Privacy Policy

Last Updated: July 16, 2026

Effective Date: July 16, 2026

Revision: 1.0

Revision History

1. Introduction

This Privacy Policy describes how Sia Makerlab ("we," "us," or "our") collects, uses, and shares information in connection with your use of the Sia Container Manager mobile application (the "App").

The App is an Android tool for operating Docker, Podman, and Docker-compatible container environments that you specify. It connects directly from your device to the servers you configure, over the Docker/Podman HTTP API (with optional TLS or mutual TLS) or over SSH. It does not require you to create an account, and we do not operate a server that stores your connection details or your data. By downloading, installing, or using the App, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree, please do not use the App.

Independence disclaimer: Sia Container Manager is an independent application and is not affiliated with, endorsed by, or sponsored by Docker, Inc., Red Hat, Inc., Synology, QNAP, or any other vendor. "Docker" is a trademark of Docker, Inc. and "Podman" is a trademark of Red Hat, Inc.; these and other marks belong to their respective owners and are used only descriptively.

2. Information We Collect

2.1 Information You Provide

The App is designed to function without an account or personal information. We do not collect your name, email address, phone number, or physical address.

To connect to a server, you provide its details — host and port, the connection method (Docker/Podman HTTP API or SSH), authentication credentials, and transport options such as TLS with optional CA pinning and mutual TLS (mTLS) client certificates. For SSH connections you may provide a password or a private key (Ed25519, RSA, or ECDSA) with an optional passphrase and jump host. This configuration is stored locally on your device and is not collected by us.

2.2 Connections You Configure (Outbound Requests)

When you open a connection, the App communicates directly from your device to the server you specified — there is no Sia Makerlab server, agent, or gateway in the path. Your server addresses, credentials, certificates, SSH keys, container logs, statistics, environment variables, terminal input and output, and any command results travel between your device and that server — not through us. We do not see, receive, or store any of them. You are responsible for ensuring you are authorized to access any server you connect to and to perform the operations you execute.

2.3 Information Stored on Your Device

The App stores the following data only on your device:

This data is stored exclusively on your device. We do not have access to it, and it is never transmitted to our servers.

2.4 Permissions

The App requests only the following Android permissions:

• Internet (INTERNET): required to connect to the servers you configure and to serve ads.
• Network state (ACCESS_NETWORK_STATE): used to detect network availability.
• Notifications (POST_NOTIFICATIONS): used to deliver background monitoring alerts, such as container status-change and recovery notifications, that you enable.
• Biometric (USE_BIOMETRIC): used, at your option, to lock the app and to gate sensitive-value reveals, the terminal, and destructive operations. A device PIN or pattern may be used instead.
• Advertising ID (AD_ID): used by Google AdMob to serve ads (see Section 2.5).

The App does not request location, camera, microphone, or contacts permissions.

2.5 Advertising Data (Third-Party)

Unless you purchase the ad-removal option, the App displays advertising through Google AdMob. Only two ad formats are used — App Open and Native. Banner, interstitial, and rewarded ads are not used, and ads are never shown on the terminal, log, credential, connection, compose editor, delete-confirmation, or failure-alert screens. Our advertising partner may collect:

• Advertising ID (Android Advertising ID)
• Device information (device type, operating system version)
• IP address
• General location data (country/region level)
• Ad interaction data

Where required, the App uses Google's User Messaging Platform (UMP) to obtain your consent for personalized advertising. Ad requests never fire before consent allows them. This data collection is governed by Google's Privacy Policy: https://policies.google.com/privacy

Advertising does not use your server data. Ads are served by Google AdMob using its own advertising identifier and device signals — not any data obtained from the servers you connect to. Your connection profiles, logs, statistics, environment variables, and command results are never used for advertising.

2.6 Information We Do NOT Collect

We explicitly do not collect:

• Personal or contact information
• Your servers, credentials, SSH keys, logs, statistics, environment variables, terminal input/output, or container data
• Analytics or usage tracking data by us directly
• Precise location data
• Payment or card information (handled by Google Play)

3. How We Use Information

3.1 Local Data Usage

Data stored on your device is used locally to:

• Establish the connections you configure and run the operations you request
• Remember your environment profiles, pinned host identities, and action history
• Deliver the background monitoring alerts you enable
• Apply your settings and preferences
• Apply your Pro / ad-removal entitlement

3.2 Third-Party Data Usage

Data collected by Google AdMob and Google UMP is used to display personalized or non-personalized advertisements (based on your consent) and to prevent fraud and abuse. Data collected by Google Play Billing is used to process and reconcile your purchase.

