This notice describes the current supervised evaluation of Refuge Recovery Operator. It does not describe all processing by the separate counseling app or the ministry website.
Responsible contact
Publisher: Rev. Jay Werman, P.O. Box 3280, Worcester, MA 01613, United States. Pilot operating church: The Refuge Christian Center, 70 James Street, Suite 157A, Worcester, MA 01603. Contact: Refugechristiancenter1@gmail.com. Please do not email passwords, recovery keys, or counseling records.
Google information accessed and purpose
The utility requests only Google Drive’s drive.file permission. This permits working with particular files created by or explicitly made available to the app; it does not grant access to every Drive file or to Gmail. Although the permission allows editing and deletion of those files, the current rehearsal uploads a generated encrypted file and downloads that file by its saved identifier. It does not automatically delete Drive files.
Google authorization tokens are used to perform these requested Drive operations. The tool stores authorization in this Mac’s Keychain with synchronization disabled. It stores the Drive file identifier, file fingerprint, operation receipts and encrypted test artifacts in restricted local files. Recovery encryption keys are stored separately in restricted local files and are not included in the Drive upload.
Sharing and use
Encrypted fictional file contents and necessary file metadata are sent to Google Drive. Authorization requests and tokens are sent to Google’s authorization service. Google processes those requests under its own terms and privacy practices. The current recovery code does not send recovery contents to a publisher server, advertising service, or AI service. It does not sell Google user data or use it for advertising. Google-derived information is used only to provide the requested recovery functions, consistent with Google’s Limited Use requirements.
Retention and disconnection
Test files and local recovery materials remain until the operator removes them; there is no automatic retention schedule. Disconnecting access does not erase uploaded files. You can revoke the connection in your Google Account’s third-party connections settings and separately remove retained files from Drive. Local authorization and recovery materials require separate removal from this Mac. Contact support for assistance before removing a recovery key: losing the only copy can make an encrypted file unrecoverable. Google’s trash, backups and retention are governed by Google’s service.
Limits and changes
Current cloud tests contain generated fictional information, not congregation records. Encryption does not eliminate all risks, and this evaluation is not represented as HIPAA compliant. Any future production backup use requires updated disclosures describing the actual data, retention, operators and services before that use begins.
© 2026 Rev. Jay Werman. All rights reserved.