Privacy & Data Access

How Today OS connects to Google Drive and what it can access.

What TodayOS can see

Only files inside folders that have been explicitly linked to a project in Settings.
Those folders must live under our Client Projects, BD, or Photo Library folders — it won’t accept folders from anywhere else in Drive.

What TodayOS cannot see

Your personal files, HR documents, finance spreadsheets, or anything outside of linked project folders.
Even though Google shows a broad permission prompt when you sign in, the app enforces strict boundaries in code.

Safeguards

1. Folder restriction

When someone links a Drive folder to a project, the system checks that it’s actually inside our Client Projects, BD, or Photo Library folder trees. If it’s not, it’s rejected.

2. Access logging

Every time the app reads from Drive — fetching files, scanning folders, downloading content — it’s logged with who did it, which project, and when. This creates a full audit trail.

3. No browsing

The app doesn’t browse or search your whole Drive. It only reads from the specific folders attached to each project.

4. Thumbnail protection

Even image previews are restricted to files the app already knows about from project folders.

What you’ll notice

You’ll be asked to sign in again (one time) because we updated the Google permissions.
When editing a project, you can now use a Google Drive folder picker instead of pasting URLs.

Usage analytics

TodayOS records anonymised usage analytics (page views and high-level feature events, tied to your @today.design account) via PostHog, hosted in the EU. We use this to understand which features are useful and which aren’t. Project content, client names, and file contents are never sent.

Only @today.design accounts can access Today OS. Questions? Reach out to the Today OS team.