Google OAuth Verification

Requested Google Scopes

• openid — authenticates the user with Google OpenID Connect.
• email — reads the email address used to create or access the account.
• profile — reads the display name and profile photo shown in the account.

The application does not request Google birthday, contacts, calendar, Drive, Gmail, or other sensitive Google API scopes for the standard login flow.

Data Use

Google OAuth data is used only for account authentication, account linking, profile display, and session continuity. Users can review, update, export, or delete their account data from their profile and through the privacy contact.

Birth date, birth time, and birth city are optional astrological profile fields collected inside Bola de Cristal after explicit in-app consent. They are not requested from Google OAuth scopes.

Optional Zelfy account federation, when enabled by the user, exchanges only opaque tokens, authorized scopes, and minimized derived signals. It does not share Google IDs, emails, raw location, raw birth data, free text, or sensitive health/financial records.