Recanova Backup Automation — Privacy Policy
Scope and operator
This policy describes the private Recanova Backup Automation utility operated by Menjaya Meditech Sdn Bhd. It does not replace the privacy notices, organization agreements or patient information notices for Recanova HealthOS itself. Contact: tech.recanova@gmail.com.
Information accessed and used
The utility processes completed local backup files, which may contain confidential customer, patient, health and organizational information. It encrypts their contents locally before uploading them to Google Drive. Unencrypted local backups remain on the operator's computer and require separate protection.
Through the Google Drive API, the utility accesses the approved folder's identifying and permission metadata and backup file metadata, uploads encrypted backup files, and downloads encrypted copies to verify integrity. File names, sizes, checksums, timestamps and operational status may be retained in local logs and receipts. Google also processes account and service metadata under its own policies.
OAuth credentials and authorization tokens are stored in access-restricted local configuration for authenticated and unattended Drive access. The recovery key is stored separately from cloud backup files. Neither credentials nor recovery keys are included in uploaded backups by this utility.
Permission and purpose
The currently requested Drive permission permits access to all files in the consenting account, including viewing, editing, creating and deleting files. The utility's configured folder restriction does not narrow that Google permission. Its implemented workflow is limited to private encrypted backup storage and integrity verification in the approved folder; it does not browse unrelated Drive content, automatically delete backups or publish sharing links.
Information is used to operate, verify and troubleshoot the backup workflow and support authorized recovery operations. Google user data is not used for advertising, sale, profiling or training AI models.
Recanova Backup Automation's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.
Storage, access and sharing
Encrypted copies are retained locally and in the designated private Google Drive folder. Google provides the cloud storage service. Encryption protects file contents; it does not conceal file names, file sizes, timestamps or all account and transfer metadata from Google.
Local configuration and recovery material are restricted to authorized computer administrators. The uploader checks that the destination is owner-only before uploading and stops if that check fails. These measures do not guarantee protection against a compromised computer, stolen account, later sharing changes or lost recovery keys.
The utility does not intentionally transfer Google user data to advertising services or data brokers. Authorized operators may access operational information to maintain the backup process. Separate authorized recovery work may involve decrypting backup contents and is subject to the applicable organizational controls.
Retention, deletion and revocation
The current workflow has no automatic deletion or fixed retention period. Local and cloud copies remain until an authorized operator removes them under an approved retention decision. This policy does not establish an automatic deletion schedule.
An authorized account holder can revoke the utility's Google access through their Google Account's third-party connections settings. Revocation prevents future authorized Drive operations but does not automatically erase existing local backups, cloud files or logs. Authorized operators must separately arrange deletion where appropriate. Retention and deletion of health or organizational records must respect applicable obligations and agreements.
For access, correction, deletion or privacy questions, contact tech.recanova@gmail.com without sending confidential records or secrets. Requests require verification of authority; this utility does not provide a public self-service patient rights portal.
Changes
Material changes in how Google data is accessed or used will require updated disclosures and any necessary renewed consent before the new use begins. Effective date: 26 October 2026.