KNOWHERE · KRYPTON HQ

Privacy policy

Last updated: 20 October 2026

This policy covers the Knowhere macOS app and this website, knowhere.kryptonhq.com. Knowhere is a PostgreSQL client published under the Krypton HQ brand. Contact us about privacy at support@kryptonhq.com.

The app works without a Knowhere account. Your database connections go directly from your Mac to the servers you choose. We do not operate a relay for your database traffic, sell personal information, show advertising, or add advertising trackers to the app or website.

1. What the Mac app processes

• Connection settings: names, hosts, ports, database names, usernames, environments, and security preferences are stored locally so you can reconnect.
• Credentials: passwords remain in session memory unless you explicitly save them in macOS Keychain. They are not saved in the workspace JSON. macOS controls Keychain access.
• Workspace content: open SQL tabs, optional query history, staged-edit recovery drafts, query plans, and performance captures may contain SQL text, database identifiers, or row values. They are stored locally to provide those features.
• Database metadata and results: schemas, tables, columns, constraints, query results, and plans are processed on your Mac to display and edit your database.
• Selected files and certificates: SQL files, CSV imports/exports, and public CA certificates are accessed for the action you request. Imported CA bundles are copied into app storage so they can be reopened.
• Preferences: appearance and editor/grid text sizes are stored locally.

2. Where database information goes

Knowhere sends authentication information, SQL, and metadata requests to the PostgreSQL server you configure. The bundled language server runs locally and uses its own database connection for completion and diagnostics. It can send SQL for server-side checking. Remote connections use verified TLS by default. An explicit per-connection plaintext option sends credentials, queries and results without encryption or server identity verification. Use it only for public demonstration data or a trusted network. Imported URLs do not enable remote plaintext without confirmation.

Your database operator and any infrastructure you choose may log statements, identities, results, or connection details under their own policies. Knowhere does not control those servers. The app does not send your passwords, SQL, schemas, query results, or performance captures to Krypton HQ for analytics or AI processing.

3. Local retention and deletion

Query history is off by default. When enabled for a connection, entries older than 30 days are pruned during workspace load/save. Disabling history stops future recording; clearing existing history is a separate action. Open tabs, profiles, drafts, CA copies, and performance captures remain until you remove the relevant data. Knowhere does not separately encrypt workspace files; your Mac's account, disk, and backup protections apply.

You can clear saved execution history, remove connection profiles, disable password remembering, discard staged edits, and review/discard recovery drafts through the app. Keychain credentials, app preferences, exported files, imported certificate copies, and backups may need separate cleanup. Deleting the app alone may not remove all of them. See local data controls and complete cleanup instructions.

We cannot access or remotely delete data stored only on your Mac or in your PostgreSQL server. If a database provider, backup service, or your organization holds copies, contact that operator as well.

4. Permissions and your choices

Knowhere requests access to files you select and network access needed to connect to your database. You decide whether to save passwords, record history, export data, or share information with support. You can change those choices in connection settings and manage macOS permissions in System Settings. Withdrawing a permission may prevent the related feature from working. The app does not request contacts, camera, microphone, or location access for database work.

5. This website

This website is prepared for hosting on Vercel. When hosted there, Vercel processes ordinary request data such as IP address, requested URL, user agent, and request time to deliver, secure, and operate the site. That infrastructure processing is separate from the Mac app's local database data. Retention of provider-controlled infrastructure/security logs follows Vercel's applicable policies and service settings; we do not claim an exact deletion period for logs outside our control.

We have not added advertising, Vercel Web Analytics, session replay, or third-party analytics scripts. Documentation search runs in your browser against a downloaded index; the site does not send the search terms to a search provider. A light/dark appearance preference may be saved in browser storage. There is no newsletter, account registration, or contact form on this site.

Read Vercel's privacy policy for its infrastructure processing. Following external links opens services governed by their own policies. If hosting or data collection changes, we will update this policy before describing that new behavior as part of Knowhere.

6. Support messages

If you email us, we and the email service used to receive and reply process the address, message, and attachments you voluntarily send. We use them to answer your request, investigate the reported issue, and maintain necessary support records. Do not send database passwords, production data, private keys, or unsanitized connection strings. Support does not need your database password.

We retain support correspondence only as long as needed to resolve the request and meet legitimate operational or legal obligations. Request access, correction, or deletion by emailing support@kryptonhq.com. We will handle requests subject to applicable law and any required retention, and explain if information cannot yet be deleted. A support deletion request does not delete data held by your database operator or Apple.

7. Service providers and Apple

We limit service-provider processing to the hosting and support purposes described here. Providers processing information on our behalf must protect it at least as described in this policy. We do not share app database content with advertising or analytics providers. Website hosting, email delivery, or services you select may process data in countries other than yours under their applicable safeguards.

When Knowhere is distributed through the Mac App Store, Apple processes purchases, downloads, and updates under Apple's privacy policy. We do not receive your full payment card details. macOS or App Store diagnostics follow your Apple settings; do not include sensitive SQL or database values in reports you choose to share.

8. Children and policy changes

Knowhere is a developer tool and is not directed at children. We do not knowingly solicit children's personal information. Contact us if you believe a child has sent personal information to support. We will update the date on this page when this policy changes; material changes in processing will be reflected in the policy and any notices or permissions required by law.

9. Contact

For privacy questions or requests, email support@kryptonhq.com. For product help, visit Support.