Privacy policy

Last updated: 12 November 2026

Who we are

Nikola Rosić, an individual based in Serbia (Srđana Aleksića 29, 11070 Novi Beograd, Serbia, support@vizshelf.com) (“VizShelf”, “we”) makes ViPKM, ViLibris and ViMD and runs this website. We are the controller of the personal data described here, under the EU General Data Protection Regulation (GDPR) and the Serbian Law on Personal Data Protection.

Short version

The apps keep your notes and files on your Mac. They have no account, no analytics, no tracking and no crash reporting, and we run no server that receives your notes or documents. We only get data about you when you buy a license or write to us.

What the apps send, and only when you use the feature

Some optional features connect from your Mac directly to a third party. Nothing goes through us.

• Anthropic (Claude) — ViPKM and ViLibris, when you use Ask Claude, AI flashcard questions or AI identification of a document with your own API key: your question and the notes, text or pictures sent with it. Your key is kept in the macOS Keychain. If you connect Claude Desktop or Claude Code through MCP, they read your notes on your Mac and send them to Anthropic under your own Claude account. Anthropic’s terms and privacy policy apply.
• Crossref and Open Library — ViPKM and ViLibris, when a DOI or ISBN is looked up: that DOI or ISBN.
• Web pages you open — the web reader (ViPKM, ViLibris), search in ViPKM’s web reader (DuckDuckGo by default), and rich link cards you insert (ViLibris, ViMD) load those pages, as any browser would.
• Transcription models — ViPKM downloads a speech-recognition model from Hugging Face the first time you transcribe audio or video. The transcription itself runs on your Mac.
• Video download — ViPKM uses yt-dlp, a tool you install yourself, to download a video you choose from its site.
• iCloud Drive — if you turn on sync, your library is synced by Apple through your own iCloud account.

ViMD needs no network connection, except for the pages behind rich links you insert.

Purchases

Orders are processed by Paddle.com, our Merchant of Record, which collects the payment and billing details needed for the sale; see Paddle’s privacy notice. We never see your card or bank details. Paddle passes to us your name, email address, country, and order details (product, price, date, and VAT number if you give one). We use them to deliver your license key, to help you, to handle refunds, and to keep the records that accounting and tax law require (legal basis: performance of a contract and legal obligation). We keep them for as long as you have the license and as long as the law requires us to keep accounting records.

Emails to us

When you write to support@vizshelf.com we use your message and address to answer you, and keep them for as long as needed for that and for your later questions (legal basis: our legitimate interest in giving support).

This website

This website has no analytics, no advertising and no tracking cookies. It is hosted by Cloudflare, Inc. (Cloudflare Pages), whose servers log technical data such as IP address, browser and time of each request, for security; these logs are kept briefly. The site remembers your light or dark choice in your browser’s local storage; it never leaves your device. When you open a checkout, Paddle’s checkout window loads and sets the cookies it needs to process the payment.

Your rights

You have the right to access the data we hold about you, to have it corrected or deleted, to restrict or object to its use, and to receive it in a portable form. Write to support@vizshelf.com; we answer within one month. Data we must keep by law (accounting records) cannot be deleted before that period ends. You may also complain to a supervisory authority: in Serbia the Commissioner for Information of Public Importance and Personal Data Protection (poverenik.rs), or the data protection authority in the country where you live.

Sharing and transfers

We do not sell or rent personal data and share it only with the services named on this page, to the extent needed. Serbia is outside the European Union; where data moves between Serbia, the EU and other countries, this is done under the safeguards the GDPR and Serbian law provide.

Changes

We will post changes on this page with a new date.