butterbook
Legal

Privacy policy

Effective 11 October 2026

The short version. Your bakery's records live in a Google Sheet in your own Google Drive. TulipShots, the studio that makes Butterbook, doesn't receive your orders, customers, recipes, prices or expenses. To run the beta we keep a short record of who uses Butterbook: your email, business name, and when and how you open the app. We never sell your data or use it for advertising.

Who we are

Butterbook is an app for home and small bakers, made by TulipShots, a small studio in Kota Kinabalu, Sabah, Malaysia. In this policy, "we" and "us" mean TulipShots, and "you" means the person using Butterbook. You can reach us at [email protected].

This policy covers the Butterbook app and this website, butterbook.tulipshots.com.

How Butterbook works

Butterbook is a Google Apps Script web app. When you open it, it runs under your own Google account, and everything you enter (orders, customers, recipes, ingredients, prices, expenses and settings) is saved in a Google Sheet that Butterbook creates in your Google Drive. That sheet belongs to you. You can open it in Google Sheets, download it, share it or delete it at any time, just like any other file in your Drive.

What Butterbook asks Google for

The first time you open Butterbook, Google asks you to allow these permissions. Butterbook asks for the smallest set it needs.

What Google shows youWhy Butterbook needs it
See your primary Google Account email address
userinfo.email
To know which bakery's sheet is yours and to check whether your Butterbook access is active.
See, edit, create and delete only the specific Google Drive files you use with this app
drive.file
To create your bakery's Google Sheet and a Butterbook folder in your Drive, keep backup copies of that sheet, convert a spreadsheet you choose to import, and read and write those files. Butterbook can't see or change any other file in your Drive.
Connect to an external service
script.external_request
To contact TulipShots' access service each time you open the app, so it can check your access and record the details listed below.

Information we receive

When you open Butterbook, the app sends the following to TulipShots' access service, which stores it in a private Google Sheet owned by TulipShots:

We also keep your access details: when you first used Butterbook, your plan, and any notes we add to help you (for example, that we helped you set up).

When someone opens Butterbook for the first time, we receive an email notification with their email address so we can welcome them and help with setup.

If something goes wrong in the app, Google's Apps Script service records an error report that we can see. These reports can include your email address and the error message, and Google keeps them for a limited time (normally 30 days).

If you email us or join the waitlist, we receive your email address and whatever you choose to write.

Information we don't receive

The one exception is if you ask us for help and choose to share your sheet with us. Then we can see it until you stop sharing it.

How we use information

We don't use your information for advertising, we don't sell it, and we don't use it to train AI models.

Google user data and Limited Use

Butterbook's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In particular, we use Google user data only to provide and improve the features of Butterbook described above. We don't transfer it to others except as needed to provide Butterbook, to comply with the law, or as part of a merger or sale of TulipShots with notice to you. We don't use it for advertising, and no person at TulipShots reads it unless you ask us to, it is needed for security or to comply with the law, or it has been combined so that no one can be identified.

Sharing

We don't share your information with anyone, except:

How long we keep it

We keep your access record for as long as you use Butterbook. If you stop using it or ask us to delete your details, we delete your record and app-open history within 30 days. Your bakery's sheet stays in your Drive until you delete it.

Your choices

Security

Your sheet is protected by your Google account. Our access records are kept in a private Google Sheet that only TulipShots can open, and the access service only accepts requests from Butterbook. No system is perfectly secure, so please keep your Google account protected with a strong password and 2-Step Verification.

Children

Butterbook is made for people running a baking business and isn't meant for children under 13. We don't knowingly collect information from them.

Where your information is kept

Butterbook runs on Google's servers, which may be outside Malaysia. We handle your personal data in line with Malaysia's Personal Data Protection Act 2010.

Changes to this policy

If we change this policy, we'll update the date at the top. If the change is important, we'll tell you in the app or by email before it takes effect.

Contact

TulipShots, Kota Kinabalu, Sabah, Malaysia
[email protected]