Supa Dashboard: SupaLog Privacy Policy

Summary

SupaLog has no SupaLog account and no server of its own. Your Supabase token and keys are stored in the Keychain on this device and requests go directly to Supabase. RevenueCat manages the app's own subscription.

This policy covers the Supa Dashboard: SupaLog app for iPhone and iPad, published by mk0.net, an independent app studio. It is written from what the app actually does in its code. Questions: [email protected].

What we receive

Nothing. We have no accounts or servers for this app, so your entries never reach us.

What stays on your device

• Cached project details, usage snapshots and your SQL query history are stored on this device.
• Widgets share project status with the app on the same device.
• Preferences are stored on this device.

We cannot see this data. It is not uploaded to us.

Permissions the app may ask for

• Face ID: Used when you turn on the app lock and to confirm destructive actions.
• Notifications: Asked when you turn on project alerts or the daily digest, which are shown as local notifications.

Every permission is optional and can be changed later in the iPhone Settings app. Features that need a permission you decline simply stay unavailable.

Data that leaves your device

The app talks to the following services. Each receives only what is listed, and only for the purpose shown.

• services and servers you connect yourself (the app's main function): Supabase: your access token and the requests you make go to the Supabase Management API (api.supabase.com), and service keys go to your own project URLs for auth users, storage and metrics. This includes SQL you run and changes you confirm.
• RevenueCat (subscription management): Only for SupaLog's own subscription: an anonymous app user ID and your App Store purchase status. Their privacy policy.

Your keys and passwords

Your Supabase personal access token and project service keys are stored in the iOS Keychain on this device only and are sent only to Supabase. They are never included in exports.

Sensitive information

The app can show your end users' auth records, such as emails. They are displayed on this device and not sent anywhere else. Destructive actions ask for confirmation.

Purchases

Subscriptions are sold and billed by Apple through the App Store. We never see your name, Apple ID, card or payment details. The app checks your subscription status through RevenueCat, which receives an anonymous ID and your purchase status, not your identity.

Ads, tracking and analytics

No ads, no analytics, no tracking across apps, and we never sell your data.

Account

No SupaLog account. You need a Supabase personal access token to see your projects; a demo mode works without one.

Children

Supa Dashboard: SupaLog is not directed at children under 13, and we do not knowingly collect personal information from children.

Keeping and deleting your data

Use the wipe all data option in Settings to remove cached data and Keychain secrets. Deleting the app removes cached data. Revoke your access token in the Supabase dashboard to stop access completely.

Your rights

Depending on where you live (for example under the GDPR, UK GDPR, CCPA or KVKK), you have the right to access, correct, export or delete your personal data. Because the app keeps your records on your own device, you can do most of this directly in the app or by deleting it. For anything else, or for data held by a service listed above, email [email protected] and we will help within 30 days.

Changes to this policy

If the app starts handling data differently, we will update this page and the date below before the change ships.

Contact

mk0.net, [email protected]