Privacy Policy

Summary

Datark has no account and no servers of its own. It does not collect your data for itself.
There is no tracking, advertising, analytics or crash reporting.
Connection profiles, saved queries and settings are stored on your device. Passwords, keys and API keys are stored in the Apple Keychain.
The apps connect only to the database servers, SSH hosts and AI endpoints you configure, and to Hugging Face when you download an on-device AI model.
Your prompts, SQL and schema details reach OpenAI or Anthropic only if you allow that provider and then send it a request.

App Store privacy details

Datark declares the following data types for optional cloud AI functionality on Mac, iPhone and iPad:

Tracking: not used. No tracking domains are declared.
Data types: Other User Content, and Photos or Videos. Photos or Videos covers only images you deliberately attach to a cloud AI request; Datark has no video feature.
Purpose: App Functionality only.
Linked to you: declared, because a cloud AI provider you choose may associate requests with your account or API key at that provider.
Used for tracking: no.

These declarations describe content sent to a cloud AI provider you enable. That content goes directly to the selected provider, without passing through a Datark-operated server.

Information stored on your device

To work, Datark stores the following on your device:

database and SSH connection profiles, without raw passwords;
query tabs, saved queries, settings and workspace preferences;
query history, only when you turn it on in Settings;
SSH known hosts, port-forward configuration and SSH terminal command history;
ER diagram layouts and downloaded on-device AI models;
database passwords, SSH passwords, imported SSH private keys, key passphrases and cloud AI API keys, in the Apple Keychain.

AI chats are kept in memory and are not saved. On macOS you can also let Datark use an SSH private key file stored elsewhere on your Mac; the file stays where it is, and Datark keeps a security-scoped bookmark to open it.

Network connections

Datark connects to the database servers, SSH hosts and AI endpoints that you configure or select, for the database, terminal, tunnel and AI work you start in the app. SSH local port forwarding listens only on your device's loopback address, 127.0.0.1.

When you choose to download an on-device AI model, Datark contacts Hugging Face and its download infrastructure to fetch the model files. A download does not send your database contents, prompts or SSH credentials to Hugging Face.

Datark does not send analytics, crash reports or advertising data to any third party.

AI assistant and providers

The AI assistant is optional. Where your prompts and database context go depends on the provider you pick:

Where AI requests are sent, by provider
Provider	When anything is sent	Where it goes
On-device (MLX)	No AI request is sent over the network. Processing runs on your device after the model is downloaded.	Nowhere. Prompts and answers stay on your device.
Local server	When you send a request after configuring a local server.	Only the endpoint you configure, such as `localhost`. It can also be another machine on your network.
OpenAI, Anthropic	Only after you allow that provider in Settings, and only when you send a request.	The selected provider, using your API key, under that provider's terms.

Cloud AI providers are off until you explicitly allow sharing with each one in Settings. Once allowed, Datark may send the selected provider your prompt, SQL text, schema metadata, error text and any images you attach, as needed to answer the request. The provider controls retention and processing under its own terms. You can revoke consent in Settings to prevent future requests. This does not remove content already sent to the provider.

Datark does not use AI data for tracking, advertising, analytics or profiling. A cloud provider may associate what you submit, including image attachments, with your provider account or API key, and Datark cannot guarantee anonymous processing. Review the provider's privacy and retention terms before sharing sensitive content.

AI answers are suggestions. SQL the assistant generates opens in the query editor for you to review and never runs by itself.

Credentials and security

Database passwords, SSH keys and passphrases, and cloud AI API keys are stored in the Apple Keychain as device-only items, so they are not synced to your other devices. Reset Preferences keeps database and SSH credentials; on iPhone and iPad it also removes saved AI provider configurations.

Database connections with TLS turned on verify the server certificate and host name by default. SSH connections check each server's host key against your Known Hosts.

iCloud and sync

Datark does not use iCloud sync. Connection profiles, saved queries, settings, passwords and SSH keys are not synced through iCloud or any other service.

Removing your data

Because Datark has no account and no servers of its own, it holds no copy of your data to delete. On your device, you can remove connections, saved queries and query history in the app. Content you sent to a cloud AI provider is handled under that provider's retention terms.

Required reason APIs

Both privacy manifests declare access to UserDefaults, file timestamps and system boot time for app functionality. The macOS manifest also declares timestamps of files you select, and disk space, which is used to check available space before an on-device model download and to show storage information. These declarations are not tracking declarations.

Changes to this policy

If Datark's data practices change, this page will be updated and the date at the top will change with it.

Contact

For privacy questions, email support@datark.app or visit Support.

Privacy,in plain sight.