1. Introduction & Scope
This Privacy Statement describes how ZMatrix Model Studio ("ZMatrix Model Studio," "the App," "we," "us," or "our") handles information when you use it on your Mac. ZMatrix Model Studio is developed and published by Halonex Labs Private Limited ("Halonex").
ZMatrix Model Studio is a studio for working with AI models on your own Mac: you can find and download models and datasets, chat with models, generate images, run benchmarks, build Compose flows and decision models, serve models to other apps through a local server, and publish models to Hugging Face. Models run on your Mac, not on Halonex servers.
This statement is Version 1. You accept it together with the Terms of Use during onboarding, and it applies to both the directly downloaded edition and the Mac App Store edition of the App. Where the two editions differ, this statement says so.
In Short: No Telemetry
The App sends nothing about you or how you use it. Prompts, conversations and models stay on this Mac. It connects to Hugging Face only when you search, download or publish, with your access token if you saved one, and once a day to see whether its built-in datasets changed (you can turn that off). It contacts an MCP server or a remote decision service only if you add one yourself. The directly downloaded edition also asks Halonex's update server for its update feed when you choose Check for Updates…, or once a day if you turn automatic checks on; the request carries nothing about you. Crash logs stay on this Mac unless you choose to share one (in the Mac App Store edition, Apple may also pass them on if you allowed sharing with app developers).
2. The Two Editions
ZMatrix Model Studio comes in two editions. They handle your data the same way, but a few features and update paths differ:
| Topic | Directly Downloaded Edition | Mac App Store Edition |
|---|---|---|
| Default storage folder | ~/Library/Application Support/ZMatrixStudio/, or a folder you choose |
The App's own container, ~/Library/Containers/app.halonex.ZMStudio/, or a folder you choose |
| App updates | Halonex's update server, when you choose Check for Updates… or once a day if you turn on automatic checks (off by default) | The App Store. This edition never contacts Halonex's update server. |
| Skill scripts | Can run on this Mac, only after you allow them | Never run |
| MCP servers started as programs | Supported; they run on this Mac with the App's permissions | Not available |
| Native plugins | Supported, from developers you allow | Not available |
| Crash reports | Stay on this Mac; included in a diagnostics bundle only if you create and send one | Not included in the diagnostics bundle. Apple may send them to Halonex if you allowed "Share with app developers". |
3. What Stays on Your Mac
Everything you work with is stored only on your Mac, in the storage folder you choose (by default ~/Library/Application Support/ZMatrixStudio/, or the App's own container in ~/Library/Containers/app.halonex.ZMStudio/ for the Mac App Store edition) and in the folders you open:
- models, versions and their provenance manifests (
zmatrix.json); - datasets and prompt sets;
- chat conversations, saved contexts and steering vectors;
- the library catalog, job history, benchmark results and recipes;
- Compose flows and their runs, decision models, and the skills you import;
- App settings.
3.1 Images
Images you attach to a chat are copied into the conversation's storage on this Mac and are read only by the model running on this Mac. Images you generate are made by an image model running on this Mac and saved there, with a record of the prompt and settings that made them.
Halonex never receives any of this. The App contains no analytics, advertising, tracking or usage statistics, and no third-party SDK that collects data.
The Human Summary
Your models, datasets, chats, images and settings live in a folder on your Mac. Halonex has no copy of any of it, and nothing in the App reports on how you use it.
4. Information We Do Not Collect
To be explicit, Halonex does not collect, receive or store any of the following through the App:
- No telemetry or usage statistics — The App does not report which features you use, how often, or for how long.
- No prompts, conversations or model output — These stay on this Mac.
- No models, datasets or files — Nothing you download, create or open is uploaded to Halonex.
- No audio — Dictation and Talk are transcribed on this Mac; audio is never recorded, stored or sent.
- No Halonex account — The App does not ask you to create an account with Halonex.
- No identifiers in update checks — Update requests carry no identifier, account, App version or system details.
- No crash uploads by the App — Crash reports stay on this Mac unless you choose to share them.
- No advertising, tracking or third-party data-collecting SDKs — No ad networks, analytics platforms, cookies or advertising identifiers.
- No sale of data — We hold no personal data from the App, so there is nothing to sell, rent or share.
