This policy describes how Cybush (https://cybush.uk), operated by Simon Bushell, handles information when you use the service.
What we collect
When you sign in with Google, we receive basic account information from Google that you authorize, typically:
- Email address
- Name
- Profile image URL (if provided)
- A stable Google account identifier
We also create a session cookie so you stay signed in, and we store account status (for example invited, pending, approved, or denied) and basic usage needed to run the service (such as last sign-in time).
How we use it
- Authenticate you and keep you signed in
- Create and manage your Cybush account
- Control access to private apps (admin approval / RBAC)
- Contact you about access decisions when email is configured
- Secure and operate the service
We do not sell your personal information. We do not use Google user data for advertising.
Suite apps (cyshop, cycal, cyfit, cyhub)
When an administrator grants you access, you may open product apps under *.cybush.uk, operated by the same party (Simon Bushell). Today those apps include:
- cyshop — shopping lists and meal planning
- cycal — food diary, goals, and nutrition
- cyfit — workouts and fitness logging
- cyhub — suite dashboard and catalog admin
Suite apps may store content you create while signed in, for example shopping lists, meal plans, food diary entries, water and weight logs, workouts, and preferences. That data is tied to your account (same Google identity handoff as the portal) and held on Cloudflare infrastructure. App access is controlled from this portal; product data lives in the suite database, not in Google.
We use this data only to provide the apps you are granted, to keep the service secure, and (where configured) to send transactional email about access. We do not sell suite content or use it for advertising.
Sign-in with Google
Authentication is provided by Google. Google’s handling of your data is described in the Google Privacy Policy. We only request the limited profile information needed to sign you in.
Storage and security
Data is stored using our hosting provider (Cloudflare) and related infrastructure. We use industry-standard protections such as HTTPS and HTTP-only session cookies. No method of transmission or storage is 100% secure.
Sharing
We share data only as needed to run the service (for example with our hosting provider), to comply with law, or to protect the service and its users. Site administrators can see account details required for access control.
Retention
We keep account, session, and suite app data while your account exists and as needed to operate and secure the service. You may request deletion of your account and associated suite data by emailing admin@cybush.uk.
Your choices
- Sign out of Cybush at any time
- Revoke app access in your Google Account permissions settings
- Request account deletion or a copy of your data by emailing admin@cybush.uk
Children
The service is not directed at children under 16, and we do not knowingly collect their data.
Changes
We may update this policy from time to time. The “Last updated” date at the top will change when we do. Continued use after changes means you accept the updated policy.
Contact
Questions about privacy: admin@cybush.uk.