1. Data Accessed

To provide its core functionality, QuiKey accesses specific user data through third-party services you authorize.

Google User Data: QuiKey requests the following permissions (scopes):

• Send email on your behalf (gmail.send): Used to send files and messages as emails from your account.
• See and download your Google Drive files (drive.file and drive.metadata.readonly): Used to upload files to your Drive and list folders for destination selection.
• See your primary Google Account email address (userinfo.email): Used to identify your account and display which account is currently logged in.

Other Data: The app may access files on your local machine that you explicitly select to send or process.

2. Data Usage

We use the accessed data exclusively to perform actions initiated by you:

• Composing and sending emails from your account.
• Listing and searching for folders to help you select a file destination.
• Uploading or saving files to your cloud storage.
• Displaying your account email for session management within the app.

We do not use this data for building advertising profiles, selling your information to third parties, or any purpose other than the specific tasks you perform in the app.

Limited Use Disclosure: QuiKey's use and transfer of information received from Google APIs to any other app will adhere to Google API Services User Data Policy, including the Limited Use requirements.

3. Data Storage

• Local Security: All authentication tokens (including Google OAuth tokens), API keys, and session data are stored locally on your device in encrypted form.
• No Server Storage: We do not transmit or store your Google user data, email contents, or files on our own servers. All data transfer occurs directly between your device and the official APIs of the services you use.
• Application Logs: Diagnostic logs are stored locally and can be deleted by the user at any time.

4. Data Sharing

We do not share your personal data with any third parties, except:

• With the service provider to fulfill the action you initiated (such as sending an email or uploading a file).
• If explicitly directed by you (e.g., sending a file to a specific recipient).
• With AI providers (like OpenAI or Anthropic) only if and when you explicitly use a feature that involves processing a file or text through those specific services. Only the selected content is transmitted.

AI/ML Training Disclosure: Data obtained from Google APIs is never used to train generalized AI/ML models. We maintain strict data segregation between Google API services and third-party AI integrations.