Privacy Policy

Null is made and operated by Faruk Can, an individual based in Sakarya, Türkiye ("we", "us"), who is the data controller for the data described here. Contact: hello@nullsql.com.

Database credentials and the keys of AI providers you connect are kept in the macOS Keychain. Connections, query history, saved queries, drafts and AI chats are stored on your device. Null connects to your databases directly; your queries and results do not pass through our servers, except what you send to the AI features (below).

Your email address, the times you signed in, and for each session your IP address and browser user agent. For each device signed in to the app: its name, when it signed in and when and from which IP address it was last seen. The app's sign-in token is stored as a one-way hash; we cannot read it back.

If you sign in with GitHub or Google, we receive your name, email address, profile picture URL and account ID from that provider. We do not keep the access tokens it issues, so we cannot act on your account there.

When the app checks your license it sends a random ID created on your device and your device's name (as set in your system settings), so you can see which device holds the license and release it. We also store when your trial started and when the license was last checked.

When you use AI, the app sends your request and the context you attach: the schema of the selected database, tables and routines you mention, rows you select in the grid, and the SQL involved. Where it goes depends on the model you pick.

Null's hosted models. Our server forwards the request to Cloudflare Workers AI through Cloudflare AI Gateway, which keeps a log of the request that we use to calculate costs. We do not use your requests to train models. For each request we store a usage record: time, model, token counts, cost, duration, database type (e.g. PostgreSQL) and which device sent it. You can see them in the console under Usage.

Your own provider key. When you pick a model from a provider you connected (Anthropic, OpenAI, Google or OpenRouter), the app sends the request from your device straight to that provider, under your account with them. It does not pass through our servers and we keep no record of it. That provider's privacy policy and terms apply.

Chat memory. So that AI chat can recall earlier messages, the app sends the text of your chat messages to our server, which turns it into embeddings (lists of numbers) with Cloudflare Workers AI. This happens with your own provider key too. The embeddings are stored on your device, not on our servers.

Polar processes payments as merchant of record. Card details go to Polar, never to us. We receive your subscription status, plan, price and renewal date, and for AI credits the orders and refunds. We keep a history of your AI balance: allowances, credits bought or refunded, and the cost of each request. See Polar's privacy policy.

The sign-in form uses Cloudflare Turnstile to stop bots; see the Turnstile Privacy Addendum. We use Cloudflare Web Analytics, which does not use cookies or track you across sites. Cookies are only used to keep you signed in, plus one that tells the home page you are signed in and one that remembers how you last signed in. Your theme choice is kept in your browser's local storage.

We send sign-in links and messages about your account and billing, through Cloudflare. No newsletters unless you ask for them. If you joined the waitlist before launch, we keep the address you gave until you delete your account or ask us to remove it.

Cloudflare (hosting, database, AI, email, security checks, analytics) and Polar (payments). GitHub and Google only when you choose them to sign in. AI providers you connect with your own key are your choice and work for you, not for us. We do not sell or rent your data to anyone.

Delete your account in the console under Account. That removes your account, signed-in devices, license, usage records, AI balance and its history, and waitlist entry, and cancels your subscription. Polar keeps the payment records the law requires. Data on your device stays until you delete the app.

For a copy of your data or any other request, email hello@nullsql.com.

We will update this page when what we collect changes, and email you about changes that matter.