Features Privacy Who It's For FAQ Support Privacy Policy Terms of Service

Privacy Policy

Effective Date: July 27, 2026 · Last Updated: July 27, 2026

Overview

Pocket SQL ("the App", "we", "us", "our") is a mobile and desktop MySQL client built by Our Apps World. We are committed to protecting your privacy. This Privacy Policy explains what data we collect (and, importantly, what we don't collect), how we use it, and your rights regarding your information.

The short version: We don't collect personal data. Your database credentials, queries, and backups stay entirely on your device. We have no servers that store your information.

Information We Collect

Pocket SQL is designed with a privacy-first architecture. We collect the absolute minimum information necessary:

Crash Reports & Analytics (Optional)

If you have opted in via your device's operating system settings, anonymized crash reports and basic usage analytics may be collected through platform-standard mechanisms (Google Play's Android Vitals, Apple's App Analytics). These do not include:

  • Your database credentials or connection details
  • Your SQL queries or query results
  • Your database content or schemas
  • Any personally identifiable information

Information We Do Not Collect

We want to be explicit about what Pocket SQL never collects, transmits, or stores on any server:

  • Database credentials — hostnames, ports, usernames, and passwords are stored exclusively in your device's hardware-backed secure storage
  • SQL queries — your query history is saved locally and never transmitted
  • Database content — table data, schemas, and query results never leave your device
  • Backups — stored in the app's private storage or your own Google Drive account
  • Location data — we never request or access your location
  • Contacts — we never request or access your contacts
  • Advertising identifiers — we do not use advertising IDs or tracking
  • Personal information — no name, email, phone number, or account creation required

Local Data Storage

The following data is stored locally on your device:

  • Connection credentials: Encrypted using platform secure storage (Android Keystore on Android, Keychain Services on iOS/macOS). Credentials are encrypted at rest using hardware-backed keys and are never stored in plain text.
  • Query history: Saved in the app's private local database. You can clear this at any time from within the app.
  • Starred queries: Stored locally alongside query history.
  • Database backups: Stored as gzipped .sql files in the app's private storage directory. These files are not accessible to other apps.
  • Audit trail: A local log of all published changes made through Safe Mode.
  • App preferences: Theme selection, language preference, and other settings stored in standard platform preferences.
  • Vault backup snapshots: AES-256 encrypted daily snapshots of your saved connections, stored locally.

Device Permissions

Pocket SQL requests only the minimum permissions necessary to function:

  • Network access (INTERNET): Required to connect to your database servers. Pocket SQL connects directly to the hosts you configure — no traffic is routed through our servers.
  • Biometric authentication: Optional. Used only for the app-lock feature (Face ID, fingerprint, or device passcode). Biometric data is processed entirely by the operating system and never accessed by Pocket SQL.

Permissions we do NOT request:

  • Storage access (READ/WRITE_EXTERNAL_STORAGE)
  • Location (ACCESS_FINE/COARSE_LOCATION)
  • Camera
  • Microphone
  • Contacts (READ_CONTACTS)
  • Phone state
  • Advertising ID (AD_ID)

Third-Party Services

Google Drive (Optional)

If you choose to enable Google Drive backup, Pocket SQL will request access to your Google Drive account using the narrowest OAuth scope available (drive.file). This means:

  • Pocket SQL can only see and manage files that it created itself
  • Pocket SQL cannot see, read, modify, or delete any other files in your Google Drive
  • Backup files are uploaded directly from your device to your Google Drive account
  • You can revoke this access at any time through your Google Account settings

Google Drive access is governed by Google's Privacy Policy. Pocket SQL's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Platform Services

The app is distributed through the Google Play Store and Apple App Store. These platforms may collect their own analytics and crash reporting data according to their respective privacy policies:

Data Security

We take data security seriously and implement the following measures:

  • Hardware-backed encryption: Database credentials are stored in Android Keystore (Android) and Keychain Services (iOS/macOS), which use hardware security modules where available.
  • AES-256 encryption: Vault export files and daily connection snapshots are encrypted with AES-256.
  • TLS connections: Database connections support TLS encryption, automatically negotiated on compatible servers.
  • App-switcher blurring: The app's content is obscured in the OS task switcher to prevent visual snooping.
  • Biometric lock: Optional biometric authentication before accessing the app.
  • No remote access: Since we have no servers, there is no remote attack surface for your data.

Data Retention

Since all data is stored locally on your device, you have full control over data retention:

  • Uninstalling the app removes all local data
  • Query history can be cleared from within the app
  • Backups can be individually deleted
  • Connection credentials can be removed at any time
  • Google Drive backups persist in your Drive account until you delete them

Children's Privacy

Pocket SQL is not directed to children under 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children. Since the app does not collect personal information from any user, this concern is inherently addressed by our architecture.

Your Rights

Depending on your jurisdiction, you may have specific rights regarding your data. Because Pocket SQL does not collect or process personal data on any server, many of these rights are automatically satisfied:

  • Right to access: All your data is on your device — you already have full access.
  • Right to deletion: You can delete any data at any time through the app, or by uninstalling it.
  • Right to portability: You can export your connections as an encrypted file and your databases as .sql dumps.
  • Right to restrict processing: The app processes data only on your device at your direction.
  • Right to object: There is no automated decision-making or profiling.

If you are located in the European Economic Area (EEA), United Kingdom, or California, and believe you have unresolved concerns, please contact us at the address below.

International Users

Pocket SQL is available worldwide. Since no personal data is transmitted to or stored on our servers, there are no cross-border data transfers to consider. Your data remains on your device, subject to the laws of your jurisdiction.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will:

  • Update the "Last Updated" date at the top of this page
  • Notify you through an in-app notification for material changes
  • Post the updated policy on this page

We encourage you to review this policy periodically. Continued use of the app after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions or concerns about this Privacy Policy, please contact us: