If you choose to sign in or connect a Google account, the following applies. If you don’t connect a Google account, this section doesn’t apply — we never receive any Google data.

5.1 What we access

When you connect your Google account, we request the following scopes. All access is read-only — we cannot modify, delete, send, or upload anything to your Google account.

Account identity

• User Profile — your name and profile picture, to display your identity inside the app.
• User Email — your email address, to identify your account.
• User Info — standard sign-in identifier issued by Google.

Personal details (from your Google profile)

• User Birth Date — your date of birth.
• User Gender — your gender.
• User Phone Number — phone numbers listed on your Google profile.
• User Address— addresses listed on your Google profile.

Google services (read-only)

• Youtube — to view your YouTube channel, playlists, or subscriptions inside the app.
• Google Drive — to view and open files from your Google Drive inside the app.
• Gmail — to view email messages and metadata inside the app.
• Calendar — to view your calendar events inside the app.
• Contacts  — to view your contacts inside the app.

You will see the exact permissions on Google’s consent screen before granting access, and you can decline any of them.

5.2 How we use it

Google account data is used only to display information and deliver the features you explicitly use inside the app. We do not:

• Sell, rent, or trade your data
• Use it for advertising or marketing
• Use it to train AI or machine-learning models
• Share it with third parties for their own purposes
• Read, scan, or process your Google data in the background when you’re not actively using a feature
• Make any changes to your Google account — all scopes are read-only

5.3 How we share it

We do not share your Google account data with third parties, except:

• Google itself — API requests go directly from the app to Google.
• Legal requirements — only if compelled by valid legal process.

We do not use analytics providers, advertising networks, or data brokers for Google user data.

5.4 Where it’s stored & how it’s protected

• Google access is handled via OAuth tokens stored locally on your device in the operating system’s secure storage.
• Tokens are never sent to our servers and never leave your device except to communicate directly with Google’s APIs.
• All communication with Google APIs uses HTTPS / TLS encryption.
• YouTube, Drive, Gmail, Calendar, and Contacts data is fetched on demand and shown to you inside the app.
• Because data stays on your device, your device’s security (OS login, disk encryption) is the primary safeguard.

5.5 Retention & deletion

• We do not retain your Google data on our servers — we don’t operate a server-side database for Google user data.
• OAuth tokens and any cached data remain on your device only while you stay signed in.