Privacy Policy

Last updated: February 5, 2026

1. What We Collect

When you create an account and use Coding Buddy, we collect the following data:

  • Email address — used for account identification and login.
  • Password — stored as a bcrypt hash. We never store or see your plaintext password.
  • API key — a unique key generated for your account, used to authenticate hook events and WebSocket connections.
  • Status events — event name (e.g. “SessionStart”, “Stop”), session ID, and tool name. These are the Claude Code hook events your PC sends to our server.
  • Purchase history — records of premium avatar purchases (avatar ID, Mollie payment ID).

2. What We Do NOT Collect

  • We do not collect your code, file contents, or any personal files.
  • We do not collect the content of your prompts or Claude’s responses.
  • We do not collect device IDs, advertising IDs, or location data.
  • We do not use analytics trackers, cookies, or third-party tracking scripts.

3. How We Store Your Data

  • Database: All data is stored in a SQLite database on our VPS server.
  • Passwords: Hashed with bcrypt (12 rounds). Never stored in plaintext.
  • Transit: All data is transmitted over HTTPS and WSS (TLS-encrypted).
  • Sessions: JWT tokens with 24-hour expiry, stored server-side for revocation support.

4. Third Parties

We share data with the following third party only:

  • Mollie (payments) — When you purchase a premium avatar, your payment is processed by Mollie. We do not store your payment card details. See Mollie’s Privacy Policy.

We do not sell, rent, or share your personal data with any other third party.

5. Data Retention

  • Your account data is retained as long as your account exists.
  • Status events are transient — only the most recent status per user is stored. Historical events are not retained.
  • Expired sessions are automatically cleaned up every hour.

6. Account Deletion

You can delete your account at any time from the Dashboard or from the Settings screen in the Android app. When you delete your account, the following data is permanently removed:

  • Your user record (email, password hash, API key)
  • All active sessions
  • Purchase history
  • Stored status state

Deletion is immediate and irreversible.

7. Children’s Privacy

Coding Buddy is not directed at children under 13. We do not knowingly collect data from children under 13.

8. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page will be revised accordingly. Continued use of the service after changes constitutes acceptance.

9. Contact

If you have questions about this Privacy Policy or your data, contact us at:

privacy@coding-buddy.com