Your files.
Your control.

The essentials

Core document indexing, search, OCR, and previews run on your Mac. We do not operate a server that receives your document library or file-search queries. You do not need an account or a separate AI download for document search. We do not sell personal information, use it for targeted advertising, or add advertising or analytics trackers to the app or website.

An existing local Ollama installation can process text for optional search ranking. Visiting our website or emailing support also involves the hosting and email providers described below.

Documents and your local index

Diakto reads supported files in folders you select and stores extracted text, OCR text, filenames, paths, dates, document metadata, search history, saved searches, previews, and search-ranking embeddings locally. It uses this information to find, rank, and display results, detect file changes, and resume unfinished indexing. Indexing and OCR do not rewrite your original documents.

The direct-download edition stores this data in a local Application Support directory. App Store and TestFlight editions use a separate macOS app container. Previously indexed text may remain searchable when a drive is disconnected or a cloud file is online-only. Making a file unavailable is not the same as deleting its indexed text.

Optional on-device AI and local Ollama

Apple query planning and language embeddings used by Diakto run on device. “Rank results by meaning” is enabled by default. If a compatible embedding model is already installed and available through Ollama on this Mac, Diakto can use it to process query or document text for ranking. Otherwise it uses available Apple language features. Search does not require Ollama, and Diakto does not install or download its models.

Diakto accepts only loopback Ollama addresses, blocks HTTP redirects, and checks model metadata before sending text. Cloud-backed or unverified models are rejected. Ollama is separate software under your control; these checks cannot control a modified local server or another program that forwards information. You can turn off “Rank results by meaning” in Settings → Search and clear the ranking cache there.

Previously indexed mail

Diakto no longer offers Microsoft sign-in or mailbox sync. It does not connect to Microsoft to authenticate or download messages. Local email files in folders you select can still be indexed.

If you used an earlier mail-enabled version, previously downloaded messages and account records remain in that installation's local index. On launch, Diakto attempts to remove that installation's unused sign-in credentials from Keychain without reading or sending them. If macOS prevents removal, the credentials remain unused; a later launch retries. To erase the old local mail records, use Settings → Storage → Previously indexed mail → Remove Cached Mail, or Factory reset. Copies in exported backups or earlier installations can remain.

This does not delete your remote mailbox or revoke consent previously granted to a third party. You can manage old Microsoft consent through your Microsoft account or organization. Opening a saved message link opens your browser and that provider's website under its own policies.

Previews and diagnostics

Embedded HTML document previews block remote images and other network subresources and disable document-provided JavaScript. When you open an original file in another app, that app controls how it handles the file and any external content.

The local debug console can contain search terms, file paths, account addresses, and error details. Saving diagnostic logs is off by default. If enabled in Settings → Advanced, saved logs remain local and rotate at about 5 MB per file with one prior file retained. Clear in the console removes its entries and saved log files. Diakto does not automatically upload diagnostic logs or crash reports to us. Apple may separately handle App Store or TestFlight diagnostics and feedback according to your settings and Apple's policies.

Storage, retention, and your controls

Diakto retains its local index while you use it so searches work without rescanning every document. Removing an indexed folder removes its owned search entries while preserving entries also covered by another selected folder. Cached previews, recovery copies, and exported backups can outlast individual search entries. Rebuilding or resetting search data is a maintenance operation, not a complete privacy erase.

For a full in-app reset, use Settings → Storage → Reset and recovery → Factory reset → Erase All…. After confirmation, this clears indexed files and synced mail, old local account records and credentials, cached previews, logs, history, saved searches, selected folders, and app-managed database backups and recovery copies. It leaves your original files and remote mailbox intact. Earlier app editions, copies you exported, external backups, macOS snapshots, and SSD storage behavior can retain information after deletion. Uninstalling the app alone should not be relied on to erase every copy.

Diakto does not itself encrypt the index, previews, logs, or backups. macOS account permissions and device protection such as FileVault can help protect them. Keep your Mac and backups secure, and do not share your index or diagnostic files without reviewing their contents. No storage or transmission method can guarantee absolute security.

Website and support information

The website's search examples use fictional documents and run in your browser. They do not access your files or send the demo search to a search service. We have no signup form or mailing list and add no advertising cookies, pixels, analytics scripts, or third-party fonts to this site. Your light or dark appearance choice is saved only in your browser’s local storage so it can be remembered across visits; it is not sent to us. Clearing this site’s browser data removes that preference. Hosting infrastructure may use technical mechanisms needed to serve or protect the site.

Bluehost provides our website hosting and support mailbox. Serving the website can involve IP addresses, requested pages, timestamps, referring pages, and browser or device information in hosting/security logs. When you email support@diakto.com, we and our email providers receive your address, message, attachments, and associated delivery information. We use this to answer you, troubleshoot problems, protect the service, and handle privacy requests. Send only information you intend to share; a fictional example is preferable to a private document.

We keep support correspondence for as long as needed to resolve the request and maintain a useful support record, or longer when required for legal obligations or disputes. Hosting and email logs and backups follow the provider's retention practices. You can ask us to delete support correspondence; copies in provider backups may remain until those backups expire. Bluehost's parent company describes its practices at https://newfold.com/privacy-center.

We use service providers as needed to deliver and protect the website and email service. Information may be processed in the United States or other locations used by those providers. We may also disclose information we hold when required by law or necessary to protect rights and security. We do not give your support messages to advertisers or sell them.

Privacy requests

Contact support@diakto.com to ask about information we hold, request access, correction, or deletion, or raise a privacy concern. Depending on where you live, you may also have rights to a copy of your information, to object to or restrict processing, withdraw consent, or complain to a relevant privacy authority. We may need enough information to verify a request and may retain records where legally required.

We cannot remotely retrieve or erase the document index on your Mac; use the local controls above. Third-party account records and backups may need to be managed directly with their provider. Do not send passwords, sign-in codes, or an entire document library with a request.

Children and policy changes

Diakto is a general-purpose productivity app and is not directed to children under 13. If you believe a child has sent personal information to us, contact support@diakto.com so we can address it.

We will update this policy when our practices change and show the effective date here. The current public version is at https://diakto.com/privacy.html. The app also includes an offline copy in Settings and Help. Information about getting help is at https://diakto.com/support.html.