Privacy Policy

Last Updated: July 3, 2026

Effective Date: July 3, 2026

Revision: 1.0

Revision History

1. Introduction

This Privacy Policy describes how Sia Makerlab ("we," "us," or "our") collects, uses, and shares information in connection with your use of the QueryDock for DuckDB mobile application (the "App").

The App is an Android application for opening, querying, editing, and analyzing DuckDB database files locally on your device. The DuckDB engine is embedded in the App and runs entirely on-device; there is no remote database server and no cloud round-trip. The App does not require you to create an account, and we do not operate a server that stores your files or your data. By downloading, installing, or using the App, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree, please do not use the App.

2. Information We Collect

2.1 Information You Provide

The App is designed to function without an account or personal information. We do not collect your name, email address, phone number, or physical address.

To work with your data, you open a local DuckDB database file, create a new file, or work in memory, using the Android document picker to choose the files you want. The App reads and writes only the files you explicitly open, create, or pick. Your database files and their contents are not collected by us.

2.2 Local, On-Device Processing

All database operations — opening files, running SQL, editing rows, profiling, and generating charts — are performed entirely on your device by the embedded DuckDB engine (compiled via the Android NDK). Your data is processed locally and never leaves your device except through actions you explicitly take, such as exporting a file or using the Android share sheet. We do not see, receive, or store your files, queries, or data. The App does not connect to any remote database server.

2.3 Information Stored on Your Device

The App stores the following data only on your device:

This data is stored exclusively on your device. We do not have access to it, and it is never transmitted to our servers. Encrypted databases are protected with an AES-256 key that you supply and that is never sent to us.

2.4 Import, Export, and Sharing

You may import and export CSV, JSON, and Parquet files and share results through the Android system share integration. These actions are performed on your device and initiated by you; any file you export or share is handled by you and the destination you choose, not by us.

2.5 Permissions

• Internet (INTERNET): used to serve advertising, check for app updates, and connect to remote storage that you configure yourself (for example, DuckDB secrets for S3/GCS/HTTP). It is not used for local database operations, which all run on your device.
• Network state (ACCESS_NETWORK_STATE): used to detect network availability for the activities above.
• Advertising ID (AD_ID): used by Google AdMob to serve ads (see Section 2.6).

The App does not request location, camera, microphone, or contacts permissions. File access is handled through the Android document picker for the files you choose.

2.6 Advertising Data (Third-Party)

Unless you purchase the ad-removal option, the App displays advertising through Google AdMob (App Open and native formats; there are no banner ads). Ads are requested only after consent is obtained through Google's User Messaging Platform (UMP) where required. Our advertising partner may collect:

• Advertising ID (Android Advertising ID)
• Device information (device type, operating system version)
• IP address
• General location data (country/region level)
• Ad interaction data

Where required, the App uses Google's User Messaging Platform (UMP) to obtain your consent for personalized advertising. If you purchase the ad-removal option, the advertising SDK is no longer requested and this data collection stops. This data collection is governed by Google's Privacy Policy: https://policies.google.com/privacy

2.7 Information We Do NOT Collect

We explicitly do not collect:

• Personal or contact information
• Your database files, queries, or data
• Your encryption keys
• Analytics or usage tracking data by us directly
• Precise location data
• Payment or card information (handled by Google Play)

3. How We Use Information

3.1 Local Data Usage

Data stored on your device is used locally to:

• Open your files and run the queries and edits you perform, entirely on-device
• Remember your query history and snippets
• Apply your settings and preferences
• Apply your ad-removal entitlement

3.2 Third-Party Data Usage

Data collected by Google AdMob and Google UMP is used to display personalized or non-personalized advertisements (based on your consent) and to prevent fraud and abuse. Data collected by Google Play Billing is used to process and reconcile your purchase.

4. Data Sharing and Disclosure

4.1 We Do Not Sell Your Data

We do not sell, trade, or rent your personal information to third parties.

4.2 Third-Party Service Providers

The App's only third-party data flow is Google's advertising and billing. These services handle data according to their own privacy policies:

The App does not transmit your database files or their contents to us or to any third party. Your data remains on your device unless you choose to export or share it.

4.3 Legal Requirements

We may disclose information if required to do so by law or in response to valid requests by public authorities. As we hold no user content, such disclosure would be limited to information actually in our possession.

5. Data Retention

5.1 Local Data

Data stored on your device remains until you delete it within the App, delete the files yourself, clear app data in device settings, or uninstall the App.

5.2 Third-Party Data

Data collected by Google's advertising, consent, and billing services is retained according to their respective policies.

6. Your Rights and Choices

6.1 For All Users

You have the right to:

• Access: View your data within the App
• Delete: Delete your database files, or clear app data or uninstall the App to remove all local app data
• Opt out of personalized ads: Manage ad personalization through your device's advertising settings or the UMP consent options

6.2 For Users in the EEA, United Kingdom, and Switzerland

Under the GDPR and applicable laws, you also have the rights to access, rectification, erasure, restriction of processing, data portability, objection, and withdrawal of consent. To exercise rights over data held by a third-party service, contact that service directly.

6.3 Managing Consent

Manage advertising consent through:

• In-App: privacy/consent options provided via Google UMP
• Device Settings: Android Settings > Google > Ads

7. Data Security

We implement reasonable technical measures to protect data on your device:

• Your data is processed entirely on-device and is never transmitted to us
• Encrypted databases are protected with an AES-256 key you supply
• Data is stored only on your device; we operate no server and keep no copies
• No cloud synchronization and no user accounts
• Network access is used only for advertising, app update checks, and remote storage that you configure yourself

8. Children's Privacy

The App is not directed to children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal information from children.

9. International Data Transfers

Data collected by third-party services may be transferred to and processed in countries with different data protection laws. Please refer to Google's Privacy Policy for more information.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by updating the "Last Updated" date and, for material changes, displaying a notice within the App.

11. Disclaimer of Liability

11.1 Third-Party Services

We are not responsible for the data collection, use, or security practices of third-party services integrated into the App, including Google AdMob, Google UMP, and Google Play Billing.

11.2 Data Loss

We are not responsible for any loss of data stored locally on your device, including your database files, query history, and snippets. If you lose the encryption key for an encrypted database, its contents cannot be recovered.

11.3 Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, WE SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES RESULTING FROM YOUR USE OF THE APP.

12. Governing Law

This Privacy Policy shall be governed by the laws of the Republic of Korea. For EU users, it shall be interpreted in accordance with applicable EU law including the GDPR.

13. Contact Us

Sia Makerlab

• Email: sia@siamakerlab.com
• Website: https://siamakerlab.com

For GDPR-related inquiries from EEA residents, please include "GDPR Request" in the subject line.

---

Summary of Data Practices

*Collected by third-party services (Google), not by us directly.

---

This Privacy Policy is available in English. If translated versions are provided, the English version shall prevail in case of any discrepancy.