Your Google data

1What it asks for

Read-only access to Gmail (gmail.readonly) to find receipt and subscription emails and transaction alerts from your bank, card or wallet, plus your email address and name (openid, email, profile) to show which account is linked (and, if you redeem a Plus code for that account, to tie the code to it: only a one-way fingerprint of the address goes to our license service, never the address or any email). You give it on Google's own sign-in page; Qelvori never sees your Google password.

Only if you turn on Sync: access to Qelvori's own hidden folder in your Google Drive (drive.appdata), where your devices keep an end-to-end encrypted copy of your Qelvori data. It can't see any other file in your Drive, and neither we nor Google can read what's in that folder. More about Sync.

2What it does with it

Finds the services you pay for, their prices, billing dates, free trials and cancellations, and adds them to your subscription list, recording each charge as a payment. From transaction alerts it records the payments on your cards and wallets: the bank or wallet, the amount, the merchant and the date. A card is known only by its last 4 digits. Gmail data is used for nothing else.

3Where it goes

Nowhere. Emails are read and processed on your own computer, straight from Google to Qelvori. The developer never receives them, and nothing is sold, shared, used for advertising, used to decide credit-worthiness, or used to train artificial intelligence. No person reads your emails.

4What it can't do

Send, delete, label or change any email. The permission Google grants is read-only.

5What it keeps

Only emails that look like receipts or transaction alerts are searched, from about the last 13 months and up to 300 per sync. Short excerpts of those emails (up to 2,500 characters, with when they arrived) are kept on your computer for about 15 months, so later syncs don't download them again. Your Google sign-in is stored encrypted with Windows' protection.

6How to stop it

Unlink the account in Qelvori (Accounts, or Settings → Linked Google accounts): access is revoked at Google and stored email excerpts are deleted. Sync stops with Settings → Sync → Turn off (“Everywhere” also empties the hidden Drive folder). You can also remove access any time at myaccount.google.com/permissions.

Qelvori's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Every detail, including the exact searches and when Qelvori talks to Google, is in section 4 of the Privacy Policy.