Last updated · 2026-05-02

Privacy policy.

Huduko is built around the idea that your files don't need to leave your machine to be searchable. This page explains what little data does leave your machine, what we use it for, and how to turn it off.

The short version

Your files never leave
your machine.

Huduko reads, indexes, and searches your documents and photos entirely on your Mac. The AI models, the search index, every byte of file content, every embedding, every thumbnail — all of it stays under ~/.huduko/ on your disk. Nothing is uploaded. There are no accounts, no sign-ins, no servers that see your data.

The only thing Huduko sends over the network, by default, is anonymous performance and reliability telemetry — described in detail below. You can turn it off in Settings at any time.

Telemetry

What we collect.
And what we don't.

Telemetry is on by default. It helps us understand how Huduko performs across different Macs, where it gets stuck, and which features get used. Every event passes through a strict per-event property allowlist. Nothing else gets sent.

What we do collect

Category What's in it
Performance Search latency in milliseconds, indexing throughput, app startup timing breakdown, queue depth.
App state snapshots How many documents and photos are indexed, total database size on disk.
Usage events Search performed (filter type only — no query content), result opened, theme changed, watch directory added/removed, settings reset, photo authorization status.
Errors Error class names from search/index/GPU crashes, frontend crash component stacks. No file paths, no document content.
Device context Operating system version, app version, GPU name(s), system locale.
Anonymous device ID A 16-character SHA-256 hash of hardware attributes generated locally on first launch. We use it to group events from the same install across days. It's not your Apple ID, not Apple's IDFA, not anything you can sign into. It's a one-way hash — we can't reverse it back to anything identifiable.
Feedback you send us If you use the in-app Feedback dialog, the text you type is sent along with the category you chose. This is the only place where your own words leave your machine, and only when you click Send.

What we don't collect

Storage

Where it's stored.
And how long.

Telemetry is delivered over HTTPS to our backend. Our hosting provider receives the request's IP address as a normal byproduct of HTTPS — we don't store IPs alongside telemetry events; only the provider's standard request logs see them, with the provider's default retention.

Telemetry events are retained for up to 12 months and then deleted. Aggregated summaries derived from them (e.g. weekly p95 search latency across the user base) may be retained longer in anonymized form. We don't sell, license, or otherwise share telemetry with third parties for advertising or marketing.

Your controls

Turn it off in two clicks.

Open Huduko → Settings → toggle Anonymous usage analytics off. That's it. No telemetry leaves your machine after that. Pending events queued locally are discarded.

To delete telemetry already received from your install, email us at the address below with your device ID (visible in Settings → About). We'll delete all rows matching that hash. Because we have no way to associate the device ID with you personally, we'll need you to provide it; we can't look it up from your name or email.

You can also export and inspect everything Huduko has recorded locally before it's uploaded — the queue lives at ~/.huduko/telemetry.db and Settings → Audit Log shows every event in human-readable form.

Other particulars

The legal-ish bits.

Children. Huduko is rated 4+ on the Mac App Store and is suitable for users of all ages. The anonymous telemetry described above contains no personal information from anyone, regardless of age, and we do not knowingly collect personal information from any user.

Changes to this policy. If we change what telemetry collects or how it's stored, we'll update this page and announce the change in the app's release notes. The date at the top reflects the last revision.

Jurisdiction. Huduko is operated from the United States. If you're in the EEA, UK, or California, the rights granted to you by GDPR / UK-GDPR / CCPA apply: access, correction, deletion, portability, and opt-out of sale (we don't sell, but you have the right anyway). Use the email below to exercise any of these.

Contact. Privacy questions, deletion requests, or anything else: support@huduko.io.

Try it

Search your stuff,
without the cloud.

$9.99 on the Mac App Store. One-time purchase, no subscription. Install once, and every file and photo on your Mac becomes findable — by meaning, not just filenames.

Want to try before buying? Email support@huduko.io for free TestFlight access.