5. When the App Uses the Network
The App makes network connections only for actions you start, for the daily update check of its built-in datasets (which you can turn off in Settings ▸ Hugging Face), and, in the directly downloaded edition, for the daily App update check if you turn it on in Settings ▸ General:
| Action | Where | What Is Sent |
|---|---|---|
| Searching or browsing the Hub, downloading a model or dataset | Hugging Face (huggingface.co and its file CDN) |
The search terms, repository names and files requested; your access token, if saved, so gated repositories you may use are available |
| Publishing a model | Hugging Face | The files you chose, the repository name and your access token |
| A model calls a tool of an MCP server you added by its address (Settings ▸ MCP Servers); tools ask you first unless you chose otherwise | That server | The tool's name and the arguments the model wrote, which can include text from your conversation, with the headers you configured for the server |
| A decision model you set up to use a remote service (Expert mode) | The address you entered | The text or data being decided and the questions, with the key you saved for it |
| Checking the built-in datasets for updates (at most once a day) | Hugging Face | The names of the built-in datasets installed on this Mac, and the files of a changed one; never your access token |
| Checking for App updates (directly downloaded edition only): when you choose Check for Updates…, or at most once a day if you turned on automatic checks (off by default) | Halonex's update server (zms-release.zmatrix.tech) |
A request for the update feed with no identifiers, account, App version or system details; the App decides on your Mac whether an update applies. Nothing is downloaded until you choose Download and Open; then the update file itself. |
| Opening a link in Help | Your browser | As your browser normally sends |
Hugging Face's own privacy policy governs what it does with these requests. Halonex's update server, like any web server, sees the network address a request comes from; Halonex does not link it to you or keep it beyond ordinary server logs (see Data Retention). The Mac App Store edition is updated by the App Store and never contacts it.
The App sends your Hugging Face access token only to Hugging Face over HTTPS and never writes it to files, logs or manifests. It is kept in your Keychain, and you can remove it in Settings at any time.
5.1 The Local Server
The local server is off until you start it. It answers apps on this Mac; it answers other devices on your network only if you turn on LAN access. Requests to it are not recorded with their prompts unless you turn on debug mode.
The Human Summary
The App goes online only when you ask it to (search, download, publish, use a tool server you added) plus two small, optional daily checks: one to Hugging Face for built-in dataset updates, and, in the downloaded edition, one to Halonex for App updates if you turn it on. None of these carry anything that identifies you to Halonex.
6. Spotlight, Quick Look, Finder & Widgets
These integrations run on this Mac and send nothing off it:
- Spotlight. The App adds the name, format, architecture, size and tags of each library model to the Spotlight index on this Mac, so you can find models from Spotlight. It never indexes prompts, conversations or model weights. To remove the entries, turn off ZMatrix Model Studio in System Settings ▸ Spotlight, or delete the App. The Spotlight importer reads the header of
.ggufand.safetensorsfiles so Spotlight can show their architecture and size. - Quick Look and thumbnails read only the header of the model file you preview.
- Finder Quick Actions pass the files you selected to the App.
- Widgets show the progress of running jobs and the name of the loaded model. The App shares this through an App Group container on this Mac that only its own widgets can read.
7. Microphone & Dictation
The App uses the microphone only while you dictate a chat message: after you click the microphone button in Chat, until you click it again, send the message or close the window. macOS asks you once for access to the microphone and to speech recognition.
- On this Mac only. Your speech is turned into text by Apple's on-device speech recognition. The audio and the text never leave your Mac, and the App never stores, records or logs either of them.
- You decide what is sent. The text goes into the message field, where you can edit or delete it; it reaches the model only when you send the message, like anything you type.
- Apple's speech model. If your Mac does not have Apple's on-device speech model for your language yet, the App offers to have macOS download it from Apple. It is a one-time download of the model only; nothing you say is sent.
- Turning it off. You can withdraw either permission at any time in System Settings ▸ Privacy & Security ▸ Microphone or Speech Recognition.
8. Talk & Recordings in Chat
Talk lets you speak to the model loaded in Chat and hear its replies. The App uses the microphone only while Talk runs: while you hold the Talk button, or, with Hands-free on, from when you click Talk until you click it again or close the window. macOS asks you for the microphone and speech recognition the first time you press Talk, never before.
