Alma Reporting Privacy Notice
Effective date: 1 October 2026.
This notice describes Alma Reporting, an internal reporting tool operated for Alma Kitchens. It covers the tool’s access to Google Analytics data, not the privacy practices of the entire Alma Kitchens website or showroom business.
Purpose of the app
Alma Reporting helps the owner understand campaign performance and website engagement. It retrieves reports from Google’s official Analytics API, saves dated reports on the owner’s computer, and supports marketing analysis. It does not establish whether a button click resulted in a conversation, showroom visit or sale.
Google data accessed
The app requests the Google Analytics read-only permission. Google describes this as permission to see and download Google Analytics data. This permission can cover Analytics resources available to the authorizing account; it is not restricted by Google to one property or campaign.
The current collector restricts its report requests to Alma Kitchens’ selected Analytics property and the two approved Oman campaigns. Reports include dates, campaign identifiers, event names, event counts, user and session counts, engagement measures, and showroom identifiers attached to WhatsApp and Directions button events. It also reads available reporting dimensions and metrics to identify the showroom field.
The collector does not request visitor names, email addresses, telephone numbers, individual visitor identifiers or message contents. Google handles account sign-in; the app does not ask for or store the account password. The app stores an authorization token so it can retrieve reports again without repeated sign-in while permission remains valid.
How data is used and shared
Reports are used to provide internal performance reporting, diagnose measurement issues and support marketing recommendations. The reporting connection cannot edit Analytics or Google Ads settings and does not access Gmail or WhatsApp conversations. Google Ads API access is not part of the current connection.
The collector communicates with Google for authorization and report retrieval. It does not send reports to a separate analytics vendor. However, selected reports and summaries are provided to the owner’s OpenAI assistant for analysis. Those interactions are processed under the applicable OpenAI service terms and account settings; this notice does not promise that all processing stays on the computer or that AI-provider retention is disabled.
Alma Reporting does not sell Google-derived data, distribute it to data brokers, or use it to create retargeting audiences. Any new integration or materially different data use requires an updated disclosure and appropriate authorization before implementation.
Storage and security
Report files are stored locally on the owner’s Windows computer. Google authorization and API requests use HTTPS. The saved refresh token is encrypted using Windows protection tied to the signed-in Windows user. Downloaded OAuth client configuration and report files are not encrypted by the collector itself; their protection also depends on the computer’s account permissions, device security and any backup or sync services configured by the owner.
There is no automatic report deletion in the current collector. Local reports are retained until the owner deletes them or requests deletion. Revoking Google access stops future authorized retrieval but does not delete reports already downloaded or copies already shared with the assistant. Those copies must be managed separately in the relevant service.
Your controls and contact
The authorizing owner can remove Alma Reporting’s access through the Google Account connections page at https://myaccount.google.com/connections. The owner can also stop local collection and request deletion of local reports and saved authorization material.
For questions or deletion requests, contact the app operator at info@almakitchens.com.
Changes to this notice
This notice will be updated if the app’s data access, purpose, storage or sharing changes. Any expansion of Google permissions requires a separate authorization request.