Yes, they can. There are app-specific folders in .local that flatpaks can read and write to specifically for this purpose, and also the file picking dialog may give access to the one specific file you picked.

Android IMO has great usability in exposing a database to apps, which means they aren’t required to ship their own database engine.