When you sign in with Google, DSIDE requests permission to:
DSIDE stores a small record identifying your Google account and a security token that lets it access the files above without asking you to sign in every time. DSIDE does not store, see, or have access to your bank account numbers, passwords, or any financial account credentials. Your actual financial data lives entirely in a Google Sheet in your own Google Drive, not on DSIDE's servers.
The security token described above is stored in Google Cloud Firestore, which encrypts all data at rest by default. Every connection - both between your browser and DSIDE, and between DSIDE's servers and Firestore - uses HTTPS encryption in transit.
Firestore's own security rules deny all direct browser or mobile access to the database; the only way in is through DSIDE's own server, which connects using a Google Cloud service account governed by Cloud IAM, never exposed to the public internet. On top of that, DSIDE's server-side code always scopes every read and write to whichever Google account is currently signed in - there is no path, through DSIDE, for one user's session to read or modify another user's data.
Solely to operate the app on your behalf - showing you your own data, and saving what you enter. Your data is never sold, shared, or used for any purpose other than running the app for you.
You can remove DSIDE's access at any time from your Google Account's third-party access settings. Doing so does not delete your Google Sheet or its data - that remains entirely yours, in your own Drive, since DSIDE never owned it to begin with.
Questions about this policy: dsideadmin@gmail.com