Privacy Policy for DataLab

Effective Date: July 29, 2026

DataLab is developed and operated by Karakoram Labs (KKLabs). This Privacy Policy explains what information we collect when you use DataLab, how we use it, and how we handle files you upload for data exploration.

By using DataLab, you agree to the practices described in this policy.

1. Information We Collect

Account Information

When you sign in with Google, we receive your name, email address, and profile picture from your Google account. We use this information to identify your account and manage access within the app.

Role and Profile Data

We store your account role and basic profile information in our database (Firebase Firestore) so the app knows what features you can access. We do not store the content of any files you upload in this database.

Files You Upload

When you upload a CSV or Excel file to explore your data, the file is sent to our server for processing only. We do not save this file to any database or permanent storage. The file exists temporarily on the server while your session is active. Once you finish your session, the file is deleted from the server automatically. We do not keep a copy, back it up, or use it for any purpose beyond generating the results you see in the app during that session.

Google Drive Access

DataLab does not integrate directly with Google Drive or use any Google Drive API. If you choose a file from Google Drive, it happens through your phone's built in file manager or file picker, the same system feature you would use to pick a file from any app. DataLab only receives the file you select through this system picker. We do not access your Google Drive account, do not see any other files in your Drive, and do not store or receive any Google Drive credentials.

2. How We Use Your Information

We use the information we collect to:

• Sign you in and keep your account secure
• Determine what features and permissions your account has
• Process the data files you upload so we can show you analysis and insights
• Maintain and improve the app's performance and reliability

We do not sell your personal information or your file contents to third parties.

3. How Uploaded Files Are Handled

This is important, so we want to be direct about it:

• Your CSV or Excel file is processed on our server only for the duration of your session
• The file is not written to any database or long term storage
• Once your session ends, whether you close the app or the session times out, the file is deleted from the server
• We do not retain, analyze offline, or share the contents of your files with anyone

If you upload sensitive data, treat the app the same way you would treat any tool that processes files temporarily. We recommend not uploading files containing information you are not comfortable processing through a third party service.

4. Data Storage and Security

We use industry standard services to store account information:

• Firebase Authentication for sign in
• Firebase Firestore for account roles and profile data

We apply reasonable technical safeguards to protect this information, including security rules that restrict access to your own account data. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

5. Third-Party Services

DataLab uses the following third-party services, each with its own privacy policy:

• Google Sign-In / Firebase Authentication for account login
• Firebase Firestore for storing account data

We do not use advertising or analytics SDKs that track you outside the app.

6. Data Retention

• Account information (name, email, role) is retained as long as your account exists
• Uploaded file contents are never retained. They exist only during an active session and are deleted immediately after

You can request deletion of your account and associated data at any time by contacting us.

7. Your Rights

Depending on your location, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your account and associated data
• Withdraw consent for data processing

To exercise any of these rights, contact us using the details below.

8. Children's Privacy

DataLab is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us and we will delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will update the effective date at the top of this page when changes are made. Continued use of the app after changes means you accept the updated policy.

10. Contact Us

If you have questions about this Privacy Policy or how your data is handled, contact us at:

Karakoram Labs (KKLabs)
Email: karakoramlabs@gmail.com