Privacy Policy

TL;DR

  • We don't want your data. We don’t store it, we don’t see it, and we definitely don’t sell it.

  • Your Money, Your Drive. All your financial data lives in a private spreadsheet on your Google Drive. We don't have the keys to your house.

  • Ephemeral OCR. When you scan a receipt, the image is converted to text and immediately deleted. It exists for a millisecond, then it’s gone.

  • Sovereignty. You are in control. If you want to wipe everything, you can do it in the app with one tap.

Last Updated: August 2026

Location: Melbourne, Australia

Most privacy policies are designed to hide what a company is doing with your data.
This one is designed to show you that we don’t want your data at all.

1. The Core Philosophy

We don’t own your data. We don’t even store it. The Drip App is a bridge between your bank and your own Google Drive.
We are the architects of the bridge; we do not sit at the toll booth watching who passes.

2. What We Collect (And Why We Don't)

  • Email Addresses & Customer Identifiers: We do not collect, request, or store your email address within our own primary application database or servers. However, when you subscribe to paid features or manage in-app purchases, your email address and related subscription identifiers are processed and retained securely by our subscription partner, RevenueCat, to manage your account status, entitlements, and customer support.

  • Financial Data: We do not store your transactions or budget information on our servers. The Drip App creates and updates a private spreadsheet inside your own Google Drive using secure, scoped OAuth tokens.

  • The "No-Access" Promise: S-Studio 26 does not have "backdoor" access to your Drive or your spreadsheets. Your financial "Flow" is strictly between you and your personal Google account.

3. Google API User Data Policy Compliance

Drip’s integration and use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

  • Data Accessed: Our application requests specific, limited access permissions to your Google Account via secure OAuth tokens. We utilise basic profile scopes to retrieve your name, email address, and profile picture, which are used strictly to personalise your local user interface and establish a secure, unique login session. Additionally, we utilise the Google Drive API (.../auth/drive.file) to view, edit, create, and delete only the specific files/folders used by Drip, and the Google Sheets API (.../auth/spreadsheets) to see, edit, create, and delete your spreadsheets specifically to sync your budgeting vaults. We do not read your emails or access unrelated files.

  • Data Usage: Your tokens are used exclusively to automate your personal finance workflows. The app creates a designated folder in your Drive, places custom spreadsheets there, and updates transaction data directly inside your authorized sheets to populate your local app dashboard.

  • Data Sharing: S-Studio 26 does not store your core transaction details on our external servers, nor do we sell, trade, or share any Google user data with third parties, analytics tools, or advertising networks.

  • Data Storage & Protection: Your Google OAuth access tokens are handled securely and are never stored in a readable plain-text format. Security measures are in place to safeguard these tokens against unauthorized access.

  • Data Retention & Deletion: Drip retains your session token only for as long as necessary to maintain the app's connection to your spreadsheets. You can revoke access at any time via your Google Account Security Settings. To purge any configuration metadata or request manual data deletion, contact us at hello@sstudio26.com.

4. Third-Party Ecosystem

TTo make the magic happen, we use world-class infrastructure. Their privacy rules apply to their specific parts of the "bridge":

  • Firebase (Google): Handles the app’s technical framework and secure authentication.

  • Google App Store / Apple App Store: Handles distribution and payment processing.

  • Google APIs: Facilitates the creation and management of your private spreadsheets.

  • Google Vision API (OCR): When you scan a document, the image and metadata are sent through a secure API for text conversion. This is an ephemeral process: once the text is extracted and sent to your spreadsheet, the image is immediately deleted from the processing stream. We do not store, see, or "train" on your images.

  • RevenueCat: We utilise RevenueCat to handle purchase receipts, manage subscription entitlements, and process billing activity. In addition to generated anonymous user IDs, RevenueCat retains user email addresses associated with active or past customer accounts. This information is used strictly to verify active subscriptions, process renewals, support cross-device restores, and assist with billing support. You can read more about how they process data in the RevenueCat Privacy Policy.

5. Data Retention (The "Wipe" Rule)

Since we don't store your core financial data on our servers, there is no financial information for us to "sell" or "lose."

  • In-App Reset: If you want to start over, you can Reset Onboarding within the app. This wipes the local app state immediately and drive folder information. (Just note that this is final and S Studio 26 cannot retrieve any files after using the Reset Onboarding function)

  • Google Drive: You remain in total control of the files created in your Drive. You can delete, copy or update them at any time without our permission.

  • Subscription Records & Account Deletion: RevenueCat retains subscription records, including email addresses, for as long as necessary to maintain valid billing history and comply with legal or operational requirements. If you wish to permanently delete your email address and associated customer record from RevenueCat, please contact us at hello@sstudio26.com.

6. Australian Privacy Principles (APP)

As an Australian entity, we comply with the Privacy Act 1988. Aside from necessary account and subscription records maintained through our service providers (such as RevenueCat), we have architected Drip to leave as minimal a digital footprint as possible. While you maintain the right to query what personal information we hold under the APPs, our data footprint for your day-to-day financial usage remains on your personal Google Drive.

7. International Data Transfers

While S-Studio 26 is based in Australia, our third-party infrastructure providers (Google Firebase, Google Cloud, and RevenueCat) operate global server networks. By using the app, you acknowledge that your encrypted authentication data, subscription data, and ephemeral OCR processing may occur on servers located outside of Australia, primarily in the United States, under industry-leading security protocols.

8. Policy Evolution

As S-Studio 26 grows, we may update this manifesto. If we make significant changes to how we handle the data we process, we will notify you via a prominent notice within the Drip App. Your continued use of the app after an update constitutes your acceptance of the new terms.

9. Contact Us

No robots. No "support tickets." If you have any questions regarding this Privacy Policy, our data architecture, or how to manage or delete your subscription data, contact the humans at hello@sstudio26.com.