Privacy Policy
Last updated: February 9, 2026
The short version
- We don't read your code — only status events (working, ready, stopped)
- No website tracking — zero cookies, no third-party scripts on the website. The Android app uses Firebase for crash reporting only.
- Your password is hashed — we never see or store it in plain text
- Delete anytime — one click removes all your data permanently
- No data sales — we will never sell your information to anyone
1 What we collect
When you create an account and use Coding Buddy, we collect the following data:
- Email address — used for account identification and login.
- Password — stored as a bcrypt hash. We never store or see your plaintext password.
- API key — a unique key generated for your account, used to authenticate hook events and WebSocket connections.
- Status events — event name (e.g. “SessionStart”, “Stop”), session ID, and tool name. These are the Claude Code hook events your PC sends to our server.
- Purchase & donation history — records of premium avatar purchases and donations (type, amount, Mollie payment ID).
- Voice messages — if you use voice input from the Android app, your transcribed text is relayed through our server to your Claude Code terminal via WebSocket. Messages are not stored; they are forwarded in real time and discarded.
- Roadmap activity — feature suggestions you submit and votes you cast on the roadmap.
2 What we do NOT collect
Privacy by design: We intentionally collect the minimum data needed to make the service work.
- We do not collect your code, file contents, or any personal files.
- We do not collect the content of your prompts or Claude’s responses.
- We do not collect device IDs, advertising IDs, or location data.
- We do not use cookies or third-party tracking scripts on the website. The Android app includes Firebase Crashlytics and Analytics (see section 4).
3 How we store your data
- Database: All data is stored in a SQLite database on our VPS server.
- Passwords: Hashed with bcrypt (12 rounds). Never stored in plaintext.
- Transit: All data is transmitted over HTTPS and WSS (TLS-encrypted).
- Sessions: JWT tokens with 24-hour expiry, stored server-side for revocation support.
4 Third parties
We share data with the following third parties:
- Mollie (payments) — When you purchase a premium avatar or make a donation, your payment is processed by Mollie. We do not store your payment card details. See Mollie’s Privacy Policy.
- Google Firebase (Android app only) — The Android app uses Firebase Crashlytics for crash reporting and Firebase Analytics for basic app usage statistics. This may collect device model, Android version, app version, crash logs, and anonymous usage data. No personal data (email, API key, code) is sent to Firebase. See Firebase’s Privacy Policy.
No data sales: We do not sell, rent, or share your personal data with any other third party.
5 Data retention
- Your account data is retained as long as your account exists.
- Status events are transient — only the most recent status per user is stored. Historical events are not retained.
- Expired sessions are automatically cleaned up every hour.
6 Account deletion
You can delete your account at any time from the Dashboard or from the Settings screen in the Android app. When you delete your account, the following data is permanently removed:
- Your user record (email, password hash, API key)
- All active sessions
- Purchase history
- Stored status state
Warning: Deletion is immediate and irreversible. Make sure you really want to delete before clicking the button.
7 Children’s privacy
Coding Buddy is not directed at children under 13. We do not knowingly collect data from children under 13.
8 Changes to this policy
We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page will be revised accordingly. Continued use of the service after changes constitutes acceptance.
9 Contact
If you have questions about this Privacy Policy or your data, get in touch: