IIntroduction

OpsMate (hereinafter referred to as "the App", developed and maintained by the OpsMate Team) is a standalone, client-side MySQL database management tool. Our core engineering principle is zero data collection: we do not collect, store, track, or transmit any of your personal data or operational records to any of our servers or unconfigured third-party platforms. This Privacy Policy outlines the data handling rules, security boundaries, and user rights of the App. Please read this document thoroughly. By downloading, accessing, or using the App, you acknowledge and agree to the terms described herein.

1Zero Personal Information Collection

The App does not collect, track, or harvest any personal information, specifically including:

• No Identity Information: We do not collect names, phone numbers, email addresses, national IDs, or social accounts;
• No Hardware Identifiers: We do not collect device serial numbers, IMEI, MAC addresses, IDFA/GAID, or operating system fingerprinting data;
• No Behavioral Analytics: We do not track navigation paths, screen interaction frequencies, SQL query histories, or geo-location;
• No Tracking SDKs: We do not integrate third-party advertising, commercial tracking, behavioral analytics, or user profiling SDKs.

2Local Data Storage & Cryptographic Protection

All operational data created or configured within the App resides exclusively on your local device. We have neither the technical capability nor the legal right to access, inspect, modify, or exfiltrate your local data:

• Database Connection Profiles: MySQL host IP/domain, port, username, connection labels, and connection passwords entered by you;
• Query & Scratch Records: SQL execution statements, saved code snippets, query results, and local table configurations;
• AI Configuration Keys: AI endpoints, custom models, and API keys that you manually provide;
• Custom Preferences: Theme choices, shortcut layouts, and local UI preferences.

Hardware-Backed Local Encryption: Sensitive credentials (including database passwords and private AI API Keys) are encrypted inside the application's local sandbox using system-level secure storage primitives (such as Apple Keychain on iOS and KeyStore/EncryptedSharedPreferences on Android) coupled with AES-256 standard encryption.

Data Erasure: You retain full sovereignty over your data. You may irrevocably erase all locally stored data at any time either via the in-app "Reset / Clear All Data" settings or by directly uninstalling the App from your device.

3Special Notice on Third-Party AI Features & Data Sharing

• Bring Your Own Key (BYOK) Architecture: The AI features provided in the App function strictly as a client-side interface. You independently configure your own AI service credentials (such as an API Key from OpenAI, DeepSeek, Anthropic, or compatible custom endpoints). We neither provide nor sell AI subscriptions, nor do we levy fees on AI interactions;
• Disclosed Data Sent & Explicit Purposes: When you actively use the AI features, only the minimum data necessary to process your request is sent:
  • User Prompts: Natural language questions or instructions you input;
  • Table Schema Metadata: Table and column structure definitions (DDL) from your selected database, used solely to assist the AI model in generating syntactically valid and context-accurate SQL;
  • Error Diagnostics: SQL execution error messages when troubleshooting failed queries.
  All data sent is strictly used for the immediate purpose of generating SQL, explaining queries, or analyzing diagnostic errors within your active session.
• Direct End-to-End Transmission: All user prompts and schema context are dispatched directly from your mobile device to your designated third-party AI service provider over an encrypted HTTPS connection. No traffic is routed through, collected, inspected, or retained on any of our servers;
• In-App Prior Consent Requirement: Before any data is transmitted to a third-party AI service for the first time, the App presents an in-app notice disclosing the exact data being sent and the recipient, and explicitly obtains your permission. If you decline, no data will be transmitted;
• Confirmation of Equivalent Protection by Third Parties: The App confirms and requires that any third-party AI service provider (including OpenAI, DeepSeek, Anthropic, and other supported providers) with whom data is shared provides the same or equal protection of user data as set forth in this Privacy Policy under their respective enterprise and API data privacy terms. We never authorize third-party AI providers to use your confidential database queries or schemas for public model training.

4System Permissions

The App requests only the strictly minimal operating system permissions necessary to deliver core client functionalities:

• Network Access Permission: Utilized solely to establish direct TCP/TLS connections to your designated MySQL database instances and to perform outbound HTTPS requests to your configured AI endpoints. It is never used for background silent tracking or analytical telemetry.
• Biometric Authentication Permission (Face ID / Touch ID / Fingerprint): Utilized exclusively for verifying your identity when you opt to enable the "App Lock" protection feature. This authentication is executed natively by your device operating system (e.g., iOS LocalAuthentication, Android BiometricPrompt). The App receives solely a boolean verification result ("Success" or "Failed") and never reads, processes, stores, or transmits your actual facial contours, fingerprint templates, or biometric credentials.

You may grant or revoke these permissions at any time via your device operating system settings. Revoking network permissions will prevent remote database connectivity, but your locally stored configurations will remain accessible.

5User Responsibilities & Data Autonomy

• You are the sole custodian of all connection credentials, private keys, and database queries handled by the App. You are solely responsible for securing your physical device and safeguarding access credentials against unauthorized access;
• You represent and warrant that you hold legitimate authorization to access and query all target database instances managed through this App, and that your database activities comply with all applicable local, national, and international cybersecurity laws;
• Because the App operates in a zero-telemetry, offline-first model, we do not maintain backups of your database connection profiles or query histories. We strongly advise you to maintain external backups of vital connection parameters.

6Protection of Minors

The App is a specialized developer and database administrator utility targeted at individuals with full civil capacity. Minors under the age of 18 should only use this App under the direction and supervision of a legal guardian, and must not access sensitive production databases containing protected personal information or confidential assets.

7Amendments to This Policy

We may update this Privacy Policy periodically to reflect technological enhancements, App feature changes, or evolving regulatory standards. When significant updates occur, notices will be posted within the App or published via the official application store page. Your continued use of the App following any amendment indicates your acceptance of the revised terms.

8Contact & Community Support

If you have any questions, suggestions, or compliance inquiries concerning this Privacy Policy, please reach out via our community channels:

• Team: OpsMate Team
• GitHub Issues & Discussions: github.com/Hakim-Fan/opsmate/issues
• Feedback Channel: In-app "Settings - About & Feedback"