Privacy policy

Effective November 7, 2026

This policy describes how backup-01 ("the app"), a personal backup tool operated by Doug Francis, handles data when it connects to Google services.

Who uses the app

The app is for its operator's own use. It connects only to the operator's own Google account. It has no other users and does not collect information about members of the public.

Google user data the app accesses

• Scope: https://www.googleapis.com/auth/drive.file. This covers only the files and folders the app creates in Google Drive.
• What it does with them: it creates, reads, lists and deletes its own encrypted backup files to store, verify, restore and age out backups.
• It does not access other Drive files, Gmail, Contacts, Photos, or profile data beyond what Google's sign-in requires.

How data is stored and protected

• Backup data is encrypted on the operator's server before upload. The keys never leave the operator's control and are not shared with Google.
• The OAuth token that authorises access is kept only on the operator's backup server, in a file readable only by the backup service account.

Sharing

Google user data is not sold, shared with third parties, or used for advertising, profiling, or training machine-learning models. It is not transferred anywhere except between the operator's server and the operator's own Google Drive.

Retention and deletion

Encrypted backups are kept according to the operator's retention schedule and then deleted by the app. Access can be revoked at any time at myaccount.google.com/permissions. Revoking it stops all further access immediately.

Compliance

The app's use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.

Changes and contact

If this policy changes, the date above will be updated. Questions: doug.francis74@gmail.com.