Privacy Policy

Introduction

Squaded ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and website (collectively, the "Service").

By using Squaded, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this privacy policy, please do not use the Service.

Information We Collect

Personal Information

When you create an account, we collect:

• Full name
• Email address
• Username
• Profile photo (optional)
• Authentication credentials (encrypted)

Authentication Data

When you sign in using third-party services:

• Google account information (if using Google Sign-In)
• Apple ID information (if using Sign in with Apple)
• Firebase Authentication tokens

Squad and Match Data

• Squad names, colours, and member lists
• Match schedules, locations, and details
• Team formations and captain assignments
• Player availability and RSVP status
• Match results and statistics

Location Information

We collect location data only when you explicitly provide match venues. We use Google Places API to help you find and select match locations, but we do not track your real-time location.

Device Information

• Device type and operating system
• Push notification tokens (FCM)
• App version
• Unique device identifiers (for account security)

Subscription and Billing Information

When you purchase Squaded Pro, we receive subscription metadata from Apple, Google, and RevenueCat, including:

• Active plan type (monthly or annual) and product identifiers
• Subscription status, renewal date, and whether auto-renew is enabled
• Transaction identifiers and receipts used to validate purchases
• Store country or currency associated with your marketplace account

Payments are processed by Apple or Google, and we do not receive or store your full payment card details. RevenueCat manages in-app purchase entitlements on our behalf and provides aggregated reporting so we can deliver Pro features, troubleshoot billing issues, and prevent fraud.

Usage Information

• Features you use within the app
• Interaction with other users
• Error reports, crash diagnostics, and performance data

How We Use Your Information

We use the collected information to:

• Provide Core Services: Enable you to create squads, schedule matches, organize teams, and manage football activities
• Authentication: Verify your identity and maintain account security
• Communication: Send match reminders, squad invitations, and important service updates
• Personalization: Customize your experience based on your squads and preferences
• Analytics: Understand how users interact with Squaded to improve our service
• Support: Respond to your inquiries and provide customer service
• Manage Subscriptions: Validate purchase receipts, activate Squaded Pro benefits, and resolve billing or entitlement issues
• Legal Compliance: Comply with applicable laws and regulations

Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following situations:

With Squad Members

Your name, username, and availability status are visible to members of squads you join or create. Squad managers can see contact information for squad administration purposes.

Service Providers

We work with trusted third-party services:

• Firebase (Google) for authentication and push notifications
• DigitalOcean for hosting and data storage
• Google Places for location services
• MongoDB Atlas for database services
• RevenueCat for managing in-app purchase entitlements and subscription lifecycle
• Apple App Store and Google Play Store for processing payments and providing transaction information

Legal Requirements

We may disclose information if required by law, court order, or government request, or to protect our rights and safety or that of others.

Data Security

We implement appropriate technical and organisational measures to protect your personal information, including:

• Encryption of data in transit using HTTPS/TLS
• Secure authentication through Firebase Auth
• Regular security audits and updates
• Limited access to personal data on a need-to-know basis
• Secure password storage using industry-standard hashing

However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

Your Rights

Under the UK General Data Protection Regulation (UK GDPR), you have the following rights:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Request correction of inaccurate personal data
• Right to Erasure: Request deletion of your personal data
• Right to Restrict Processing: Request limitation of processing
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time

To exercise any of these rights, please contact us at squaded.mobileapp@gmail.com or use our account deletion form.

Data Retention

We retain your personal information only for as long as necessary to provide you with our Service and as described in this Privacy Policy. Subscription and billing records may be retained for up to six years to comply with accounting, tax, and fraud-prevention obligations. When you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal purposes.

Children's Privacy

Our Service is not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If you become aware that a child has provided us with personal information without parental consent, please contact us, and we will take steps to remove that information.

International Data Transfers

Your information may be transferred to and maintained on servers located outside of your country, including the European Union and the United States where our providers (such as Firebase, RevenueCat, and DigitalOcean) operate. We ensure that any international transfer of your personal data is done in accordance with applicable data protection laws and that appropriate safeguards, such as Standard Contractual Clauses, are in place.

Cookies and Tracking

Our mobile application does not use cookies. Our website uses essential cookies for authentication and minimal analytics cookies to understand usage patterns. You can control cookie preferences through your browser settings.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. For significant changes, we will provide a more prominent notice through the app or via email.

Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or our data practices, please contact us at:

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe we have not handled your personal data correctly. You can contact the ICO at ico.org.uk