Privacy
Last updated May 22, 2026
Squad is a small app for friend groups to coordinate plans. We collect the minimum needed to run that, store it in one Postgres database, and delete it on request. No advertising, no analytics broker, no resale.
What we collect
- From Google (via Clerk): your display name, email, and avatar URL.
- From you: plans, votes, comments, time and venue suggestions, optional circle home location, push notification preference.
- Generated automatically: per-device push subscription tokens (when you opt in), a server-side log of place-search calls used to build the Suggest drawer, and short-lived rate-limit counters keyed to your user id.
- Not collected: precise location (only used client-side and only if you grant the browser prompt), advertising identifiers, browsing outside Squad, payment info.
Who processes it
Squad runs on a small set of vendors. None of them get the data to use for their own purposes:
- Clerk — sign-in and session management. Holds your Google email/avatar copy.
- Supabase (Postgres + Realtime) — the only database. Plans, votes, comments, push tokens live here.
- Resend — transactional emails (plan confirmation, cancellation, reminders).
- Google Places — venue autocomplete suggestions (your typed query is sent to Google; results are cached server-side so the same query doesn't leave us twice).
- Vercel — hosting + privacy-respecting Web Analytics (page view counts only, no fingerprinting).
How long we keep it
- Account, plans, votes, comments: until you delete your account.
- Push subscription tokens: until you turn pushes off, your browser revokes the subscription, or you delete the account.
- Suggest-drawer logs: 180 days, auto-purged daily.
- Rate-limit counters: 24 hours.
- Email logs in Resend: per Resend's retention (typically 30 days).
Your rights
You can delete your account at any time — getsquad.in/delete-account. Deletion is immediate and cascades: votes, comments, memberships, push subscriptions, in-app notification history, and your name/email/avatar all go. Plans you created stay with your name removed so the rest of the squad doesn't lose context.
Under GDPR (EU/UK) and CCPA (California) you also have rights to access, correct, and export your data, and to opt out of any sale of personal information. Squad does not sell personal information. For access, correction, or export requests, email us — turnaround is 30 days.
Children
Squad is for people 13 and older. We don't knowingly collect data from anyone younger; if you believe a child has created an account, email us and we'll delete it. See our child safety standards for our zero-tolerance policy on CSAE and reporting channels.
Contact
Email shivamjr7@gmail.com with any privacy questions or requests.