Privacy Policy
Last updated: July 6, 20261. Who We Are
squeevio.com is a suite of mobile applications and a web platform operated by Linis IT, Polki 1/30, 02-826 Warszawa, Poland. This policy covers all products under the squeevio.com brand: the main squeevio app, Breath (breathing & meditation), Orbio (contact group manager), and Vincio (habit tracker). Contact: support@squeevio.com · privacy@squeevio.com.
2. What Data We Collect
- Account data: Email address, display name — provided via Google, Facebook, or Microsoft OAuth, or entered directly during registration.
- Device data: Enrollment ID, device model, app version — for policy delivery and support.
- Content filtering preferences: Blocked categories, blacklisted domains — stored server-side to sync across sessions.
- Community chat messages: Text only, stored with an anonymous SHA-256 hash of your user ID. Your real name is never stored in messages.
- Mood & wellbeing logs: Mood check-ins and HALT scores you voluntarily record. Stored only for your account.
- Orbio — Contacts (with permission): When you grant READ_CONTACTS / WRITE_CONTACTS / READ_CALL_LOG / CALL_PHONE permissions, Orbio reads your device contacts and call history solely to display and organize them inside the app. Contact data is never uploaded to our servers — it remains on your device only.
- Breath / Vincio: Breath and Vincio do not collect any personal data beyond optional account sign-in (email and name via OAuth). Breathing session counts and habit completion records are stored locally on your device or, if you sign in, synced to your account on our servers.
- Newsletter email: If you tick the newsletter consent checkbox during registration, or submit your email through the newsletter signup form on squeevio.com, we collect your email address and add it to our Polish- or English-language mailing list (based on your selected site language) via our email provider, Sender.net. This is entirely optional and separate from your account — see Section 6 for the processor and Section 8 for how to unsubscribe.
3. Google User Data — Access, Use, Storage & Sharing
This section specifically documents our use of data received via Google OAuth, in compliance with the Google API Services User Data Policy.
- Data Accessed: When you sign in with Google, we request only your email address and public profile name via the openid, email, and profile OAuth scopes. We do not request access to Gmail, Google Drive, Calendar, Contacts, or any other Google services.
- Data Usage: Your email is used solely to create and identify your squeevio account, and to send account-related emails (password reset, important service updates). Your name is displayed in the app interface. No Google data is used for advertising, profiling, or sold to third parties.
- Data Sharing: Your email and name received from Google are not shared with any third party except our infrastructure provider (Microsoft Azure, EU region) which hosts the database. No Google user data is shared with advertisers, analytics providers, or data brokers.
- Data Storage & Protection: Email and name are stored in a PostgreSQL database hosted on Microsoft Azure (Poland Central region, EU). Data is encrypted at rest (AES-256) and in transit (TLS 1.3). Access is restricted to authenticated backend services only.
- Data Retention & Deletion: Google-sourced data (email, name) is retained for as long as your account is active. You can request full account and data deletion at any time by emailing privacy@squeevio.com. We process deletion requests within 30 days.
Our use of Google user data complies with the Google API Services User Data Policy, including the Limited Use requirements.
4. What We Do NOT Collect
- Browsing history — DNS queries are evaluated locally on your device; domain names are never sent to our servers.
- Voice or call recordings from encrypted peer-to-peer calls.
- Location data.
- Advertising identifiers.
- Any Google service data beyond email and name (no Gmail, Drive, Calendar, Contacts).
5. How We Protect Your Data
- All communication uses HTTPS / TLS 1.3.
- Session tokens stored in Android EncryptedSharedPreferences (AES-256-GCM).
- Content filtering policy is RSA-2048-signed and verified on-device before application.
- Chat messages use SHA-256 hashed user IDs — no personally identifiable information in message records.
- Database access restricted to backend services via credentials stored in Azure Key Vault.
6. Third-Party Services
- Microsoft Azure: Backend and frontend hosting, PostgreSQL database (Poland Central, EU).
- Google Firebase: Push notifications (FCM) for call and unlock alerts.
- Stripe, PayPal, Paddle, Tpay: Payment processing for donations and subscriptions. We do not store card data.
- Google OAuth, Microsoft OAuth, Facebook OAuth: Social sign-in. We receive email and name only. See Section 3 for full details on Google data.
- Sender.net: Newsletter delivery. If you opt in to the newsletter, your email address is stored on Sender.net's servers, used only to send you squeevio product updates, and never used for advertising or shared with other third parties. You can unsubscribe at any time via the link in every newsletter email or by emailing privacy@squeevio.com.
- Google Analytics: With your consent (via the cookie banner on squeevio.com), we use Google Analytics 4 to understand website traffic — pages visited, general location (country/city level), device type. IP addresses are anonymized before storage. This does not run inside the mobile/desktop apps, only on the squeevio.com website, and never runs before you accept the cookie banner. You can decline or change your choice at any time by clearing your browser's site data for squeevio.com.
7. Data Retention
- Community chat messages: maximum 300, oldest deleted automatically as new ones arrive.
- Account data and filtering preferences: retained while account is active.
- Orbio contact data: never uploaded to servers, deleted from the app when you uninstall or revoke permissions.
- Deletion: upon account deletion request, all server-side personal data is removed within 30 days.
8. Account & Data Deletion
You can request deletion of your account and all associated personal data at any time. We process deletion requests within 30 days.
- By email: privacy@squeevio.com — include your registered email address and the subject line "Data deletion request".
- Via Google: Revoke squeevio app access at myaccount.google.com/permissions, then email us to remove your account.
- Orbio: Contact data lives on your device only — uninstalling the app removes it entirely. No server-side deletion needed.
9. Your Rights (GDPR / RODO)
Under GDPR, you have the right to: access your data, correct inaccuracies, request deletion (see Section 8), export your data in machine-readable format, and object to processing. Submit requests to privacy@squeevio.com.
10. Contact
Linis IT, Polki 1/30, 02-826 Warszawa, Poland
General & support: support@squeevio.com
Privacy & data requests: privacy@squeevio.com
See also: Terms of Service · Refund Policy · About squeevio