Privacy Policy

In short

• RowDeck connects from your iPhone to the MySQL and MariaDB servers and SSH bastions you set up. No server of ours stands in between, so your connections, queries and data can't pass through one.
• Passwords, private keys, certificates, pinned fingerprints and your AI API keys stay in the iOS Keychain on this iPhone, without iCloud sync.
• Crash reports go to Sentry and usage counts to our own analytics server, starting when you tap Done on the first screen. They never contain your SQL, schema, table or column names, hostnames, values or credentials.
• The AI assistant sends a redacted snapshot to the provider you choose, only when you ask it something.
• We don't sell data, show ads, or track you across apps and websites.

Connections the app makes

• Your MySQL or MariaDB server, directly or through the SSH bastion and jump hosts you configure.
• The AI provider or model server you set up for the assistant, only when you ask it something.
• Sentry for crash reports and our own analytics server for usage counts, each while its switch is on.
• Apple's App Store for the in-app purchase.

Nothing else. The demo connection works offline, and the app does nothing in the background while it is closed.

Data that stays on your iPhone

• iOS Keychain, this device only (WhenUnlockedThisDeviceOnly, no iCloud sync): database and SSH passwords, private keys and their passphrases, Secure Enclave keys, client and CA certificates, pinned TLS fingerprints and SSH host keys, your AI API keys and the cached Pro status.
• The app's protected files: connection settings without secrets (name, host, port, database, user, TLS mode, SSH hosts and users). They come over with an iPhone backup; passwords, keys and certificates stay on the iPhone they were saved on.
• Only on this iPhone, outside backups: your action journal (kills, writes and row edits, with values in SQL replaced by ?), kept for 90 days, and your saved SQL snippets.
• Memory only: the SQL history of the console and assistant conversations. They are gone when the session ends.

A page you export goes to the iOS share sheet as a CSV file or to the clipboard, where RowDeck's copies expire after two minutes; where it goes from there is your choice. Deleting a connection removes its credentials and trusted fingerprints from the device and leaves your server alone.

AI assistant

The assistant is part of Pro and free on the built-in demo, where it answers from scripts and calls no model. It sends nothing until you set up a provider and ask a question.

Requests go from your iPhone straight to the provider you choose: Anthropic, OpenAI, OpenRouter or Z.ai with your own API key, or your own Ollama or OpenAI-compatible server. That provider's privacy policy applies to what it receives. Each key stays in the Keychain and is sent only to the address it was saved for.

• Sent: your question and a snapshot of the screen you asked about: the server family and version, the Health tiles, sessions and lock waits, statement digests.
• Never sent: host, port, IP addresses, connection names and passwords. Values inside statements are removed in every mode.
• Names: with “Names hidden”, the default for cloud providers and custom endpoints, RowDeck sends schemas, tables, columns, accounts and statements as placeholders like table_1 and puts the real names back on your iPhone. With “Real names”, the default only for Ollama on your own network, it sends them as they are.

Before it sends, the app shows what it read and what it hid. The assistant runs nothing: SQL from an answer goes to the console, and a kill goes through the usual confirmation.

Crash reports and usage counts

The first launch ends on a screen with two switches, Crash & error reporting and Usage analytics. Both start on, and you can turn either off there or later in Settings › Privacy. Nothing goes out before you tap Done.

• Crash & error reporting sends technical details of crashes and failed operations to Sentry (Functional Software, Inc.): what failed and where in the app.
• Usage counts go to an analytics server we run ourselves: the screens you open and steps such as connecting to a server, opening the demo, or buying and restoring Pro, with your plan (Free or Pro). The analytics library adds the app version, the iOS version, the device model and the language. We share these counts with no one.
• When you tap Done, the app sends one note with both choices, even with usage analytics off. Turning usage analytics off later sends one last note with that choice, and nothing new follows; events recorded before that may still leave the queue. Turning crash reporting off stops it at once.

Neither ever contains your SQL, schema, table or column names, hostnames, row values, passwords, keys or certificates, and neither uses an advertising identifier. Data already delivered stays with the processor. To ask about data the app has sent, write to support@rowdeck.app.

Permissions

• Face ID unlocks the app while Require Face ID is on, which it is by default; your passcode works too. Face ID data stays with iOS: RowDeck only learns whether unlocking succeeded.
• Local Network: the app asks for it only to reach a database server, bastion or model on your own network.

RowDeck doesn't ask for your location, contacts, photos, camera or microphone.

Purchases

Apple sells RowDeck Pro. We never receive your payment details. The app checks Apple's signed transaction on the device to unlock Pro, and usage counts record only the outcome of a purchase or restore.

This website

rowdeck.app is a static website hosted on Cloudflare, which processes technical request data such as IP addresses to deliver and protect it.

We use Cloudflare Web Analytics to count page views and measure how fast pages load. It sets no cookies and stores nothing in your browser.

We use Google Analytics 4 to see which pages people read and which buttons they press, such as the App Store badge. It sets cookies and loads after your first interaction or a few seconds after the page opens. We keep its advertising features off. Google's privacy policy applies to that data.

If you email us, we use your address and message only to reply.

Children

RowDeck is a developer tool and isn't directed at children. We don't knowingly collect personal information from children.

Your choices and changes

Everything the app stores lives on your device, so you can see, change or delete it there. For anything about data the app has sent, this website or your emails, write to support@rowdeck.app.

If we change this policy, we publish the new version on this page with a new date.

Contact

Vladimir Chemeris develops RowDeck. Privacy questions: support@rowdeck.app.