Privacy Policy - DBerio Database Client

CodeSand Co., Ltd. (the "Company") values the personal information of users of DBerio (the "Service") and complies with applicable laws such as the Personal Information Protection Act of Korea. This Privacy Policy is written so that users can check what information the Company sends, when, where it goes, what it is used for, and when it is deleted.

Summary. This app has no accounts, and the Company does not operate a server that receives users' data. Connection profiles, passwords and workspace state are all stored only on the user's device, and the contents of databases travel only between the user's device and the servers the user specifies. The app has no sign-up, login, usage statistics, error reporting or advertising. The only information the Company receives is inquiries users send by email.

Article 1 (Personal Information Collected)

General: Through the app, the Company does not collect names, contact details, location, payment method information, or unique identification information such as resident registration numbers. Because the Service has no accounts, it does not collect IDs, passwords or social account information, and it does not use tools that collect usage statistics, error reports or advertising identifiers.

A. Information that stays on the device and is not collected by the Company

The Service needs the information below to work, and all of it is stored only on the user's device. There is no path for it to be sent to the Company, and the Company cannot access it.

Connection profiles — connection name, database type, host and port, user name, default database, SSH tunnel and TLS settings, paths of files the user chose (SSH keys, certificates, SQLite files), trusted SSH host key fingerprints, connection color, production-server flag, groups. Stored in a settings file in the app's data folder.
Passwords — database passwords, SSH passwords, key passphrases. Stored only in the operating system's password store (macOS Keychain, Windows Credential Manager) and never written to the settings file.
Workspace state — open connections, query tab titles and contents, screen layout, language setting. Stored in the app's internal storage.
File re-access permissions — in the Mac App Store version, macOS access permission data for reopening files the user chose on the next launch. Stored in the app's data folder.
Subscription status — whether the Pro subscription is valid. The app checks this on the device, with the App Store for the Mac App Store version and with the Microsoft Store for the Windows version. It contains no payment method information.

Contents of databases. The Service displays the structure and data of the databases the user connects to, and sends the queries the user runs to those servers. This communication takes place only between the user's device and the servers the user specifies, and is not passed to the Company or to any third party designated by the Company. Export and backup files are saved only in the locations the user chooses.

Communication with the outside. The Service connects over the network only to ① the database servers and SSH servers the user specifies (when opening a connection) and ② the Apple App Store (to show subscription product information, process purchases and restores, and check subscription status — Mac App Store version) and ③ the Microsoft Store (to show subscription product information, process purchases and check subscription status — Windows version). When the user clicks a link to the Terms, the Privacy Policy or subscription management, the default web browser opens that page.

B. Information collected by the Company

Inquiries and reply email address Only when the user sends them

Items collected: the sender address, subject and body of the email the user sends, and any files the user attaches
When collected: when the user sends an inquiry to the email address in Article 11. The app never sends anything on its own
Sent to / stored at: the inquiry mailbox operated by the Company ([email protected])
Purpose: replying to and handling inquiries, reproducing and fixing reported problems

Connection details and database contents are not sent with an inquiry unless the user writes or attaches them. Please do not include passwords or sensitive data in inquiries.

Article 2 (Purposes of Use)

The Company uses the personal information it collects only for the following purposes, and if a purpose changes, it gives notice in advance and obtains any required consent.

Providing the Service — connecting to databases, saving connection profiles, running queries and showing results (processed only on the device)
Checking and applying the Paid Product subscription (checked on the device with each store: the Mac App Store or the Microsoft Store)
Responding to customer inquiries and handling disputes

Article 3 (Retention Period and Destruction)

A. Information stored on the device

Connection profiles, passwords and workspace state exist only on the user's device and are kept until the user deletes them. Because the Company does not hold them, there is no information or destruction procedure on the Company's side. How to delete them is set out in Article 7.

B. Items kept under applicable law

Records of consumer complaints or dispute handling (including inquiries received by email) — 3 years (Act on the Consumer Protection in Electronic Commerce, etc. of Korea)
Other information that applicable laws require to be kept — for the period set by those laws

Payment and refund records for the Paid Product are kept by each store (the Mac App Store or the Microsoft Store) in accordance with its own policies and applicable laws, and the Company does not hold them.

C. Method of destruction

Information whose retention period has expired or whose purpose has been achieved is permanently deleted in a way that cannot be recovered or reproduced from electronic files.

Article 4 (Provision to Third Parties)

The Company does not provide users' personal information to third parties, except in the following cases:

where the user has consented in advance;
where there is a provision in law, or where an investigative agency requests it in accordance with the procedures and methods set by law for investigative purposes.

Data exchanged with database servers the user specifies, and files the user exports and passes on, are the user's own choice and are not provision to third parties by the Company.

Article 5 (Entrustment of Processing)

The Company entrusts the processing of personal information to the following companies to provide the Service. If the trustee or the entrusted work changes, the Company will disclose it through this Privacy Policy.

Apple Inc.

Entrusted work: processing of App Store subscription payments
Processing location: United States

The seller of the Paid Product is the Apple App Store, which processes payments in accordance with Apple's terms and Privacy Policy. The Company does not collect or store payment method information.

Microsoft Corporation

Entrusted work: processing of Microsoft Store subscription payments
Processing location: United States and other countries where Microsoft operates facilities

Payments for the Windows version are processed by the Microsoft Store in accordance with Microsoft's terms and Privacy Statement. The Company does not collect or store payment method information.

Article 6 (Overseas Transfer of Personal Information)

In providing the Service, the Company transfers personal information overseas as follows. This transfer is entrustment and storage of processing for the conclusion and performance of a contract with the data subject under Article 28-8(1)(3) of the Personal Information Protection Act of Korea, and disclosing the following through this Privacy Policy replaces the related notice.

Apple Inc.

Destination country: United States
Items transferred: transaction information for App Store subscription payments (based on the Apple account — the Company cannot access payment method information)
Time and method of transfer: sent over the network when the user purchases or restores a subscription or when the app checks the subscription status
Purpose: processing App Store payments
Retention period: until the end of the entrustment contract or the achievement of the purpose. Actual retention follows Apple's Privacy Policy

Microsoft Corporation

Destination country: the United States and other countries where Microsoft, its affiliates or its service providers operate facilities, including the user's region
Items transferred: transaction information for Microsoft Store subscription payments (based on the Microsoft account — the Company cannot access payment method information)
Time and method of transfer: sent over the network when the user purchases a subscription or when the app checks the subscription status
Purpose: processing Microsoft Store payments
Retention period: until the end of the entrustment contract or the achievement of the purpose. Actual retention follows Microsoft's Privacy Statement

If the user does not want personal information to be transferred overseas, the user may say so to the Privacy Officer in Article 11. In that case, purchase and use of the Paid Product through the store may be restricted, while the features within the free range can be used as they are without any overseas transfer.

Article 7 (Users' Rights and How to Exercise Them)

Users may at any time request access to, correction, deletion or suspension of processing of their personal information, and withdraw consent. These rights can be exercised as follows.

In the app — deleting a connection profile also deletes its password stored in the Keychain (macOS) or Credential Manager (Windows). The app's data folder may remain after the app is deleted, and you can delete it yourself (Mac App Store version: ~/Library/Containers/com.codesand.dberio).
In the operating system — items remaining in the Keychain (macOS) or Credential Manager (Windows) can be removed directly with that tool.
By email — send a request to the Privacy Officer in Article 11, and the Company will handle it without delay and reply with the result.

Because the Service has no accounts, the Company does not hold a personal information file that identifies and stores individual users, and to that extent there is nothing to access or correct. However, if you have sent an inquiry by email, you may request access to or deletion of that inquiry.

The legal representative of a child under 14 may exercise the above rights on behalf of the child. If there is a legitimate reason to restrict a request, the Company will inform you of the reason.

Article 8 (Security Measures)

The Company implements the following measures:

A structure that does not collect — connection profiles, passwords and database contents are not sent to the Company's servers. The app has no communication path for sending this information to the Company.
Separate storage of passwords — passwords are not written to the settings file and are stored only in the operating system's password store (macOS Keychain, Windows Credential Manager).
No accounts or passwords — because the Service does not create accounts, the Company does not collect or store users' login information.
No handling of payment method information — payments are processed by each store (the Mac App Store or the Microsoft Store), and the Company's systems do not handle payment method information.

Article 9 (Installation, Operation and Refusal of Automatic Collection Devices)

The app does not install or operate cookies or any other devices that automatically collect personal information.

Article 10 (Personal Information of Children under 14)

The Service is not directed at children under 14 and does not knowingly collect children's personal information. If the Company learns that personal information of a child under 14 has been collected, it destroys that information without delay.

Article 11 (Privacy Officer and Remedies)

The Company has designated a Privacy Officer, and users' inquiries, complaints, remedies for damage and access requests concerning the processing of personal information are handled by the department below.

Department: Privacy Team, CodeSand Co., Ltd.
Email: [email protected]

Users may apply to the following organizations (Republic of Korea) for dispute resolution or consultation to obtain remedies for infringement of personal information:

Personal Information Dispute Mediation Committee — +82-1833-6972 (kopico.go.kr)
Personal Information Infringement Report Center — 118 within Korea (privacy.kisa.or.kr)
Supreme Prosecutors' Office — 1301 within Korea (spo.go.kr)
Korean National Police Agency Cyber Investigation Bureau — 182 within Korea (ecrm.police.go.kr)

Article 12 (Changes to This Privacy Policy)

Effective date: October 14, 2026 (first effective October 8, 2026)

The contents of this Privacy Policy may be added to, deleted or amended due to changes in laws, policies or the Service, and any change will be posted on the Service website with the reason and the effective date. Before starting any new processing of personal information, the Company will give notice of the change and have a lawful basis for processing, such as consent where required by applicable law.

Amended October 14, 2026: for sales of the Windows version (Microsoft Store), the Microsoft Store (Microsoft Corporation) was added to subscription status checks, external communication, entrustment of processing and overseas transfer, and the Windows password store (Credential Manager) was added.

Disclaimer →