1. user-data is supposed to live in the \Data subdirectory, not the \App subdirectory. That way, it gets backed up by your PAM's backup thingie and since new upgrades don't touch the \Data fork at all, user-data is always preserved during the process.