4. Data Sharing and Disclosure

4.1 We Do Not Sell Your Data

We do not sell, trade, or rent your personal information to third parties.

4.2 Third-Party Service Providers

The App integrates the following third-party services, which handle data according to their own privacy policies:

Separately, the App communicates directly with the servers you specify. Those servers are operated by you or by parties you choose, and their handling of your connections and data is outside our control.

4.3 Legal Requirements

We may disclose information if required to do so by law or in response to valid requests by public authorities. As we hold no user content, such disclosure would be limited to information actually in our possession.

5. Data Retention

5.1 Local Data

Data stored on your device remains until you delete it within the App, clear app data in device settings, or uninstall the App. Because we operate no server and receive no data, we retain nothing about you or your servers.

5.2 Third-Party Data

Data collected by Google's advertising, consent, and billing services is retained according to their respective policies.

6. Your Rights and Choices

6.1 For All Users

You have the right to:

• Access: View your data within the App
• Delete: Remove environment profiles in the App, or clear app data or uninstall the App to remove all local data
• Opt out of personalized ads: Manage ad personalization through your device's advertising settings or the UMP consent options

6.2 For Users in the EEA, United Kingdom, and Switzerland

Under the GDPR and applicable laws, you also have the rights to access, rectification, erasure, restriction of processing, data portability, objection, and withdrawal of consent. To exercise rights over data held by a third-party service, contact that service directly.

6.3 Managing Consent

Manage advertising consent through:

• In-App: privacy/consent options provided via Google UMP
• Device Settings: Android Settings > Google > Ads

7. Data Security

We implement reasonable technical measures to protect data on your device:

• Credentials and SSH keys are encrypted at rest with the Android Keystore (AES-GCM) using a per-environment random nonce, and are excluded from app-data backup
• Transport can be secured with TLS, optional CA pinning, mutual TLS (mTLS), certificate expiry checks, and hostname verification
• SSH host keys are verified by SHA-256 fingerprint and pinned on approval; a changed host key blocks the connection rather than trusting it silently
• Sensitive screens — credentials, SSH keys, exposed environment variables, terminal, and raw inspect — are protected from screen capture
• Secrets such as authorization headers, registry auth, SSH passwords, private keys, tokens, and sensitive environment variable values are masked in logs
• Data is stored only on your device; we operate no server and keep no copies
• No cloud synchronization and no user accounts
• Network access is used only to reach the servers you configure and to serve third-party advertising

Note that read-only mode in the App is a UI safeguard and does not change the permissions your credentials hold on the server itself; true access restriction must be configured on the server.

8. Children's Privacy

The App is a technical tool and is not directed to children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal information from children.

9. International Data Transfers

Data collected by third-party services may be transferred to and processed in countries with different data protection laws. Please refer to Google's Privacy Policy for more information.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by updating the "Last Updated" date and, for material changes, displaying a notice within the App.

11. Disclaimer of Liability

11.1 Third-Party Services

We are not responsible for the data collection, use, or security practices of third-party services integrated into the App, including Google AdMob, Google UMP, and Google Play Billing, nor for the servers you choose to connect to.

11.2 Data Loss

We are not responsible for any loss of data stored locally on your device, including your environment profiles, SSH keys, and action history.

11.3 Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, WE SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES RESULTING FROM YOUR USE OF THE APP.

12. Governing Law

This Privacy Policy shall be governed by the laws of the Republic of Korea. For EU users, it shall be interpreted in accordance with applicable EU law including the GDPR.

13. Contact Us

Sia Makerlab

• Email: sia@siamakerlab.com
• Website: https://siamakerlab.com

For GDPR-related inquiries from EEA residents, please include "GDPR Request" in the subject line.

---

Summary of Data Practices

*Collected by third-party services (Google), not by us directly.

---

This Privacy Policy is available in English. If translated versions are provided, the English version shall prevail in case of any discrepancy.