Privacy policy

Squaero collects no personal data. It has no accounts, no analytics, no ads, no tracking, and no servers of its own to send anything to. What you set up and query stays on your device or on your own database servers.

What is stored, and where

Squaero stores on your device, and only there:

• your connections and their groups, snippets, query history, open tabs and settings;
• the passwords of your connections, if you choose to save them;
• each tab's local history: earlier versions of your queries' text (by default up to 50 per tab for 30 days; change it or turn it off in Settings);
• a schema cache for each connection: the names of its databases, tables and columns, so the tree shows up instantly. It holds no rows and no passwords;
• the window state: its position, its size and whether it was maximized.

If you dump a schema's DDL to a folder or a .zip, the files are written where you choose, and they hold only the objects' definitions, not their data.

On Windows, macOS and Linux, all of that lives in the app's data folder inside your user profile. Squaero does not encrypt the passwords there: access to your system account is what protects them.

On iPhone, passwords and SSH keys go into the iOS Keychain, bound to the device and protected by Face ID or the passcode. Everything else stays in the app's private storage. None of it is synced to iCloud.

What Squaero connects to

• The servers you set up: your databases and, if you use a tunnel, the SSH server. What travels between Squaero and them is what you query or change, and it can be encrypted with TLS or SSH.
• GitHub, on desktop, to look for updates. At startup the app asks api.github.com for the latest published version. GitHub receives your IP address, as with any visit to its site; nothing else is sent. On iPhone, updates come through the App Store and this check is not made.

There are no automatic crash reports and no usage statistics. If something fails, only whoever reports it knows.

The data in your databases

The rows you view, edit or export never go to third parties. An exported file (CSV, JSON, XLSX, XML, HTML or SQL) is saved wherever you choose; on iPhone, in Files or in the app you decide to share it with.

The iPhone assistant

On iPhone you can filter a table, ask for data or ask for a change by writing what you want. The language model Apple runs on the device itself works it out: nothing you ask and nothing it sees leaves the iPhone, and Squaero sends it to no server.

• It is off by default. Turn it on or off in Settings › Assistant › Assistant on the iPhone; it needs iOS 26 with Apple Intelligence.
• To filter a table, the model sees the table's name, its columns and their types, today's date and what you wrote. It sees no rows.
• To ask for data, it can look up the schema and run a read-only query, and it sees up to 50 rows of the result. To ask for a change, it sees that row's values, and the change goes through the same preview and Face ID as any edit. To explain a query or an error, it sees the SQL and the columns of the tables it uses.

On the desktop, Squaero includes no AI assistant.

quaero-mcp

quaero-mcp is a separate program that gives an MCP client, such as an AI assistant you use on your computer, access to your databases. It runs on your computer, that client starts it, and they talk over its standard input and output, with no network port opened.

• It only exposes the connections you mark with "mcp": true in the connections file you give it. A connection without that mark does not exist for it.
• It only reads, except on connections you also mark with "mcpWrite": true. It never hands passwords to the client.
• The MCP client decides what is queried, and that client receives the result. If the client sends what it receives to its provider, for example an online AI model, that is governed by the provider's policy, not this one. quaero-mcp sends nothing anywhere else.

How to set it up is in docs/MCP.md.

This website

The site is published on GitHub Pages. It uses no cookies and no analytics, and its fonts are served from here, not from Google. To show the latest version and link each download, the page asks api.github.com for the latest release. GitHub, as the host, may log your IP address under its privacy statement.

If you pick a style for the page, your browser remembers it in its local storage. It is not a cookie and it is not sent anywhere.

Children

Squaero is a tool for working with databases and is not aimed at children. In any case, it collects no one's data.

Changes to this policy

If anything above changes, this page will say so before the version that changes it ships. Its full history is in the repository.

Contact

For privacy questions, open an issue on GitHub.