Where does plainDB store my data and passwords?
plainDB stores connection settings, query history and saved queries locally. Database traffic goes to the servers you configure, optionally through your SSH host. The current app does not include a hosted plainDB account or a cloud database proxy.
How are passwords stored?
The native Mac app uses macOS Keychain for secrets. On Windows, secret values are protected with Windows DPAPI for the current user and stored as protected blobs in the local workspace database. That distinction matters: Windows credentials are protected, but it would be inaccurate to say they are never stored in the workspace file.
Local storage still deserves care. Query text and history can contain personal or confidential information, particularly when values are written as SQL literals. Exported CSV, JSON and SQL files also contain the data you selected. Treat workspace backups and exported files according to your own data-handling requirements.
What about AI?
The Mac assistant uses Apple's on-device Foundation Models framework. Its context can include schema information, current SQL and the last error. Result rows are optional context; the app exposes an “Include current result” control for the first 20 rows. Review that setting before discussing sensitive results.
“On-device AI” describes the assistant's inference. It does not mean remote database queries stay on the computer: queries still travel to your configured database server. The Windows assistant sends requests only to the configured loopback model endpoint. SQL and errors require an explicit action, and the optional result checkbox shares up to 20 loaded rows. It rejects remote endpoints, proxies and redirects.
The privacy page separately describes website analytics and hosting. Website behaviour and installed-app behaviour should not be treated as the same data flow.