G200 privacy policy

Last updated: 2026-10-04

G200 is a private app used only by the members of one household. This page says what it does with your data, in particular data from Google.

What we access

When you tap Conectar in the app and approve Google’s consent screen, G200 gets an OAuth refresh token for that Google account, limited to the permissions you approved:

• Your e-mail address (openid, email): to show which account is connected.
• Google Calendar (calendar): to create and update events for household bills on a calendar the household uses.
• Gmail, read-only (gmail.readonly), only for accounts where you approve it: to read order-confirmation e-mails (for example from Amazon) so the household can track purchases.

How it is used and stored

• The token is stored encrypted (AES-GCM) on the household’s own server. It is never stored on the phone.
• Google data is used only to provide the features above, for the household. It is not sold, shared with third parties, used for advertising, or used to train AI models.
• Only the household’s own automation reads it. A household member’s data is not shown to other people outside the household.

G200’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Removing access

Tap Desconectar in the app. This deletes the stored token and revokes it at Google. You can also revoke access at myaccount.google.com/permissions. To have any other stored data deleted, e-mail helder@agentofuser.com.

Contact

Helder S Ribeiro, helder@agentofuser.com