Manny LabPrivacy policy
Who this covers
Manny Lab is a personal project. I, Manny, am the only person who builds it, runs it and uses it. There are no customers and no other users, and nobody can sign up. So the only Google user data involved is my own, from my own Google account, and this policy is written for that situation rather than for a service with the public as its users.
The one Manny Lab app that connects to a Google account is Manifold, a gateway that gives my AI assistant tools for my own services. The other apps (Ledger, House Hunt, Flightpack Hub, Obsbot Portal) do not use Google sign-in and do not touch Google account data.
What Google data is accessed
Manifold reaches Google in two ways.
- A Google service account. This is a separate robot identity belonging to the Manny Lab Cloud project. It can open only the spreadsheets I have shared with its address by hand, and nothing else in my account.
- Google sign-in (OAuth). I sign in with my own Google account and grant the permissions below. Manifold can then act on files that my account can reach, within those permissions.
| Permission | What it allows |
|---|---|
https://www.googleapis.com/auth/spreadsheets |
Read and edit Google Sheets. |
https://www.googleapis.com/auth/drive.readonly |
Find and read files in Google Drive. Requested only once Drive tools are switched on in Manifold. |
If a permission is ever added, this page is updated before it is requested. I can see exactly which permissions Google granted on Manifold's credential page.
What it is used for
Only to let my AI assistant read and edit my own Sheets and Drive files when I ask it to in a conversation. For example: reading a planning sheet, adding rows to a tracker, or finding a document.
When the assistant reads a file for me, the part it asked for is passed back into that conversation, which runs on the AI provider's service (currently Anthropic's Claude) under my own account. That is the purpose of the tool, it happens only at my request, and it goes nowhere else.
Google user data is not used for advertising, is not used to build profiles, and is not used to train or improve AI or machine-learning models, by me or by anyone else.
Manny Lab's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Where it is stored
Manifold runs on a server in my home, not on a cloud platform, and is reachable only through its own login.
- Credentials. The OAuth tokens and the service account key are stored in Manifold's database, encrypted with AES-256-GCM.
- File contents. Sheets and Drive files are read from Google when a tool runs and are not kept by Manifold afterwards.
- Activity log. Manifold keeps a log of each tool call: which tool, when, how long it took and whether it worked. It stores a one-way hash of the request, never the request itself or any file contents.
Sharing
Google user data is not sold, rented or shared with anyone. No advertising networks, no analytics, no data brokers. The only place it goes, as described above, is back to my own AI assistant conversation when I ask for it.
Retention and deletion
- OAuth tokens are kept until I disconnect the credential or revoke access.
- File contents are not retained.
- Activity log entries are deleted automatically after the number of days set in Manifold's settings.
- Deleting the Google credential in Manifold deletes its stored tokens straight away.
Revoking access
Access can be withdrawn at any time, from outside Manny Lab:
- Google sign-in: open myaccount.google.com/connections (Security, then Your connections to third-party apps and services), choose Manny Lab and remove its access. Manifold's tokens stop working immediately.
- Service account: stop sharing the spreadsheet with the service account's address in the sheet's Share dialogue.
This website
mannylab.cloud is a set of static pages. It sets no cookies, runs no scripts and has no analytics. It is served by Cloudflare, which processes visitors' IP addresses and request details to deliver and protect the site, under Cloudflare's privacy policy. I do not collect anything from it.
Changes and contact
Changes to this policy are made on this page, with the date at the top updated. Questions to hello@mannylab.cloud.