- On this Mac only. Your speech is turned into text by Apple's on-device speech recognition, the model answers on this Mac and the reply is spoken by the Mac's system voices. The audio never leaves your Mac, and the App never records, stores or logs it.
- What is kept. The text of what you said and of each reply is saved in the conversation, like typed messages, with a waveform marking the turns you spoke; you can delete them as usual. Transcripts and replies are never written to a log.
- Recordings you attach. Audio files you attach to a message for a model that listens to recordings are copied into the App's chat storage with the conversation and read only by the model on this Mac. Talk never attaches what you say as a recording.
The Human Summary
Speaking to the App works like typing to it. Your voice is turned into text on your Mac, the audio is thrown away, and only the text you send is kept, in the conversation, where you can delete it.
9. Skills & MCP Servers
Skills you import (Settings ▸ Skills) are folders of instructions and files kept on this Mac; models read them on this Mac. In the directly downloaded edition a skill may also include scripts, which run on this Mac only after you allow them.
MCP servers you add give models tools: a server reached by its address receives the tool calls described in the network table, under that server's own terms; a server started as a program (directly downloaded edition only) runs on this Mac with the App's permissions. The Mac App Store edition runs no skill scripts and starts no programs.
10. Plugins
Plugin packs you install (Settings ▸ Plugins) are data: word lists, prompts, evals and edit plans. They contain no code and send nothing anywhere.
Native plugins, which only the directly downloaded edition can use, are code from developers you allow; they run on this Mac with the App's permissions and receive the texts they are asked to score (such as model responses in a benchmark). Halonex does not control what another developer's plugin does; install only plugins from developers you trust, and see their own privacy terms.
11. Third-Party Services
The App has no analytics, advertising or tracking partners. The only other parties that can receive data are the ones you choose to use:
- Hugging Face: Receives searches, downloads, publishes and the daily built-in dataset check described in the network table. Its own privacy policy governs what it does with them, and data you shared with Hugging Face is handled under that policy.
- Apple: Provides the on-device speech model download and, for the Mac App Store edition, App distribution, updates and optional crash and usage sharing under Apple's own terms.
- MCP servers and remote decision services you add: Receive what is described in the network table, under their own terms.
- Developers of native plugins you allow (directly downloaded edition only): Their code runs on this Mac under their own privacy terms.
We do not integrate any advertising networks, social media SDKs, or general-purpose analytics platforms.
12. Crash Reports & Diagnostics
When the App crashes, macOS writes a crash report on your Mac (~/Library/Logs/DiagnosticReports). The App never uploads it. If you ask for help, you can create a diagnostics bundle (Help ▸ Export Diagnostics…) and decide whether to send it. The bundle holds hardware details, job history and logs, and crash reports; it never holds prompts, model output, conversations or credentials.
In the Mac App Store edition the diagnostics bundle holds no crash reports. If you allowed it in System Settings ▸ Privacy & Security ▸ Analytics & Improvements ("Share with app developers"), Apple sends Halonex crash reports and usage statistics for this App under Apple's own terms; you can turn that off there at any time. The App itself adds nothing to them.
The Human Summary
Crash reports stay on your Mac. If you want help, you can export a diagnostics bundle and choose whether to send it, and it never includes your prompts or conversations.
13. Debug Mode
Debug mode, which you turn on yourself and which shows a visible indicator, adds prompts and model output to the App's local logs to help diagnose problems. Those logs stay on your Mac.
14. Data Storage & Security
- Local Only: All App data is stored in the storage folder you choose and the folders you open, on this Mac. Halonex operates no cloud storage, sync or backup for the App.
- Mac App Store Edition: By default, data is kept in the App's own container (
~/Library/Containers/app.halonex.ZMStudio/), which macOS keeps separate from other apps. - Credentials: Your Hugging Face access token is kept in your Keychain, sent only to Hugging Face over HTTPS, and never written to files, logs or manifests.
- Widgets: Job progress and the loaded model's name are shared through an App Group container that only the App's own widgets can read.
- Logs: Local logs do not contain prompts or model output unless you turn on debug mode, and transcripts from Talk are never written to a log.
- No Accounts: The App does not require an account with Halonex.
Because your data lives on your Mac, its protection also depends on your Mac's own security, such as your login password and FileVault.
