SQUADONE

Privacy Policy

Last updated: [DATE]

Draft notice: This is a starting draft, not a finished legal document. Have a lawyer review and customize it (especially the bracketed placeholders, and compliance with laws like GDPR/CCPA if you'll have users in the EU/UK/California) before publishing.

What we collect

Account info: the email address and password you sign up with (passwords are hashed by our authentication provider, Supabase — we never see or store your plain-text password).
Content you enter: calendar events, Focus/task items, lists, meal plans, family member names/colors, Squad star counts, and photos you upload.
Payment info: handled entirely by Stripe, our payment processor. We receive your subscription status (trial/active/canceled) and never see or store your full card number.
Basic technical data: standard web server logs (IP address, browser type) collected automatically by our hosting provider (Netlify) and database provider (Supabase).

How we use it

To operate the Service: storing and syncing your data across your devices, authenticating you, processing subscription payments, and communicating with you about your account (e.g., billing receipts, password resets).

We do not sell your data. We do not use your calendar/photo content for advertising or share it with third parties except the service providers necessary to run the app (see below).

Third parties involved

Supabase (database, authentication, file storage) — stores your account and app data.
Stripe (payments) — processes subscription charges.
Netlify (hosting) — serves the app's files.
Google (optional) — if you connect Google Calendar sync, Google processes that connection under its own privacy policy; we only request the minimum calendar access needed.

Data isolation

Your data is private to your account. Our database enforces this at the database level (not just in the app's interface), so other accounts cannot read or write your data.

Data retention and deletion

You can export your data anytime (Settings → Export Backup). To delete your account and all associated data, contact [support email address] — [state your actual deletion timeline, e.g. "we will delete your account and data within 30 days of request"].

Children's privacy

This Service is not directed at children under 13, and we do not knowingly collect personal information directly from children under 13. Account holders are required to be adults; any family member information entered is provided and controlled by the adult account holder.

Changes to this policy

We may update this policy from time to time; material changes will be communicated via email or in-app notice.

Contact

Questions about this policy: [support email address].