Privacy Policy

Overview

DBHelm is a desktop application that stores database credentials and kubeconfigs locally on your machine. A free DBHelm account (email) is required to download installers and to manage Free / Pro / Platform subscriptions online. This policy describes what we process on our accounts service versus what stays on your device.

Desktop app (local)

After install, the app is offline-first. Kubeconfigs, connection secrets, local users, and settings are stored in an encrypted SQLite database on your machine (AES-256-GCM). We do not receive your database contents, query results, or kubeconfig files unless you explicitly enable optional features that call third parties you configure (for example a BYO AI provider).

Delete this folder to remove local DBHelm data. Optional opt-in error reporting can be disabled in Settings.

DBHelm account & website

When you use dbhelm.com/account we process:

• · Email address (sign-in via one-time code; new emails create a Free account)
• · Download events (platform, file name, app version) when you download installers while signed in
• · Subscription and license metadata for Pro / Platform (tier, status, expiry, seats, device activations)
• · For Pro for teams: the team name and seat count; each member's email, role and status; the connection templates the team shares (engine, host, port, database name, TLS mode, SSH bastion host, port and user, proxy settings and notes, never passwords, keys or certificates); and the team audit webhook URL and its signing secret

Account data is stored in our Cloudflare Workers / D1 accounts service. Magic-code and license emails are sent via Resend from a DBHelm address (for example licenses@dbhelm.com).

Team audit events (who ran which query, on which database, from which laptop) go straight from each member's DBHelm to the webhook your Super Admin chose. They do not pass through or get stored on DBHelm servers.

Browser session (localStorage)

The marketing account portal stores a short-lived session token in your browser's localStorage so you stay signed in across tabs on dbhelm.com. Clearing site data or using Sign out removes it. This token is only for the website portal — it is not the desktop app login, and it is not sent to your databases.

Learning Hub courses

The MongoDB and PostgreSQL courses at dbhelm.com/learn run in your browser. Lesson, quiz, exercise and review progress is kept in localStorage, and the queries you run never leave the page. If you choose Save for offline use, a copy of the course files is kept in your browser's cache storage until you remove it from the Progress page.

Payments (Lemon Squeezy)

Paid Pro and Platform checkouts are processed by Lemon Squeezy (merchant of record). Lemon receives billing details you enter at checkout; we receive subscription and customer identifiers needed to issue and renew license keys. Manage cards, invoices, and cancellation in the Lemon customer portal (linked from your DBHelm account when subscribed).

Other network activity

• · Update checks for new desktop versions (Windows/Linux may install in-app; macOS may open the download page until signed builds ship)
• · Connections you configure: Kubernetes APIs, databases, cloud providers, optional Git remotes, optional BYO AI providers
• · The marketing site is mostly static; the account portal calls the accounts API above

What we do not sell

We do not sell personal data. We do not use third-party advertising trackers on the marketing site.

Contact

Privacy questions: hello@dbhelm.com. Security reports: security@dbhelm.com.