Legal

Privacy Policy

Effective September 11, 2026. Applies to the Quorum macOS application and to this website.

The short version. Quorum has no backend. There is no account, no sign-in, and no analytics, telemetry, advertising identifier or crash-reporting service in the app. Everything you create stays in your own user folder on your Mac. The only network requests the app makes are to endpoints you have configured yourself, and what you send to those endpoints is governed by their operators, not by us.

1. Who we are

Quorum is developed and published by Joseph Ridenour, an individual developer ("we", "us"). Quorum is a native macOS application that runs entirely on your own computer. It is distributed through the Mac App Store.

2. What we collect

Nothing. We operate no servers that the app talks to, and we receive no data from it:

No account, profile, email address or sign-in of any kind.
No analytics or product telemetry. The app contains no analytics SDK.
No crash or diagnostic reporting service.
No advertising, tracking or device identifiers, and no advertising networks.
No collection of your messages, transcripts, prompts, agent configurations, files or model outputs.

We do not sell, share or otherwise disclose personal information, because we do not have any. We do not build profiles and we do not track you across apps or websites.

3. What the app stores on your device

Quorum stores what it needs to work in your own macOS user account, inside its App Sandbox container. This data never leaves your Mac unless you move or export it yourself.

Your workspace — agents, channels, direct messages, message transcripts, templates and audit records — in your Application Support folder under the app's container.
Your preferences — appearance, presets and keyboard shortcuts — alongside it.
Credentials — API keys for model providers or tool servers — as separate entries in the macOS Keychain. They are never written into a workspace file, and never included in an exported template.
Agent computer data — if you give an agent its own Linux computer, its disk image and downloaded runtime artifacts are stored under the app's container. The guest's root filesystem is rebuilt on every boot.

Deleting the application and its container removes this data. Backups you make yourself (Time Machine, iCloud Drive, an exported template) are under your control, not ours.

4. Network connections the app makes

Quorum makes network requests only where you have asked it to. Specifically:

Model servers you configure. Requests carry the conversation context an agent needs and any key you supplied for that endpoint.
Tool servers you install (for example Model Context Protocol servers), and the catalogs you choose to browse.
Runtime artifacts for agent computers — a container init image and a Linux kernel — downloaded once from their public sources, and only after you confirm what will be fetched and from where.

Plain HTTP is permitted only for loopback addresses on your own machine; any remote endpoint must use HTTPS. If you run a model server locally, Quorum can be used with no internet connection at all.

5. Third parties you choose

When you point Quorum at a hosted model provider or a remote tool server, the content you and your agents send is transmitted to that operator and handled under their privacy policy and terms — including any retention, training or logging they perform. We are not a party to that exchange, have no visibility into it, and cannot delete data on your behalf from a service we do not operate. Review the policies of any provider you configure, and avoid sending sensitive information to a service whose terms you have not accepted.

6. Apple and the App Store

Purchases, downloads and updates are handled by Apple. Apple may collect information under its own privacy policy, and provides developers with aggregated, non-identifying sales and usage statistics — and, if you opt in to sharing analytics with developers in macOS, aggregated crash and performance data through Apple's own reporting. We receive no directly identifying information about you through these channels and do not attempt to re-identify anyone from them.

7. This website

This site is a set of static pages hosted on GitHub Pages. It sets no cookies, runs no analytics and has no tracking scripts. It loads a typeface from Google Fonts, which means your browser makes a request to Google's font servers; that request is subject to Google's privacy policy. GitHub, as the host, may process standard server request logs under its own policy. Following a link from here to the App Store or to GitHub takes you to services with their own policies.

8. Your rights and choices

Privacy laws such as the GDPR and the CCPA give you rights to access, correct, delete, port and restrict the processing of your personal data. Those rights are exercised against whoever holds the data. Because we hold none, there is nothing for us to produce or erase — your data is already in your hands, on your own machine, where you can read, export or delete it directly at any time. If you configured a third-party model provider, exercise your rights with that provider.

9. Children

Quorum is a developer and productivity tool intended for adults. It is not directed at children under 13, and we do not knowingly collect information from anyone — children included.

10. Changes

If this policy changes, the revised version is posted here with a new effective date. A change that materially alters what the application does with your data will also be described in the release notes for the version that introduces it.

11. Contact

Questions about this policy go to support@joesapps.net. The support page covers the app itself.