Privacy Policy: SudoDB

SudoDB is a local-first app. It does not require an account, does not include ads or analytics SDKs, and does not send your databases, queries, or files to SudoCod servers. Data stays on your device except for:

• Subscription purchase and entitlement checks via Google Play Billing
• Optional system backups you (or your device) enable

SudoDB Pro is offered as an auto-renewing yearly subscription through Google Play, with a 14-day free trial for eligible new subscribers. Displayed price comes from Google Play and may vary by country or storefront. After the trial, billing renews yearly unless you cancel in Google Play subscription settings.

Use this table when completing Google Play Data safety. Categories reflect app functionality, not advertising or analytics.

Personal info (name, email, phone): Not collected by the app. SudoCod does not operate an in-app account for SudoDB.

Payment and trial eligibility are processed by Google Play Billing, not by SudoCod directly. The app does not collect, store, or transmit payment card numbers, billing addresses, or other payment credentials.

SudoCod may receive limited purchase or payout reports from Google (for example that a subscription or trial started, renewals, cancellations, and settlement details for the developer). Those reports do not include your on-device databases or queries.

Product ID: sudodb_pro (base plan sudodb-pro-yearly, trial offer sudodb-yearly-14d-trial).

Subscriptions auto-renew unless cancelled. You can manage or cancel in Google Play subscription settings. Deleting the app does not by itself cancel a Play subscription.

When you use the app, it may store locally:

• A cached flag of whether Google Play last reported an active subscription, so the app can keep working offline after a successful entitlement check. This offline entitlement cache is stored separately from other app data and is excluded from Android Auto Backup / device transfer, so restoring a backup does not restore Pro access without a fresh Play entitlement check
• Connection metadata you enter (display name, host, port, optional database name, username, SSL mode, database engine) in an on-device Room database (sudodb_connections.db). Passwords are not stored in that database. If database is left blank, the app browses all databases on that server when you open the workspace
• Database passwords, encrypted with the Android Keystore (AES-GCM) in a separate encrypted preferences file. Passwords are never written in plaintext, are never shown on connection tiles, and are excluded from Auto Backup / device transfer. When you edit a connection, leaving the password field blank keeps the existing stored secret
• Temporary workspace data while a connection is open (schema/object lists, column metadata, paginated row previews, and optional row-filter state). Filter text you enter is used only to build preview queries against the database host you chose. This data is held in memory for browsing on this device and is not uploaded to SudoCod. Closing the workspace ends the JDBC session
• Database files and other query work you create or open in the app (these stay on the device; they are not uploaded to SudoCod)

This data is stored in the app's on-device storage (or held in memory for the active session). It is not uploaded to SudoCod. Payment card details are never stored by the app. Database passwords are never sent to SudoCod.

Debug builds may offer an explicit Continue without Play (debug only) unlock for development. That unlock is local, is not a Play purchase, and is never granted by Restore purchases.

The app may:

1. Contact Google Play Billing to load subscription offers, complete purchases, restore purchases, and verify entitlement. Those systems are operated by Google under their policies, not by SudoCod.
2. Read device network connectivity state so it can re-check subscription status when you are online and rely on the local entitlement cache when you are offline.
3. Connect to database hosts you configure including Test connection, opening a saved connection in the database workspace, loading schemas/tables/views (including all-databases browse when no database name is set), and fetching paginated row previews. You may optionally apply a row filter (SQL WHERE expression) in the Data tab; that expression is included in preview queries sent to the host. Traffic goes directly from your device to that host over JDBC (PostgreSQL, MySQL, or MariaDB). Those hosts will see a connection from your device (and your username / password as part of normal database authentication). Row and schema results are shown in the app on this device only. SudoDB does not proxy that traffic through SudoCod servers and does not send connection passwords to SudoCod. Cleartext database traffic is disabled at the app level; SSL mode is chosen by you (default Require).

These requests are made only for features you use. The app does not phone home to SudoCod for telemetry, crash reporting, advertising, or account sync. Opening, testing, browsing, or previewing a database does not send that database to SudoCod.

• System backup / device transfer: If backup is enabled, Android may include eligible app files in system backups (for example Google Backup or OEM device transfer). The offline subscription entitlement cache, connection database, and encrypted password store are excluded from Auto Backup and device transfer. After restore, Pro access depends on a live Google Play entitlement check, and saved database connections must be re-created. Controlled by your device / Google account settings, not by SudoCod servers.
• Manual export/import: If the app offers export (for example a file you save), you choose where to save it. You control who can access exported files. Export does not send files through SudoCod.

The app only requests access needed for its features. It does not request contacts, location, camera, microphone, or your photo library for core use.

The app draws edge-to-edge (behind system bars and display cutouts) using Android window insets. That is a layout/display behavior only; it does not collect additional personal data or require extra permissions.

SudoDB is not directed at children under 13. We do not knowingly collect personal information from children through this app.

SudoCod does not sell your data. The app does not share your databases with third parties for advertising. Third parties that may receive limited technical information in the course of a feature you use include:

• Your backup provider or storage destination if you enable system backup or export a file there
• Google, for store purchase and (if enabled) platform backup, under Google's privacy policy
• Database servers you choose to connect to (when you test, open, browse, or preview a saved connection)

Data remains on your device until you delete it in the app, clear app storage, or uninstall. Uninstalling removes local app data (system backups you already made may still exist until you delete them through your account or device backup settings). Exported files remain wherever you saved them until you delete them. Google Play manages subscription records under Google's policies.

We may update this policy when the app's behavior changes. The effective date at the top will be revised when we do. Continued use after an update means you accept the revised policy.

Questions about this policy or the app:

• Web: https://sudocod.com
• Product: https://sudocod.com/products/sudo-db/
• Email: privacy@sudocod.com
• Developer: SudoCod