Polygon Labs LLC (“Polygon Labs,” “we,” “us,” or “our”), a Florida limited liability company, operates the Stewardit mobile application (the “App”). This Privacy Policy explains what information the App collects, how it is used, how it is stored, and the choices available to you. By downloading, accessing, or using Stewardit, you agree to the practices described below.
01 Overview of Our Approach
Stewardit is designed around a “your data stays with you” architecture. The App does not use a Polygon Labs-managed account system, and it does not transmit your budgeting information to servers operated by Polygon Labs. Instead, the App stores your information in two places only: locally on your own device, and inside your own Google Drive account, in files the App creates there. We intentionally minimize the data we touch in order to reduce risk to your information.
02 No Separate Polygon Labs Account
Stewardit does not require you to create a username, password, or account profile with Polygon Labs. Your identity within the App is established through two things only:
Google Sign-In, used to connect the App to your own Google Drive account, and
Your Apple ID or Google Play account, used to install the App and manage your subscription through the applicable app store.
Polygon Labs does not operate an independent account database, does not assign you a Polygon Labs user ID, and does not store account credentials of any kind.
03 Information We Collect
3.1 Information Stored On Your Device and In Your Google Drive (Not on Our Servers)
The following information is stored only locally on your device and inside your own Google Drive — never on a server operated by Polygon Labs:
Email address. Used solely to identify which Google Drive account is linked to the App. We do not use your email address for marketing and do not sell it.
App settings and preferences. Configuration choices you make within the App (e.g., display preferences, notification settings).
Budget categories and amounts. The names of budget categories you create and their associated budgeted amounts.
This information is written directly between your device and your Google Drive account, in files the App creates. Polygon Labs does not operate a backend database that stores copies of this information, and we do not have routine access to it.
We do not store your name, physical address, phone number, financial account numbers, bank or card details, transaction-level data, or any other personal information beyond what is listed above.
3.2 Authentication Data
To sign you into your Google Drive account, the App uses Firebase Authentication (a Google service) as a secure intermediary. When you sign in:
Your Google sign-in credentials are transmitted directly between your device, Firebase, and Google’s authentication servers.
Polygon Labs does not see, receive, or store your Google password.
Refresh tokens used to keep you signed in are stored securely on your device only — Firebase does not retain a copy of your refresh token on our servers. Short-lived access tokens are used solely to authorize the specific Google Drive API requests described in this policy.
3.3 Subscription and Payment Information
Stewardit offers subscriptions through the Apple App Store and Google Play Store. When you subscribe:
All payment information (credit card numbers, billing details, etc.) is collected and processed entirely by Apple or Google, in accordance with their respective privacy policies and terms.
Polygon Labs never receives, transmits, or stores your payment details.
The App communicates with the Apple App Store or Google Play Store solely to verify your purchase receipt, confirming that a valid, active subscription exists. This verification exchange may include a device- or transaction-level receipt identifier, but does not include your payment card information.
3.4 Information We Do Not Collect
Passwords or Google account credentials
Payment card or bank account information
Precise device location
Contacts, photos, or other device data unrelated to the App’s function
Browsing history outside the App
04 Google Drive Integration and Scope of Access
Stewardit integrates with Google Drive using the drive.file OAuth scope. This is a limited, non-sensitive scope that means:
The App can only access files and folders that the App itself creates within your Drive — including the settings and budget category files described in Section 3.1.
The App cannot view, edit, or access any other files in your Google Drive, including pre-existing documents, spreadsheets, or folders you did not create through Stewardit.
You may revoke this access at any time through your Google Account permissions page. Revoking access will prevent the App from creating or updating files in your Drive going forward.
Stewardit’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements, where applicable.
05 How We Use Information
We use the limited information described above only to:
Authenticate you and connect the App to the correct Google Drive account
Create, locate, and update the settings, budget category, and budgeting files the App generates in your Drive
Maintain your in-app settings locally on your device
Verify active subscription status with the applicable app store
Provide customer support, if you contact us
Comply with legal obligations
We do not use your information for advertising, do not build behavioral profiles, and do not sell or rent your information to third parties.
06 How Information Is Shared
We do not sell your personal information. We share information only in the following limited circumstances:
Google. To authenticate you (via Firebase Authentication) and to create/access files in your Drive under the drive.file scope.
Apple App Store / Google Play Store. To verify subscription purchase and status.
Legal requirements. If required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of Polygon Labs, our users, or others.
Business transfers. If Polygon Labs is involved in a merger, acquisition, or sale of assets, this Privacy Policy would continue to apply to any successor entity. Because Polygon Labs does not hold a server-side copy of your personal data, a business transfer would not include a transfer of your email, settings, or budget data from us, as we do not possess it.
07 Data Storage, Security, and Retention
No Polygon Labs server-side storage. Unlike many apps, Stewardit does not operate a backend account database. All persistent data described in Section 3.1 — your email address, settings, and budget categories — is stored locally on your device and within your own Google Drive, never on infrastructure operated by Polygon Labs.
Transit security. All communications between the App, Firebase, and Google occur over encrypted (HTTPS/TLS) connections.
Retention. Because Polygon Labs does not store this data on servers we operate, traditional server-side data retention does not apply to it. Locally stored data persists on your device until you delete the App or clear its data. Data stored in your Google Drive persists until you delete it yourself or revoke the App’s access.
08 Your Rights and Choices
Because Stewardit stores your information only on your own device and in your own Google Drive, you retain direct, practical control over it at all times. You may:
Access or review your information directly within the App or your Google Drive
Correct your settings or budget categories directly within the App
Delete your information by clearing App data, uninstalling the App, or deleting the relevant files from your Google Drive
If you have questions about exercising these rights, contact us using the information in Section 13. Residents of California, the EU/EEA, UK, and other jurisdictions with applicable privacy laws (e.g., CCPA/CPRA, GDPR) may have additional specific rights under those laws.
Note for counsel
Please confirm which specific statutory disclosures apply based on where users are located — this affects whether a formal CCPA notice, GDPR legal-basis disclosures, or a “Do Not Sell or Share” mechanism is required, even where Polygon Labs holds no server-side copy of personal data.
09 Removing Your Data
Stewardit does not use a Polygon Labs-managed account, so there is no centralized account for us to delete on your behalf. To remove your data:
Uninstalling the App removes the email address, settings, and budget category data stored locally on your device.
Deleting the files and folders the App created in your Google Drive removes that data from your Drive.
Revoking the App’s access via your Google Account permissions page immediately stops the App’s ability to read or write to your Drive.
Because Polygon Labs does not retain a copy of this information on servers we operate, no further deletion action is required on our end.
10 Children’s Privacy
Stewardit is not directed at, and is not intended for use by, children under the age of 13 (or the applicable age of consent in your jurisdiction). We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected such information, we will take steps to delete it.
11 International Users
If you access the App from outside the United States, authentication traffic may be processed in the United States or other countries where our service providers (such as Google/Firebase) operate. Because Polygon Labs does not store your personal data on its own servers, the primary location of your data is your own device and your own Google Drive account, subject to Google’s data handling practices.
Note for counsel
Please confirm whether a cross-border transfer mechanism, such as Standard Contractual Clauses, is needed for the authentication-proxy traffic described in Section 3.2, depending on the user base.
12 Changes to This Privacy Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the App or by other reasonable means prior to the change taking effect. The “Last Updated” date at the top of this policy reflects the most recent revision.
13 Contact Us
If you have questions about this Privacy Policy or wish to exercise your privacy rights, contact us at: