Privacy Policy
How Syphnosys Analytics handles information, and what it does with data obtained through Google APIs.
Last updated 9 September 2026.
Who this covers
Syphnosys Analytics is an internal reporting tool operated by Syphnosys for its own staff. It has no public registration. The only people who use it are Syphnosys employees with an account issued to them, and the only Google accounts connected to it are accounts that Syphnosys owns and controls.
Information about people using the tool
For each person signed in we hold a name, a work email address, a hashed password, and a record of sign-ins and of actions taken in the application. That record exists so that a change can be traced to the person who made it. Nothing here is sold, rented, shared with third parties, or used for advertising.
Google user data
When an administrator connects a Google account, the application requests read-only access to that account. It requests nothing that would let it create, change or delete anything, and it reads nothing belonging to a different account.
| Platform | Access requested | Used for |
|---|---|---|
| AdMob | admob.readonly, admob.report |
Read estimated earnings, impressions, clicks, ad requests and fill rate for the apps belonging to the signed-in account owner, to show them in reports. |
| Google Ads | adwords |
Read campaign cost, impressions, clicks and conversions for the campaigns belonging to the signed-in account owner, to show what advertising spend returned. |
| Google Play | playdeveloperreporting, devstorage.read_only |
Read install, uninstall, rating, crash and ANR figures for apps belonging to the account owner. |
| Firebase | firebase.readonly, bigquery.readonly |
Read Crashlytics crash counts from the BigQuery export belonging to the account owner. |
| Google Analytics | analytics.readonly, bigquery.readonly |
Read aggregate audience and engagement figures for the GA4 property belonging to the account owner. |
Limited use
Syphnosys Analytics's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
In practice that means data obtained from Google APIs is used only to present reports to the people in Syphnosys who already have access to those same Google accounts. It is not transferred to anyone else, not used for advertising, not used to build profiles of individuals, and not read by a human except where necessary to fix a fault, with the account owner's knowledge.
How it is stored
Refresh tokens and service-account keys are stored encrypted and are never shown again after being saved. Reported figures — installs, earnings, spend, crash counts and similar — are stored as daily totals so that reports can be drawn without calling Google every time a page is opened. Access to the application is restricted by account, and every account only sees the apps it has been granted.
Keeping and deleting information
- Reported figures are kept while the app they describe remains in the system.
- Removing a connected account deletes its stored credentials immediately.
- Access can also be withdrawn at any time from the Google account itself, at Google Account › Third-party access, which stops all further reading straight away.
- To have anything else removed, write to us at the address below.
Changes
If what we do with information changes, this page changes with it and the date at the top is updated.