Corixa Spaces Privacy Policy

Who We Are

Corixa Spaces is a macOS app made by Corixa. This policy explains what the app stores, what it sends where, and how to remove it. Questions: privacy@corixa.io.

What the App Stores on Your Mac

• Spaces, panels and notes: in the app's database inside its macOS container. iCloud sync is not used
• Sign-ins and website data: cookies and site data are kept by macOS (WebKit) in a separate store for each space. A panel set to use the shared session uses the shared macOS store instead
• AI Chat: conversations are saved in the app's database. Documents you add are indexed into a database inside the app's container; these files are not encrypted by the app
• AI models: models you download are stored in a folder shared with SafeRag SE, so both apps can use them
• GitHub sign-in: the access token is stored in your Mac's Keychain
• Error log: failures are written to a log file in the app's container and to the macOS system log. Entries can include page addresses and file names. The log never leaves your Mac unless you send it to us
• Settings: preferences such as shortcuts and which sites may open other apps

What Leaves Your Mac

• The websites you use: pages in a panel connect to those sites like any browser, and their own privacy policies apply
• Site icons: when you add a website, and at launch for sites without an icon, the app fetches the site's page and icon from that site's own server
• GitHub (optional): if you connect GitHub, the app signs in through GitHub and fetches your user name and avatar and, for spaces linked to a repository or owner, your open pull requests, review requests, assigned issues and mentions. If you use Copy Shareable Link, the shared space is uploaded to GitHub as a secret gist in your account. You can revoke access in your GitHub settings
• AI model downloads (optional): models you choose to download come from Hugging Face
• App Store: purchases, the trial and Restore Purchases are handled by Apple

There are no analytics, tracking, advertising or crash-reporting services in the app, and it has no Corixa server to send data to.

AI Features

• Ask about the page uses Apple Intelligence on your Mac (macOS 26). When the page is included, up to 6,000 characters of its text and its address go to the on-device model. These conversations are not saved
• AI Chat uses models you download, Ollama running on your Mac, or Apple Intelligence. The app has no connection to a cloud AI service, and your documents are indexed on your Mac

Calendars and Reminders

Only the Agenda panel uses Calendars and Reminders, and macOS asks for access the first time you open one. The panel reads your events and reminders to show them, and writes only when you create an event or reminder or tick a reminder off. Events are not copied or sent anywhere; the app saves only which calendars each Agenda panel shows.

Camera, Microphone and Files

• Websites such as video calls can use the camera and microphone after you allow it in the macOS prompt. You can change this in System Settings → Privacy & Security
• The app opens only the files and folders you choose, and saves downloads to your Downloads folder

Backups and Shared Spaces

• Backups and shared spaces are plain files saved where you choose. They are not encrypted
• Backups contain spaces, panels, layout, notes and custom icons. They don't contain sign-ins, cookies, the GitHub token, AI Chat conversations or documents
• Shared spaces never contain sign-ins. Notes are included only if you choose. Custom scripts are included, and are turned off on import unless the recipient enables them

Removing Your Data

• Deleting a space removes its sign-ins and website data. Panels set to use the shared session keep theirs in the shared macOS store
• Settings → Spaces → Profile data can clear cached data or all website data
• Disconnecting GitHub deletes the token from your Keychain
• The app's data lives in its container in your Library folder; deleting the app and its container removes it. Downloaded AI models stay in the folder shared with SafeRag SE until you delete them

Children

Corixa Spaces is not directed at children and we don't knowingly collect data from anyone.

Changes

If this policy changes, we'll update this page and the date above.