Privacy Policy

TL;DR

  • We don't want your data. We don’t store it, we don’t see it, and we definitely don’t sell it.

  • Your Money, Your Drive. All your financial data lives in a private spreadsheet on your Google Drive. We don't have the keys to your house.

  • Ephemeral OCR. When you scan a receipt, the image is converted to text and immediately deleted. It exists for a millisecond, then it’s gone.

  • Sovereignty. You are in control. If you want to wipe everything, you can do it in the app with one tap.

Last Updated: May 2026 Location: Melbourne, Australia

Most privacy policies are designed to hide what a company is doing with your data.
This one is designed to show you that we don’t want your data at all.
S-Studio 26 is built on the principle of Local Sovereignty.

1. The Core Philosophy

We don’t own your data. We don’t even store it. The Drip App is a bridge between your bank and your own Google Drive.
We are the architects of the bridge; we do not sit at the toll booth watching who passes.

2. What We Collect (And Why We Don't)

  • Email Addresses & Personal Identifiers: We do not collect, request, or store your email address, name, or phone number within the Drip App infrastructure. Your identity remains entirely anonymous to us.

  • Financial Data: We do not store your transactions or budget information on our servers. The Drip App creates and updates a private spreadsheet inside your own Google Drive using secure, scoped OAuth tokens.

  • The "No-Access" Promise: S-Studio 26 does not have "backdoor" access to your Drive or your spreadsheets. Your financial "Flow" is strictly between you and your personal Google account.

3. Google API User Data Policy Compliance

Drip’s integration and use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

  • Data Accessed: Our application requests specific, limited access permissions to your Google Account via secure OAuth tokens. We utilise basic profile scopes to retrieve your name, email address, and profile picture, which are used strictly to personalise your local user interface and establish a secure, unique login session. Additionally, we utilise the Google Drive API (.../auth/drive.file) to view, edit, create, and delete only the specific files/folders used by Drip, and the Google Sheets API (.../auth/spreadsheets) to see, edit, create, and delete your spreadsheets specifically to sync your budgeting vaults. We do not read your emails or access unrelated files.

  • Data Usage: Your tokens are used exclusively to automate your personal finance workflows. The app creates a designated folder in your Drive, places custom spreadsheets there, and updates transaction data directly inside your authorized sheets to populate your local app dashboard.

  • Data Sharing: S-Studio 26 does not store your core transaction details on our external servers, nor do we sell, trade, or share any Google user data with third parties, analytics tools, or advertising networks.

  • Data Storage & Protection: Your Google OAuth access tokens are handled securely and are never stored in a readable plain-text format. Security measures are in place to safeguard these tokens against unauthorized access.

  • Data Retention & Deletion: Drip retains your session token only for as long as necessary to maintain the app's connection to your spreadsheets. You can revoke access at any time via your Google Account Security Settings. To purge any configuration metadata or request manual data deletion, contact us at hello@sstudio26.com.

4. Third-Party Ecosystem

To make the magic happen, we use world-class infrastructure. Their privacy rules apply to their specific parts of the "bridge":

  • Firebase (Google): Handles the app’s technical framework and secure authentication.

  • Google App Store / Apple App Store: Handles the distribution and payment processing.

  • Google APIs: Facilitates the creation of your private spreadsheet.

  • Google Vision API (OCR): When you scan a document, the image and metadata are sent through a secure API for text conversion. This is an ephemeral process: once the text is extracted and sent to your spreadsheet, the image is immediately deleted from the processing stream. We do not store, see, or "train" on your images.

  • RevenueCat: We utilise RevenueCat to manage and verify your premium app subscriptions. This framework relies entirely on a completely randomised, unique device token (e.g., an anonymous User ID) to check your transaction status. RevenueCat never receives your email address, name, or payment details. If you switch devices or reinstall the app, tapping "Restore Purchases" instantly re-links your subscription using the native Apple or Google account signed into your physical device.

5. Data Retention (The "Wipe" Rule)

Since we don't store your data on our servers, there is nothing for us to "sell" or "lose."

  • In-App Reset: If you want to start over, you can Reset Onboarding within the app. This wipes the local app state immediately and drive folder information.

  • Google Drive: You remain in total control of the files created in your Drive. You can delete them at any time without our permission.

6. Australian Privacy Principles (APP)

As an Australian entity, we comply with the Privacy Act 1988. Because we have architected Drip to be completely anonymous-by-design, we do not hold database registries of user names or emails. While you maintain the right to query what information we hold under the APPs, our data footprint for your app usage is entirely vacant.

7. International Data Transfers

While S-Studio 26 is based in Australia, our third-party infrastructure providers (Google Firebase and Google Cloud) operate global server networks. By using the app, you acknowledge that your encrypted authentication data and ephemeral OCR processing may occur on servers located outside of Australia, primarily in the United States, under Google’s industry-leading security protocols.

8. Policy Evolution

As S-Studio 26 grows, we may update this manifesto. If we make significant changes to how we handle the (very little) data we have, we will notify you via a prominent notice within the Drip App. Your continued use of the app after an update constitutes your acceptance of the new terms.

9. Contact Us

No robots. No "support tickets." If you have any questions regarding this Privacy Policy, our data architecture, or how to manage your local data, contact the humans at hello@sstudio26.com