End User License Agreement (EULA)

1. License Grant; Scope

1.1 Desktop Application. Subject to your continuous compliance with this EULA and timely payment of applicable fees, Company grants you a limited, non-exclusive, non-transferable, revocable license to install and use the desktop Software by one (1) named user on one (1) device with a Pro license, or on up to three (3) devices with a Pro Bundle license, thatyou own or control, solely for your internal business or professional purposes. The Software may include license keys or other technical controls to enforce limits.

1.1A Free Version and Trial. Without a Pro license, you may use the desktop Software free of charge with the features and limits the Software shows (for example, a limited number of saved connections), and you may start one free 14-day trial of Pro features. Sections 2-25 apply to free and trial use as they do to paid use. Company may change free-version limits and trial terms for future versions.

1.2 Mobile Application. The LunoDB mobile application is provided free of charge. Company grants you a non-exclusive, non-transferable, revocable license to install and use the mobile application on any iOS or Android devices you own or control, solely for your internal business or professional purposes. No license key or payment is required. The mobile application is a separate product and does not require a desktop Pro license.

1.3 Term. For desktop: if purchased as a subscription, the license continues for the subscription term and renewals; if purchased as a perpetual license, the license continues until terminated under Section 17. For mobile: the license continues until terminated under Section 17.

2. Restrictions

You will not (and will not permit any third party to): (a) reverse engineer, decompile, or attempt to derive source code; (b) modify or create derivative works; (c) remove or obscure notices; (d) distribute, sublicense, rent, lease, sell, or transfer; (e) use the Software for unlawful, harmful, or infringing activities; (f) interfere with or impair networks or services; (g) attempt unauthorized access to systems; (h) circumvent, disable, or tamper with license management, usage limits, or technical protections; (i) publish or disclose benchmarking or performance results except with our prior written consent; or (j) use the Software beyond your level of technical competency (see Section 4).

3. Database Operations & Data Responsibility – Critical Provisions

WARNING: The Software enables direct database access and execution of potentially destructive operations.

4. User Qualifications and Competency

By using the Software, you represent and warrant that you have sufficient knowledge of databases and SQL, understand the consequences of operations you perform, and will exercise appropriate caution.

5. Privacy; Data Handling; Local Credentials

5.1 Local Storage. The Software stores connection settings, preferences, and secrets/credentials locally on your device.

5.2 Desktop Credential Protection. On the desktop application, when available, the Software uses the operating system's secure storage (e.g., Keychain/DPAPI/Keyring) to protect secrets at rest. If OS secure storage is disabled or unavailable, secrets may be stored unencrypted, and you assume all associated risks.

5.3 Mobile Credential Storage. On the mobile application, connection details and credentials, AI API keys, query history, saved queries, graphs and AI chats are stored unencrypted in the app's local storage. The mobile app does not currently use iOS Keychain or Android Keystore. This local storage can be included in your device's iCloud, iTunes/Finder or Google backups. You can enable biometric authentication (Face ID/Touch ID/fingerprint, with your device passcode as a fallback) to lock access to the app, but this does not encrypt stored credentials. The mobile connection backup file is encrypted with AES-256 using a password you choose (backups made with older versions of the mobile app used weaker password obfuscation; export them again to protect them properly), and data exports (JSON, CSV, SQL) are not encrypted; keep these files somewhere safe. You are responsible for device security, including passcode protection and OS updates.

5.4 Desktop Telemetry and Crash Reports. The desktop Software sends anonymous usage telemetry, error reports and crash reports to Company to improve product quality. This is on by default and can be turned off at any time in Settings → General ("Anonymous usage and crash reports"); when it is off, nothing is sent. Telemetry is tied to a random identifier, not to your name, email or license, and includes events such as the app opening and closing, a connection being created (the database type and whether SSH is used), an update being installed or a CSV import finishing (row count), together with the app version, operating system and version. Error and crash reports include the error message, stack trace, the app screen that failed and, if you type one, your note about what you were doing. Telemetry never includes database credentials, connection details, AI API keys, or the contents of your queries or databases; however, an error message can occasionally include a table or column name when the error came from your database. Company's server also records the IP address the report came from. Company deletes telemetry 90 days after receiving it.

