Privacy
Effective 2026-11-01 · Controller: Siarhei Dudko, siarhei@dudko.dev
What is collected
The only personal data this site stores is the email address you register, together with confirmation and unsubscribe tokens, timestamps, and the identifiers of license keys issued to that address. The keys themselves are not stored. Transient per-address counters exist for rate limiting and expire on their own.
What it is used for
Sending the confirmation mail, issuing your license key, announcing new releases to confirmed addresses, and preventing abuse. Every announcement mail carries an unsubscribe link; unsubscribing stops the announcements. Nothing is sold, shared for marketing, or used for profiling.
What is not collected
The site runs no analytics, sets no cookies of its own, and embeds no advertising or social trackers; the video on the homepage plays from this site. The desktop application checks for updates by fetching a public version file from this site; that request carries no account identifier, and the application itself sends no usage data (telemetry), with the one exception on Android described below. Queries go from your machine to your database; the agent's requests go to the provider you chose, with your key.
The apps
This applies to every Tabellum app: the desktop download, the Mac App Store version, and the iPhone, iPad, and Android apps. None of them has an account, collects analytics or crash reports, or shows ads. Your connections and saved queries are files on your device; passwords and API keys stay in the system's secure storage (the Keychain or the Android Keystore). The apps connect only where you point them: to the database servers and tunnels you configure, and — when you turn the built-in agent on — to the AI provider you choose (OpenAI, Anthropic, or Google), with your own key, under that provider's terms. The agent sends the provider your question and your database's structure; it sends row values only for a connection where you allow it. The versions from the App Store and Google Play never contact this site; the stores deliver their updates. Buying the app on the App Store or the Mac App Store is handled by Apple under Apple's privacy policy: the operator receives no name, email address, or payment details from a purchase, only Apple's aggregate sales reports.
Scanning a QR code on Android
Connections can be moved between devices as a QR code. On Android, reading that code with the camera uses Google ML Kit. The camera image and the code it reads stay on the phone; ML Kit itself sends Google diagnostics about the scanner — the device model and Android version, the app's package name and version, a per-installation identifier that does not identify you, and performance figures — under Google's ML Kit terms. The operator receives none of it. Importing by paste, by file, or from a photo does not use ML Kit; the iPhone, iPad, Mac, and desktop apps read QR codes without it.
Infrastructure
The site runs on Cloudflare (Workers, D1, KV, R2), which processes requests — including IP addresses — as the hosting provider. Registration is protected by Cloudflare Turnstile, which evaluates the request to tell people from bots. Mail is delivered through the operator's email provider.
Retention and your rights
The address is kept until you unsubscribe or ask for deletion; key identifiers are kept while support for the issued keys is meaningful. To access, correct, or delete your data, email siarhei@dudko.dev from the registered address.
Changes
This policy may change; the effective date above moves when it does.