Analytics Widgets collects the minimum data needed to make the app work. When you sign in with Google, we request your consent to read Google Analytics 4 reporting data, and we use that data only to render the charts and metrics that appear in your widgets. Your Google credentials never touch your device: Google sends a temporary authorization code to our backend, which exchanges it for a refresh token and keeps it encrypted server-side behind a thin proxy, while your device stores only a session token in the iOS Keychain. We do not sell your data, and we never share it with anyone except the third-party processors required to run the service: Google, which provides your analytics data and the sign-in flow, Cloudflare, which hosts our backend infrastructure, and Apple, which provides app hosting, crash reporting, and purchase processing through the App Store and StoreKit. We retain your analytics data only as long as you keep the app connected, and you can disconnect your Google account at any time from within the app, which immediately revokes our access and deletes your session and stored tokens. Our backend keeps refresh tokens active so your widgets stay updated, and it never uses your data for advertising, profiling, or any purpose other than powering the widgets you configure. We use standard encryption in transit and at rest, and if you have questions, want a copy of the data we hold, or want us to permanently delete your account and all associated data, email us at [email protected] and we will respond within 30 days. We may update this policy from time to time, and changes will be posted on this page with a revised effective date. By continuing to use Analytics Widgets after changes are posted, you accept the updated policy.