5.5 Mobile — No Telemetry. The mobile application does not collect any usage telemetry, analytics, or crash reports, and contains no third-party analytics SDKs. Its SQL editor loads its code from a public content delivery network (cdnjs, operated by Cloudflare), which receives your device's IP address when the editor loads.

5.6 AI API Keys. When you provide API keys for third-party AI services, the desktop Software encrypts them with the operating system's secure storage, decrypts them only inside the application's main process, and sends them only to the AI provider you chose. They are never transmitted to Company servers. You are solely responsible for managing, protecting, and maintaining compliance with your AI provider's terms of service.

5.6A Export to LunoDB Mobile. If you use "Export to LunoDB Mobile", the desktop Software uploads the connections you choose, including their passwords, SSH passwords, SSH key contents and access tokens (but not AI API keys or key files stored on your computer), together with your saved graphs and connection order, to Company's servers over TLS so your phone can download them by scanning a QR code. The upload is encrypted at rest, can be downloaded only once with the one-time secret in the QR code, and expires after 15 minutes. Company deletes the connection data as soon as your phone downloads it, or within about an hour after the session expires if it is never downloaded. If you do not use this feature, your connection details never leave your device except to reach your own database servers.

5.7 Third-Party Systems. You are responsible for compliance with any privacy, security, and terms of service obligations for third-party databases you connect to.

5A. LunoDB Cloud (Mobile Connection Service)

5A.1 Service Description. LunoDB Cloud is a secure connection proxy service that enables the LunoDB mobile application to connect to remote databases. Due to iOS and Android platform restrictions that prevent direct database connections from mobile apps, LunoDB Mobile routes remote database connections through LunoDB Cloud.

5A.2 How It Works. When you connect to a remote MySQL, MariaDB, PostgreSQL, SQL Server or MongoDB database from the mobile app: (a) your database credentials (and SSH credentials, if you use SSH) are sent over TLS from your device to LunoDB Cloud, which connects to your database server on your behalf; (b) SQL queries and results pass through LunoDB Cloud. The connection from LunoDB Cloud to your database server is always encrypted for SQL Server, and for MySQL, MariaDB and PostgreSQL uses TLS whenever your server supports it, falling back to an unencrypted connection only for servers that don't; for MongoDB it uses TLS for MongoDB Atlas (mongodb+srv) hosts and is otherwise unencrypted. Except for Azure SQL and MongoDB Atlas, LunoDB Cloud does not verify the server's certificate, so TLS protects against eavesdropping but not against impersonation of your server. With SSH, LunoDB Cloud signs in to your SSH host and runs the database client there, so your database password and SQL may appear in that host's process list or logs. You can point the mobile app at a different proxy address in its settings; Company is not responsible for any proxy you choose.

5A.3 Limited Data Storage. LunoDB Cloud does not store your SQL queries, query results or database contents. While you are connected, it keeps your database and SSH credentials encrypted in a temporary session for up to 30 minutes, deleted when you disconnect or the session expires. It also logs each request's endpoint, method, session identifier, IP address, status code and duration (never the SQL, credentials or results) to operate and secure the service, and deletes those logs after 90 days.

5A.4 Your Responsibilities. You are responsible for: ensuring your use of LunoDB Cloud complies with your organization's security policies; using strong database credentials; and understanding that connection data transits LunoDB infrastructure even though it is not stored.

5A.5 Service Availability. LunoDB Cloud is provided "as is" without guaranteed uptime or service level agreements. Company may modify, suspend, or discontinue LunoDB Cloud at any time with or without notice. The mobile app may not function for remote databases if LunoDB Cloud is unavailable.

