Privacy Policy for MongoBongo
This Privacy Policy describes how MongoBongo ("the App") handles information when you install and use it on an Android device. By using the App, you agree to the practices described below.
Summary
MongoBongo is a client tool that connects to MongoDB servers you choose. The App does not collect, transmit, or share your personal data with the developer. Connection details, saved queries, and credentials live only on your device. Data you view or modify is exchanged solely between your device and the MongoDB server you connect to.
Information stored on your device
When you create a connection, save a query, or change app settings, the following is stored locally in the App's private storage:
- Connection profiles: server hostname, port, replica set name, TLS/SSH preferences, and SSH tunnel parameters.
- Credentials: MongoDB passwords, SSH passwords, and SSH key file references are stored using the Android Keystore via
EncryptedSharedPreferences(AES-256). They are not transmitted to the developer or any third party. - Saved queries: filters, projections, sort definitions, and aggregation pipelines you choose to save.
- App preferences: theme, dynamic color preference, and similar UI settings.
This information never leaves your device unless you explicitly export it (see "Backups and exports" below) or unless it is sent to a MongoDB server you have configured.
Information sent to third-party services
The App communicates with the following third parties, only as required for the features you use:
- Your MongoDB servers. When you connect, the App sends authentication credentials and queries directly to the host you specified. The developer has no visibility into this traffic.
- DNS resolvers. To resolve
mongodb+srv://Atlas hostnames, the App performs DNS lookups against public DNS resolvers (Google8.8.8.8, Cloudflare1.1.1.1). Only the hostname you configured is sent. - SSH servers (only if you enable SSH tunneling). Used solely to establish the tunnel you configured.
- Google Play Billing. If you purchase a subscription or one-time upgrade, Google Play handles the transaction. The App receives only a purchase token from Google to verify entitlement. The developer does not receive your name, email, payment method, or billing address. See Google's privacy policy at https://policies.google.com/privacy.
The App does not include analytics, advertising, crash reporting, telemetry, or tracking SDKs.
Backups and exports
You may use the App's import/export feature to save a backup file of your connections and saved queries. The exported file:
- Is created at a location you choose using Android's system file picker.
- Contains the data described in "Information stored on your device", including credentials in plaintext when exporting full backups.
- Is your responsibility to store, share, and dispose of securely.
Permissions
The App requests only permissions necessary for its features, including network access (to reach MongoDB and DNS servers), storage access (for the file picker used during import/export and document exports), and foreground service permission (used while an SSH tunnel is active, to keep the tunnel from being killed in the background).
Children's privacy
The App is not directed to children under 13 (or the equivalent minimum age in your jurisdiction). The developer does not knowingly collect information from children.
Data retention and deletion
All data stored by the App resides in its private application storage. Uninstalling the App removes all stored data, including credentials, connection profiles, and saved queries. There is no server-side data to delete because the developer does not store any.
Security
Credentials are encrypted at rest using the Android Keystore. Network connections to MongoDB use TLS when configured. However, no system is perfectly secure. You are responsible for keeping your device, your MongoDB servers, and any exported backup files secure.
Changes to this policy
This policy may be updated to reflect changes in the App's functionality or applicable law. Updates will be published with the App or at the URL where this policy is hosted. Continued use of the App after an update constitutes acceptance of the revised policy.
Contact
Questions about this policy may be directed to: info@sundrysoft.com