Google sign-in
Sign-in requests OpenID, email, and basic profile scopes. The app stores the verified email and account identity, plus the name and optional profile image returned by Google. It does not request Gmail, Drive, Contacts, or Calendar access.