App privacy

ItsDeducted App Privacy Policy

This app-specific policy explains how ItsDeducted accesses, uses, stores, shares, protects, and deletes Google Photos API data, Google account data, and app account information. It is intended for Google OAuth verification and for people using the ItsDeducted app.

Last updated August 2, 2026 App: https://app.itsdeducted.com Operator: KPI Management Consultants LLC
Google Photos access

Only app-created donation albums/photos, album IDs, media item IDs, connected email, and sync tokens.

Why it is used

Create donation albums, upload donation photos, rename albums, display synced photos, and include photos in PDF exports.

What we do not do

No access to pre-existing Google Photos, no sale/sharing, no ads, no data brokerage, no lending use, and no AI training.

1Scope of this app privacy policy

This ItsDeducted App Privacy Policy explains how ItsDeducted handles information in the ItsDeducted web and mobile app, including information received through Google OAuth, Google Sign-In, and the Google Photos APIs.

This page is specific to the ItsDeducted app available at https://app.itsdeducted.com. It supplements the broader ItsDeducted Privacy Policy. If this app-specific policy and the broader privacy policy conflict about Google user data or Google Photos API data, this app-specific policy controls for that data.

ItsDeducted is operated by KPI Management Consultants LLC. ItsDeducted helps people turn photos and lists of donated items into organized donation records with estimated fair market values.

2Google account data we collect

If you choose to sign in with Google or connect Google Photos, ItsDeducted may collect or receive the following Google account data from Google:

  • Your connected Google account email address, shown in the app for display only, such as “Connected as user@gmail.com.”
  • Your Google Account identifier, used to connect your sign-in or Google Photos connection to your ItsDeducted account.
  • Your email verification status, if provided by Google, used for account access and security.
  • Authentication tokens or related technical credentials needed to complete and maintain secure sign-in or Google Photos sync sessions.

ItsDeducted does not use Google Photos scopes to access broader Google profile data. ItsDeducted does not request access to Gmail, Google Drive, Calendar, Contacts, Google Photos content that was not created through this feature, payments, documents, or other Google account content.

3Google Photos API scopes ItsDeducted requests

If you choose to connect Google Photos in the app, ItsDeducted requests only the Google Photos scopes needed to sync donation photos that you already captured or uploaded in ItsDeducted:

  • https://www.googleapis.com/auth/photoslibrary.appendonly: used to create a dedicated Google Photos album for each donation and upload the user’s donation photos into that album.
  • https://www.googleapis.com/auth/photoslibrary.edit.appcreateddata: used to rename an album title later when the donation’s charity name or donation date is added or edited.
  • https://www.googleapis.com/auth/photoslibrary.readonly.appcreateddata: used to let the user view previously synced donation photos inside ItsDeducted and include them in PDF exports.
Important scope limit: These scopes only let ItsDeducted read or write Google Photos content that ItsDeducted itself created through this feature. ItsDeducted never has access to your pre-existing Google Photos library, other albums, or any photo or video that was not uploaded through this feature.

4Google Photos data created or accessed

When you use the Google Photos integration, ItsDeducted may create or access only the following Google Photos data:

  • A new album for each donation. The album title may include the charity name and donation date, or a “Donation Draft” placeholder until those details are filled in.
  • Donation photos you already took or uploaded in ItsDeducted, uploaded once to Google Photos as a resized and compressed version, not the original full-resolution file.
  • The Google-assigned album ID and media item ID for each synced photo, so ItsDeducted can reference the synced album or photo later.
  • Temporary image URLs used to display synced photos back in the app or include them in PDF export.

Temporary image URLs expire after about 60 minutes and are not cached by ItsDeducted. The app fetches them fresh from Google when synced photos need to be displayed.

5Google Photos data ItsDeducted does not access

ItsDeducted does not access, read, scan, import, or copy:

  • Any pre-existing Google Photos photo, video, or album that was not created by ItsDeducted.
  • Any Google Photos content outside the dedicated donation albums created by this feature.
  • Any original full-resolution image file from your device or Google Photos account through the Google Photos API.
  • Any broader Google account, profile, Gmail, Drive, Calendar, Contacts, payment, or document content beyond the connected Google account email used for display.

6How we use Google Photos and Google account data

ItsDeducted uses Google user data only to provide or improve user-facing app features visible in the app. Specifically, we use Google Photos and Google account data to:

  • Let you connect Google Photos from Account → Integrations.
  • Create a dedicated Google Photos album for each donation you sync.
  • Upload the donation photos you already captured or uploaded in ItsDeducted to that dedicated album.
  • Rename the album when you add or edit the donation’s charity name or donation date.
  • Display your previously synced donation photos back inside the ItsDeducted app.
  • Include synced donation photos in your PDF export when you choose to generate one.
  • Show the connected Google account email in the app for account clarity.
  • Maintain sync status, prevent duplicate syncs, troubleshoot sync errors, and keep the integration secure.

Secondary operational uses are limited to security, debugging, abuse prevention, and maintaining the reliability of the Google Photos integration. ItsDeducted does not use Google Photos API data for advertising, retargeting, interest-based ad personalization, credit-worthiness decisions, lending purposes, data brokerage, or selling information to information resellers.

7Other app information we collect

Separately from Google user data, ItsDeducted may collect information you provide directly in the app, including donation item names, descriptions, conditions, quantities, donation dates, charity names, photos, imported lists, export preferences, household or collaborator settings, support messages, and billing or subscription status handled by payment providers.

ItsDeducted may use its own image-analysis pipeline to estimate donated item fair market value from a photo the user captured or uploaded in ItsDeducted before and independent of any Google Photos API call. Google Photos scopes are used solely to store and retrieve the photo afterward. Data obtained through the Google Photos APIs is never used to train AI or machine learning models.

ItsDeducted does not intentionally collect Social Security numbers, tax identification numbers, financial account numbers, or the contents of your tax returns.

8Analytics, cookies, and session replay

We may use product analytics tools, including PostHog, and cookies, local storage, or similar technologies to understand how the app is used. These tools may collect information such as pages or screens viewed, features used, clicks or interactions, session activity, browser and device information, approximate location derived from IP address, performance signals, and error information.

We may also use session replay to help us understand how people navigate the app, identify bugs, and improve workflows. A replay may show app interactions and how the interface responds during a session. We use analytics and session replay only to maintain, troubleshoot, and improve the product; we do not use them for third-party advertising or to sell personal information.

We do not intentionally send donation photos, donation item details, tax records, payment card data, Google Photos content, OAuth tokens, or other sensitive user-entered content to our analytics tools. You can control cookies through your browser settings, though disabling them may affect parts of the app, including sign-in persistence.

9Sharing, transfer, selling, advertising, and AI use

ItsDeducted never sells, shares, or transfers Google Photos API data, synced photo data, album IDs, media item IDs, Google account email addresses, or OAuth tokens to any third party, advertiser, data broker, information reseller, credit agency, or lending provider.

  • This data is never used for advertising, retargeting, or interest-based ad personalization.
  • This data is never used to train AI or machine learning models.
  • No human at ItsDeducted manually views or reviews synced photos as part of normal operation. Automated systems only.
  • ItsDeducted does not disclose synced photos to service providers for independent use. Infrastructure systems process technical records only as needed to operate the feature.

We may disclose information only if required by valid legal process, necessary to protect security or prevent abuse, or explicitly directed by you through an app feature such as exporting your own records.

9Google Photos APIs User Data Policy and Limited Use

Limited Use commitment: The use of information received from Photos APIs will adhere to the Google User Data Policy, including the Limited Use requirements.

ItsDeducted’s use and transfer of information received from Google APIs also adheres to the Google API Services User Data Policy. Google Photos API data is used only to provide and improve user-facing ItsDeducted features that are visible in the app.

If ItsDeducted requests access to additional Google data in the future, we will update this policy and relevant in-app disclosures before using that data for any new purpose.

10Storage, security, and tokens

ItsDeducted does not store Google Photos image bytes in Supabase or in any ItsDeducted database. Google Photos is the only place the actual synced images live for this feature.

The only Google Photos integration data ItsDeducted stores is the Google album ID, media item ID, sync status, and an encrypted OAuth refresh token. The refresh token is kept in Supabase’s encrypted secrets vault, never in a plain database column, and never logged.

  • We use HTTPS encryption in transit.
  • We use access controls intended to limit access to authorized systems and personnel with a business need.
  • We use secure infrastructure, authentication controls, logging, monitoring, and operational security practices.
  • Temporary image URLs used to display synced photos expire after about 60 minutes and are fetched fresh from Google when needed.

No method of transmission or storage is completely secure. If you believe your account has been compromised, contact us promptly at support@itsdeducted.com or through our contact page.

11Retention, disconnecting, and deletion

You can disconnect Google Photos from within the ItsDeducted app by going to Account → Integrations → Disconnect. Disconnecting revokes the refresh token at Google and permanently deletes the token from ItsDeducted’s storage.

After disconnecting, ItsDeducted stops future Google Photos syncing. Already-created albums and photos remain in your own Google Photos account because they belong to you, not to ItsDeducted. Disconnecting does not delete those Google Photos albums or photos.

ItsDeducted does not bulk-delete or automatically delete a user’s Google Photos content at any time. If you want to remove already-created albums or photos, manage or delete them directly in Google Photos.

Technical records such as album IDs, media item IDs, and sync status may be retained while your ItsDeducted account or donation record remains active so the app can show sync status and avoid duplicate syncing. You may request deletion of your ItsDeducted account or personal information by contacting support@itsdeducted.com or using https://itsdeducted.com/contact/, subject to legal, security, fraud-prevention, accounting, backup, dispute-resolution, or compliance exceptions.

12Your choices and Google account controls

Google Photos connection is optional. You can use ItsDeducted without connecting Google Photos, although Google Photos sync features will not be available.

You can manage the integration inside the app at Account → Integrations. You can also manage or revoke the app’s Google access from your Google Account permissions page.

If you revoke Google access, future Google Photos syncing stops. Revoking access does not automatically delete app data already stored in your ItsDeducted account or albums/photos already created in your Google Photos account.

13Children's privacy

The ItsDeducted app is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If we learn that a child under 13 has provided personal information, we will take reasonable steps to delete it.

If you believe a child has provided information to us, contact us at support@itsdeducted.com.

14Changes to this app privacy policy

We may update this app-specific policy from time to time. When we do, we will revise the last updated date on this page. If we materially change how ItsDeducted accesses, uses, stores, or shares Google user data or Google Photos API data, we will provide appropriate notice and, where required, obtain consent before using that data in the new way.

15Contact us

If you have questions about this app privacy policy, Google Photos API data, Google user data, or privacy requests, contact us:

This app-specific policy is designed to describe ItsDeducted’s Google OAuth and app data practices in plain English. It is not legal advice.