DBmate

Privacy Policy

Last Updated: July 10, 2026

Welcome to DBmate. Your privacy is critical to us. This Privacy Policy describes how DBmate ("we", "us", or "our") collects, uses, and safeguards your information when you use our mobile application ("Application").

1. Information We Collect and Process

A. Database Credentials and Connections

All database credentials, connection parameters (e.g., hostnames, port numbers, usernames, passwords, SSH private keys), and session data are stored locally on your device. We use Android's EncryptedSharedPreferences and secure local databases to encrypt your credentials. This information is never sent to our servers.

B. Account and Sync Information

When you create an account or sign in using Google Sign-In or Firebase Authentication, we collect:

• Your name, email address, and profile photo.
• A unique user ID generated by Firebase to manage your subscription tier.

C. Billing and Subscription Metadata

We process in-app purchase tokens and billing events via the Google Play Billing Library. This subscription status metadata (tier, status, and expiration) is securely synchronized with our backend (Firebase Firestore) to gate premium features.

D. AI Assistant Usage

If you choose to use the AI Assistant feature:

• Pro Tier (Bring Your Own Key): Your queries and database schema metadata are sent directly from your device to the upstream AI provider (e.g., OpenAI) using your configured API key.
• Enterprise Tier (System-Integrated Gateway): Queries are routed through our secure enterprise gateway proxy. No raw connection strings or database access details are shared with the proxy.

2. How We Use Your Information

We use the collected information for the following purposes:

• To provide, operate, and maintain the Application's core database connection services.
• To authenticate your identity and synchronize your subscription status across multiple devices.
• To process your subscription upgrades and enforce feature gates (e.g., SSH Tunneling, AI assistant queries, premium database drivers).
• To improve the reliability and safety of the Application.

3. Third-Party Services

To enable authentication, subscriptions, and messaging, we integrate third-party services that process data under their own policies:

• Google Play Billing: Handles payment processing and subscription purchase validation.
• Firebase Authentication & Cloud Firestore: Manages secure user authentication sessions and stores subscription status metadata.
• Firebase Cloud Messaging (FCM): Sends transactional push notifications regarding subscription renewals, app alerts, or system updates.

4. Data Security

We use industry-standard cryptographic practices on Android (including AES-256 encryption via Android Jetpack Security) to safeguard your passwords and private keys locally. While we implement strong precautions, please secure your mobile device with a passcode or biometric lock to prevent unauthorized physical access to your local databases.

5. Your Rights and Account Deletion

You can manage, edit, or delete your saved connection profiles and local SQL scripts at any time directly within the Application. You have full ownership and control over your account data:

• In-App Account Deletion: You can permanently delete your user account and all synchronized cloud profile data directly inside the mobile application by navigating to Settings → Account Profile → Delete Account. To protect against accidental deletions, a 5-second press-and-hold confirmation is required.
• Web Deletion Request: If you are unable to access the mobile application, you may submit an explicit account deletion request by emailing support-iramzy@gmail.com with your registered email address. We will verify your identity and purge your user record from Firebase within 30 days.

6. California Consumer Privacy Act (CCPA / CPRA) Disclosures

This section applies exclusively to residents of California under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• No Sale or Sharing of Personal Information: We do NOT sell, rent, trade, or share your personal information or database metadata with third parties for cross-context behavioral advertising or marketing purposes.
• Categories of Collected Personal Information: Identifiers (email address, Firebase UID), Commercial/Billing Information (Google Play purchase tokens), and Application Usage Telemetry (via Firebase Analytics, subject to opt-in consent).
• California Privacy Rights: You have the right to request access to your collected personal information, request permanent deletion of your data, and exercise these rights without discrimination.

7. Trademarks and Legal Notice

PostgreSQL, MySQL, MariaDB, Redis, MongoDB, Oracle, Microsoft SQL Server, and Azure are registered trademarks or trademarks of their respective owners. DBmate is an independent database management tool and is not affiliated with, sponsored by, or endorsed by any of these entities. All product names, logos, and brands are used strictly for identification and compatibility purposes.

8. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top of this policy.