Privacy Policy

Effective 3 October 2026

This policy explains what information ACC (the private dashboard at acc.mobiappglobal.org) receives when you sign in with Google, why, and what your rights are.

1. Who is responsible

ACC is operated by Iason Schizas, Greece (the "operator"), who is the data controller for the processing described here. Contact: privacy@mobiappglobal.org.

2. What Google user data ACC receives

When you sign in, Google shares with Cloudflare Access, and through it with ACC, only the basic profile information requested by the openid, email and profile scopes:

• your email address;
• your name;
• a technical account identifier issued by Google.

ACC does not request or receive access to your Gmail, Google Drive, Calendar, Contacts, Photos or any other Google service. ACC never sees your Google password.

3. How the data is used

This information is used only to:

• check that your email address is on the list of people the operator has invited;
• decide what you may do (invited viewers can read; only the operator can make changes);
• show your email address on screen while you are signed in.

It is not used for advertising, profiling, marketing or newsletters, and it is not used to train artificial intelligence or machine-learning models.

4. Sharing

Your information is not sold, rented or shared with anyone. The only service provider involved is Cloudflare, Inc., which runs the sign-in (Cloudflare Access) on the operator's behalf. Google processes the sign-in itself under Google's Privacy Policy.

5. Storage and retention

• ACC itself does not keep a database of users. It reads your email address from the sign-in token on each request and does not store it.
• Cloudflare Access keeps an access log (email address, time of sign-in, IP address and approximate country) so the operator can see who signed in. These logs are kept for Cloudflare's standard retention period (about 30 days on the plan used), then deleted.
• A sign-in session lasts up to 24 hours, after which you sign in again.

6. Cookies

Cloudflare Access sets a single, strictly necessary session cookie (CF_Authorization) that keeps you signed in. No analytics, advertising or tracking cookies are used, on this site or in ACC.

7. Google API Services User Data Policy

ACC's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

8. Your rights

Under the EU General Data Protection Regulation (GDPR) you may ask for access to, correction of or deletion of your data, and object to or restrict its processing. The simplest request is to have your access removed: write to privacy@mobiappglobal.org, and your email address will be taken off the invitation list. You can also withdraw ACC's access at any time from your Google Account, under "Third-party apps and services". You have the right to complain to the Hellenic Data Protection Authority (www.dpa.gr).

9. Legal basis

The processing is necessary for the operator's legitimate interest in keeping a private tool private, and for providing access you have asked for (GDPR Art. 6(1)(f) and 6(1)(b)).

10. Changes

If this policy changes, the new version will be published on this page with a new effective date.