A privacy policy doesn't protect anything. (Any 11-year old could put up a privacy policy and then violate it at will.)

And using Google to sign-in (especially to an AppEngine app) pretty much only gives your email address.