Privacy Policy
Last updated: September 5, 2026
Information we process
When you sign in with Google, 77Fox receives a stable account identifier, email address, display name, and profile image to create your account, identify devices, and isolate user data. Google Drive sync data stays in your own appDataFolder and is encrypted before upload with a data key managed through your Google authorization.
Verification codes and mail connections
iPhone message bodies and email subjects or bodies are parsed briefly in restricted server memory and are not written to disk, databases, or logs. Only verification candidates, redacted sources, timestamps, and consumption state are retained, normally for no more than five minutes. Mail app passwords or IMAP authorization codes are stored with AES-256-GCM encryption.
Local and cloud data
Each Google account uses an isolated profile directory and sync key. 77Fox servers store only account, device, entitlement, short-lived verification events, and encrypted mail connection settings. Regular data such as prompts, finance, and tasks is not uploaded to 77Fox servers.
Website analytics and download records
The public website uses our own first-party analytics: when you open a page, click a link or leave a page, your browser sends the page path, referring page, browser language and screen size to 77-fox.com, and the server also records your IP address, country/region, browser identifier and time. We use this to understand traffic, popular pages and referral sources and to prevent abuse. No cookies are used; only a random visitor identifier and a session identifier are kept in your browser's local storage (the session identifier expires when the tab is closed, and no persistent visitor identifier is stored when your browser sends the Global Privacy Control signal). The analytics never read business data in the 77Fox console, sync content or Google Drive files. When you download the installer from the website, we likewise record your IP address, country/region, browser identifier, referring page and time. Visit records are deleted after 365 days; download records are kept long-term.
Deletion and withdrawal
You can permanently delete your cloud account from Settings → Account. Deletion revokes sessions and devices and clears verification queues and encrypted mail settings. Local data and data in your Google Drive remain under your control and can be removed separately.
Security and contact
We use short-lived access tokens, refresh-token rotation, least privilege, isolated server permissions, and encrypted storage. Privacy questions can be sent to [email protected].