.tagalong. The Keychain provides:

• Hardware-backed encryption via the Secure Enclave (on supported Macs)
• Data Protection class access controls
• Per-application access restrictions

Keys are never written to disk in plaintext, logged, or transmitted to Tagalong servers.

7. Analytics, Tracking, and Data Collection

Future consideration: We may introduce opt-in error reporting (e.g., via Sentry) in a future release to help diagnose crashes. This would be strictly opt-in, anonymized, and limited to crash data. This privacy policy will be updated before any such feature is shipped.

8. macOS Permissions

Tagalong requests the following macOS permissions:

• Microphone Access — Required for meeting recording. The app records audio from your selected input device.
• System Audio Recording — Required only for Conference Mode, which captures system audio (e.g., Zoom, Teams, Google Meet) via Core Audio. This permission is not needed for microphone-only recording. No screen content is captured or accessed.

You can revoke these permissions at any time in System Settings > Privacy & Security.

9. Children's Privacy

Tagalong is not directed at children under 13. We do not knowingly collect information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via our website and, where possible, through in-app notification. The "Effective date" at the top of this page indicates when the policy was last revised.

11. Contact

If you have questions about this Privacy Policy or your data, contact us at:

support@tagalongai.com