5A.6 Databases That Don't Use LunoDB Cloud. Local SQLite databases on your mobile device are accessed directly, and Turso databases are reached directly from your device over HTTPS; neither uses LunoDB Cloud.

6. AI Features & Third-Party AI Services

6.1 AI Providers. The Software includes optional AI-powered features (natural language SQL generation, AI filters, a chat assistant that can answer questions by running read-only queries, graph suggestions, data insights, and query optimization). Except for on-device AI, these features use third-party AI services and require you to provide your own API credentials and to comply with the respective AI provider's terms of service, acceptable use policies, and pricing.

Desktop Application supports: OpenAI, Anthropic Claude, Google Gemini, xAI Grok, DeepSeek, OpenRouter, Ollama (local AI), Apple Intelligence (on-device, on Apple silicon Macs running macOS 26 or later; no API key), and custom OpenAI-compatible endpoints. On macOS 27 or later, Apple Intelligence is selected by default until you choose another provider.

Mobile Application supports: Apple Intelligence (on-device, on iPhones and iPads with Apple Intelligence; no API key), OpenAI, Anthropic Claude, Google Gemini, and xAI Grok. Requests go directly from your device to the provider you chose. DeepSeek, OpenRouter, Ollama, and custom endpoints are not available on mobile.

6.2 Your Responsibility for AI Usage. You are solely responsible for: (a) obtaining, managing, and securing API credentials for your chosen AI provider(s); (b) all costs, charges, and usage fees from your AI provider; (c) compliance with your AI provider's terms, usage limits, and acceptable use policies; (d) reviewing and verifying all AI-generated SQL queries, filters, and recommendations before execution; and (e) ensuring data sent to AI providers complies with your privacy, security, and regulatory obligations.

6.3 Data Sent to AI Providers. When you use an AI feature, the Software sends what that feature needs directly from your device to the AI provider you chose. This always includes your request and database schema information (table names, column names, data types, keys, indexes and relationships), and depending on the feature it also includes database data:

• (a) Chat answers: the rows a read-only answer query returns (on the desktop, up to 50 rows; fewer with on-device AI) so the assistant can describe them;
• (b) Data insights: the rows shown on screen (up to 50) and column statistics;
• (c) Graph suggestions: a small sample of rows from the selected tables;
• (d) Query optimization: the query text and, when available, its execution plan;
• (e) SQL generation, AI filters and chat: your messages, earlier messages in the same chat, and any SQL you include.

On the mobile application, Data Insights sends column statistics (null and unique counts, minimum, maximum and most common value) and the first 5 rows of the table.

Schema information and data can reveal sensitive details about your database. You are responsible for ensuring this transmission complies with your privacy, security and regulatory obligations, and for not using cloud AI providers with data you are not permitted to share with them. Company does not receive this data.

6.4 AI Output Disclaimer. AI-generated SQL queries, filters, and recommendations are provided "as is" without warranty. AI outputs may be inaccurate, incomplete, or potentially harmful. You must review all AI-generated content before execution. Company has no liability for damages arising from AI-generated content, including data loss, corruption, unauthorized access, or service disruption.

6.5 No Company Liability for Third-Party AI Services. Company is not responsible for: availability, performance, accuracy, pricing changes, or terms changes of third-party AI services; interruptions or failures of AI services; AI provider's handling of your data; or violations of AI provider terms.

6.6 Local and On-Device AI. When using Ollama or other local AI services on the desktop application, you are solely responsible for installation, configuration, security, model selection, and compliance with applicable model licenses and terms. Apple Intelligence runs on your device using Apple's built-in model; requests to it are processed locally and are not sent to Company or to a third-party AI provider, and its use is subject to Apple's terms.

6.7 Opt-Out. AI features are optional. You may choose not to configure or use AI features, or turn them off in Settings → AI, without affecting other Software functionality. No data is sent to an AI provider unless you use an AI feature.

7. Security Obligations

You are solely responsible for securing database credentials, implementing network security, authorizing access, monitoring and logging activities, and complying with your organization's policies.