15. macOS Permissions & System Access
ZMatrix Model Studio uses the following access on your Mac:
| Access | Purpose | When |
|---|---|---|
| Microphone | Dictating a chat message and using Talk | Asked the first time you dictate or press Talk; used only while dictation or Talk runs |
| Speech Recognition | Turning your speech into text on this Mac | Asked together with the microphone |
| Outgoing Network | Hugging Face, MCP servers and remote services you add, and update checks | Only as described in section 5 |
| Incoming Network | The local server, for apps on this Mac and, with LAN access, devices on your network | Off until you start the server; LAN access off until you turn it on |
| Files & Folders | The storage folder, folders you open and files you pass from Finder | When you choose them |
| Keychain | Keeping your Hugging Face access token | When you save a token |
| Spotlight Index | Making library models findable from Spotlight (name, format, architecture, size, tags) | Removable in System Settings ▸ Spotlight |
16. Your Rights & Controls
These settings control what the App does on the network and in its logs. The switches below show each setting's default; change them in the App.
Because Halonex holds no personal data from the App, there is nothing for us to access, correct or delete. You control all App data on your Mac and can delete it by removing the storage folder and the App. Data you shared with Hugging Face is handled under its policy.
If data protection laws where you live grant you specific rights, such as those under India's DPDP Act, 2023, the GDPR or the CCPA, the App's no-collection design means those rights are met on your own Mac. You can still contact us with any question or concern (see Grievance Redressal).
The Human Summary
We can't hand over, fix or delete your data because we never had it. To delete everything, remove the App and its storage folder. To stop the background checks, turn them off in Settings.
17. Data Retention
Halonex retains no personal data from the App. Your App data stays on your Mac for as long as you keep it, and is removed when you delete it, the storage folder or the App.
Halonex's update server, like any web server, sees the network address a request comes from. Halonex does not link it to you and keeps it only in ordinary server logs, which are deleted on a routine schedule.
Diagnostics bundles you choose to send us are used only to help with the issue you reported. Crash reports and usage statistics Apple shares with us (Mac App Store edition, if you allowed it) are handled under Apple's terms.
18. App Store Privacy Details
In keeping with Apple's App Privacy Details requirements, the following reflects how the App handles data:
- Data Collected: None. The App collects no data that is sent to Halonex.
- Data Used to Track You: None. The App does not track you across apps or websites.
- Data Linked to You: None.
- Data Deletion: Delete the App and its storage folder (or the App's container in the Mac App Store edition) to remove all App data.
The Human Summary
When Apple asks what data the App collects about you, the answer is: none.
19. Children's Privacy
The App is not directed to children under 13 (or the age your law sets) and collects no personal data from anyone.
20. Changes to This Statement
This statement is versioned. The current version is Version 1, effective on the release of ZMatrix Model Studio 1.0.0. If this statement changes in substance, the App shows the new version in onboarding before you continue, and this page is updated with the new version number and date.
21. Grievance Redressal & Governing Law
If you have a concern about this statement or how the App handles data, email us at [email protected]. We will acknowledge your message and respond within the time required by applicable law, and in any case within 30 days.
If you are not satisfied with our response, you may complain to the Data Protection Board of India or to the data protection authority where you live.
This statement is governed by the laws of India, including the Digital Personal Data Protection Act, 2023, without limiting any rights you have under the laws of the place where you live.
22. Contact Information
If you have any questions, concerns, or requests regarding this Privacy Statement or ZMatrix Model Studio's data practices, please contact us:
- Publisher: Halonex Labs Private Limited
- Email: [email protected]
- Website: halonex.app
- Privacy Centre: privacy.halonex.app
The Human Summary
Have a question about your privacy? Reach out to us at [email protected]. We take every inquiry seriously and will respond as quickly as possible.
23. Consent
You accept this statement together with the Terms of Use during onboarding. Because the App sends Halonex no personal data, no further consent for data processing by Halonex is needed. Permissions macOS asks for, such as the microphone, and connections to services you add, such as MCP servers, happen only when you allow or start them.
This privacy statement applies to the ZMatrix Model Studio macOS application, in its directly downloaded and Mac App Store editions, published by Halonex Labs Private Limited. ZMatrix Model Studio by Halonex. Halonex and ZMatrix are trademarks of Halonex Labs Private Limited.
© 2026 Halonex Labs Private Limited. All rights reserved.