Your notes are yours.

Who this policy covers

Squiddy Labs is responsible for SquidNote.

This policy explains how Squiddy Labs LLC collects, uses, shares, retains, and deletes information when you use SquidNote for iPhone or iPad. It also explains the choices available to you.

Information kept on your device

Your notebook is local by default.

Notes, formatted text, tasks, groups, folders, drawings, images, files, locations saved into notes, backlinks, preferences, and Daily Brief state are stored locally on your device. Squiddy Labs, Supabase, Apple, Google, Sentry, and Firebase do not receive the contents of your notebook through Squiddy Account.

When you grant access to Calendar, Reminders, Photos, location, Files, or notifications, SquidNote uses that access only for the feature you chose. Daily Brief analysis runs on device only after you enable it. SquidNote does not send the source note or permission data to Squiddy Labs.

If you export a .squidbackup file or share content, you choose where it goes. A cloud-storage, messaging, or sharing provider you select processes that copy under its own terms.

Optional Squiddy Account

Signing in creates a small universal Passport.

You can use SquidNote without an account. If you choose Continue with Apple or Continue with Google, we collect and store the information needed to run your Squiddy Account:

• your display name, biography, hobby category, and hobby;
• the email address confirmed by Apple or Google, including an Apple Hide My Email relay address;
• a Supabase account identifier and your linked sign-in methods;
• which SquidVerse apps you use and their first- and last-seen timestamps; and
• account preferences, memberships, achievements, entitlements, and verified-access records.

We use this information only to authenticate you, display and synchronize your Passport across participating SquidVerse apps, remember account preferences, and verify access. Your notes and other app content are not stored in Squiddy Account.

App reliability

Technical diagnostics help us fix crashes.

SquidNote uses Sentry and Google Firebase Crashlytics for crash and error reporting. These services may automatically receive crash stack traces, error details, timestamps, app version and build, operating-system version, device model and technical state, installation or crash identifiers, and network information such as an IP address.

We use diagnostics only to understand reliability, reproduce faults, and improve SquidNote. We do not intentionally attach note text, attachments, Passport profile fields, advertising identifiers, or a Squiddy Account ID to diagnostic reports. We do not use diagnostics for advertising or cross-app tracking.

Processors and sharing

We use a short, named list of service providers.

• Supabase hosts Squiddy Account authentication, database, and account-deletion functions. See the Supabase Privacy Policy.
• Sentry processes application error and performance diagnostics. See the Sentry Privacy Policy.
• Google Firebase Crashlytics processes crash reports and related technical identifiers. See Privacy and Security in Firebase.
• Apple or Google processes the sign-in flow only when you choose that provider. Apple also processes App Store transactions and system permissions under its own terms.

These providers act only for the purposes described above and are required by their agreements with us to protect information consistently with this policy and applicable law. We do not sell or rent personal information. We may disclose information when required by law, or when necessary to protect users, the service, or our legal rights.

Consent and choices

You choose the features that disclose personal data.

• Guest mode works without an account or account-data transfer.
• Choosing Apple or Google sign-in starts the disclosed Squiddy Account collection; you can sign out, unlink a non-final provider, or delete the account later.
• System permission prompts control Calendar, Reminders, Photos, location, Files, and notifications. You can revoke them in iOS Settings.
• Daily Brief analysis is off until you grant consent, and its Settings screen lets you withdraw that consent.

We process limited reliability diagnostics to operate and secure SquidNote. Where applicable law requires consent for that processing, you may withdraw it or object at any time by contacting us. You can also request deletion of a report that can be associated with you. Withdrawing consent does not affect processing that occurred lawfully before withdrawal.

Retention and deletion

Different information has a clear lifetime.

• Local app content remains until you delete it, use Delete all data, or remove the app and its data. Exported backups remain wherever you saved them until you delete them there.
• Squiddy Account data remains while your account is active. In-app account deletion permanently removes the Passport, memberships, linked sign-in methods, preferences, achievements, access records, and Supabase Auth user. Local notes remain unless you separately choose to delete local data.
• Account-deletion events contain only the account UUID, a fixed event category, and a timestamp. Events are removed with a successful deletion; records left by an incomplete attempt are automatically removed after 30 days.
• Firebase Crashlytics reports are retained by Firebase for 90 days before removal from live and backup systems begins.
• Sentry diagnostic events are retained for the period configured for our Sentry service, never longer than 90 days, and then deleted. We may delete them sooner when they are no longer needed.

Access, correction, and deletion

You can act in the app or ask us.

You can edit Passport profile information in the account screen and delete your Squiddy Account from Settings → Squiddy Passport → Delete Squiddy Account. You can separately remove local notes and other app content at any time.

For access, correction, export, objection, consent withdrawal, or deletion requests, email support@Squiddy-Labs.com. We may need to verify your identity before completing a request. Depending on where you live, you may also have the right to appeal our response or complain to your local data-protection authority.

Children

SquidNote is not directed to young children.

We do not knowingly collect personal information from children under the minimum age required to consent in their country. If you believe a child provided account information without appropriate permission, contact us so we can delete it.

Changes

Material changes will be dated.

If this policy changes materially, we will publish the revised policy here, update the effective date, and provide an in-app notice when the change requires one.

Contact

Privacy questions are welcome.