8. High-Risk Use Disclaimer

The Software is not designed for life/safety or other high-risk uses (e.g., medical devices, aviation, nuclear).Company disclaims all liability for any use in such environments.

9. Open-Source Components

The Software may include open-source components governed by their respective licenses. Those licenses apply to the OSS components. A current list and notices are provided in the "Third-Party Notices" file or in-app.

10. Updates; Changes to the EULA

11. Export Controls & Sanctions

You will comply with all applicable export control and sanctions laws (including U.S. and EU laws). You represent you are not a restricted party or located in an embargoed jurisdiction.

12. Compliance & Sectoral Laws

You are solely responsible for ensuring your use complies with all applicable laws and industry rules (e.g., GDPR, HIPAA, SOX, PCI-DSS). Company is not a Business Associate under HIPAA, and the Software is not designed for storage/processing of PCI cardholder data.

13. Ownership; Feedback

The Software is licensed, not sold. Company and its licensors retain all right, title, and interest in the Software. You grant Company a perpetual, irrevocable, royalty-free license to use and exploit any feedback or suggestions you provide.

14. Fees; Taxes; Support

14.1 Desktop Application. Fees (if any) are due as stated at purchase. Prices exclude taxes; you are responsible for applicable taxes, duties, and levies (excluding taxes on our income). Unless we agree otherwise in writing, support and maintenance are not guaranteed.

14.2 Mobile Application. The mobile application is free. There are no in-app purchases, subscriptions, or fees. You are responsible for any data charges from your mobile carrier when using the app.

15. Disclaimer of Warranties

THE SOFTWARE IS PROVIDED "AS IS" AND "AS AVAILABLE." TO THE MAXIMUM EXTENT PERMITTED BY LAW, COMPANY DISCLAIMSALL WARRANTIES, EXPRESS, IMPLIED, STATUTORY, OR OTHERWISE, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE,NON-INFRINGEMENT, ACCURACY, RELIABILITY, SECURITY, AND UNINTERRUPTED OR ERROR-FREE OPERATION. NO ORAL OR WRITTEN INFORMATION OR ADVICE CREATES ANY WARRANTY.

16. Limitation of Liability

17. Termination; Effect

This EULA is effective until terminated. We may suspend or terminate immediately for your breach or to prevent harm. You may terminate at any time by ceasing use and deleting all copies. Upon termination, your license ends and you must uninstall and destroy the Software and related keys. Sections that by their nature should survive (including 3, 5–7, 10–13, 15–25) will survive.

18. Dispute Resolution; Arbitration; Class Waiver; Opt-Out

19. Business Users; Consumer Rights

The Software is offered for business/professional use only. Nothing in this EULA limits non-waivable consumer rights where applicable (e.g., under UK Consumer Rights Act or Australian Consumer Law).

20. Force Majeure

Neither party is liable for delays or failures caused by events beyond reasonable control (e.g., outages, cyberattacks, natural disasters, labor disputes), excluding payment obligations.

21. Assignment

Company may assign this EULA (including in connection with a merger, acquisition, or sale of assets). You may not assign without our prior written consent, and any prohibited assignment is void.

22. Government End-Users

The Software is "commercial computer software" under FAR 12.212 and DFARS 227.7202. Government end-users receive only those rights set forth in this EULA.

23. Time to Bring Claim

Any claim must be filed within 12 months after the cause of action accrues, or it is permanently barred, to the extent permitted by law.

24. Notices

Notices to Company must be sent to [email protected](and are deemed given upon receipt). We may provide notices to you via the Software, email, or your account.

25. Severability; Waiver; Entire Agreement; Order of Precedence

If any provision is unenforceable, it will be modified to the minimum extent necessary, and the remainder will remain in effect. Failure to enforce is not a waiver. This EULA (and any applicable order form) is the entire agreement regarding the Software and supersedes prior or contemporaneous understandings. In the event of conflict, an executed order form (if any) controls over this EULA.