Privacy Policy

Last updated: August 11, 2026

1. Who We Are

squeevio.com is a suite of mobile applications and a web platform operated by Linis IT, Polki 1/30, 02-826 Warszawa, Poland. This policy covers all products under the squeevio.com brand: the main squeevio app, Breath (breathing & meditation), Orbio (contact group manager), and Vincio (habit tracker). Contact: support@squeevio.com · privacy@squeevio.com.

2. What Data We Collect

  • Account data: Email address, display name — provided via Google, Facebook, or Microsoft OAuth, or entered directly during registration.
  • Device data: Enrollment ID, device model, app version — for policy delivery and support.
  • Content filtering preferences: Blocked categories, blacklisted domains — stored server-side to sync across sessions.
  • Community chat messages: Text only, stored with an anonymous SHA-256 hash of your user ID. Your real name is never stored in messages.
  • Mood & wellbeing logs: Mood check-ins and HALT scores you voluntarily record. Stored only for your account.
  • Orbio — Contacts (with permission): When you grant READ_CONTACTS / WRITE_CONTACTS / READ_CALL_LOG / CALL_PHONE permissions, Orbio reads your device contacts and call history solely to display and organize them inside the app. Contact data is never uploaded to our servers — it remains on your device only.
  • Breath / Vincio: Breath and Vincio do not collect any personal data beyond optional account sign-in (email and name via OAuth). Breathing session counts and habit completion records are stored locally on your device or, if you sign in, synced to your account on our servers.
  • Newsletter email: If you tick the newsletter consent checkbox during registration, or submit your email through the newsletter signup form on squeevio.com, we collect your email address and add it to our Polish- or English-language mailing list (based on your selected site language) via our email provider, Sender.net. This is entirely optional and separate from your account — see Section 6 for the processor and Section 8 for how to unsubscribe.
  • Contact widget messages: If you use the "Contact us" chat widget on squeevio.com, we collect your email address, the optional name you provide, and the text of your message. This is forwarded to our support team via Telegram and email (Microsoft 365 / Exchange Online) so we can reply — including any follow-up messages you send in the same conversation. See Section 6 for these processors and Section 8 for deletion.

3. Google User Data — Access, Use, Storage & Sharing

This section specifically documents our use of data received via Google OAuth, in compliance with the Google API Services User Data Policy.

  • Data Accessed: When you sign in with Google, we request only your email address and public profile name via the openid, email, and profile OAuth scopes. We do not request access to Gmail, Google Drive, Calendar, Contacts, or any other Google services.
  • Data Usage: Your email is used solely to create and identify your squeevio account, and to send account-related emails (password reset, important service updates). Your name is displayed in the app interface. No Google data is used for advertising, profiling, or sold to third parties.
  • Data Sharing: Your email and name received from Google are not shared with any third party except our infrastructure provider (Microsoft Azure, EU region) which hosts the database. No Google user data is shared with advertisers, analytics providers, or data brokers.
  • Data Storage & Protection: Email and name are stored in a PostgreSQL database hosted on Microsoft Azure (Poland Central region, EU). Data is encrypted at rest (AES-256) and in transit (TLS 1.3). Access is restricted to authenticated backend services only.
  • Data Retention & Deletion: Google-sourced data (email, name) is retained for as long as your account is active. You can request full account and data deletion at any time by emailing privacy@squeevio.com. We process deletion requests within 30 days.

Our use of Google user data complies with the Google API Services User Data Policy, including the Limited Use requirements.

4. What We Do NOT Collect

  • Browsing history — DNS queries are evaluated locally on your device; domain names are never sent to our servers.
  • Voice or call recordings from encrypted peer-to-peer calls.
  • Location data.
  • Advertising identifiers.
  • Any Google service data beyond email and name (no Gmail, Drive, Calendar, Contacts).

5. How We Protect Your Data

  • All communication uses HTTPS / TLS 1.3.
  • Session tokens stored in Android EncryptedSharedPreferences (AES-256-GCM).
  • Content filtering policy is RSA-2048-signed and verified on-device before application.
  • Chat messages use SHA-256 hashed user IDs — no personally identifiable information in message records.
  • Database access restricted to backend services via credentials stored in Azure Key Vault.

6. Third-Party Services

  • Microsoft Azure: Backend and frontend hosting, PostgreSQL database (Poland Central, EU).
  • Google Firebase: Push notifications (FCM) for call and unlock alerts, and Crashlytics crash reporting from the Android app (device model, OS version, stack traces — never browsing data).
  • Stripe, PayPal, Paddle, Tpay: Payment processing for donations and subscriptions. We do not store card data.
  • Google OAuth, Microsoft OAuth, Facebook OAuth: Social sign-in. We receive email and name only. See Section 3 for full details on Google data.
  • Sender.net: Newsletter delivery. If you opt in to the newsletter, your email address is stored on Sender.net's servers, used only to send you squeevio product updates, and never used for advertising or shared with other third parties. You can unsubscribe at any time via the link in every newsletter email or by emailing privacy@squeevio.com.
  • Telegram (Telegram FZ-LLC): If you use the "Contact us" widget on squeevio.com, your name, email, and message text are forwarded to a private Telegram chat used internally by our support team, so we can notify them and reply directly from Telegram. Telegram is based outside the EEA; only the message content you submit is sent to it, no other site data.
  • LiveKit Cloud / Jitsi (8x8): Voice-call infrastructure. Calls are anonymous (room names are unguessable hashes) and encrypted in transit, and we never record or store audio — but media passes through the provider's servers, so calls are not end-to-end encrypted.
  • Ko-fi: Donation processing. If you donate, Ko-fi shares your email, name and any message with us so we can acknowledge the donation.
  • GitHub: Bug and feature reports submitted from inside the app are filed as GitHub Issues, including the contact email you provide. Messages sent through the website contact widget are NOT sent to GitHub.
  • Microsoft 365 / Exchange Online: Contact widget and feedback-form messages are also emailed to our support inbox (support@squeevio.com) via Microsoft Graph / Exchange Online, so a message reaches us even if nobody is watching Telegram.
  • Google Analytics: With your consent (via the cookie banner on squeevio.com), we use Google Analytics 4 to understand website traffic — pages visited, general location (country/city level), device type. IP addresses are anonymized before storage. This does not run inside the mobile/desktop apps, only on the squeevio.com website, and never runs before you accept the cookie banner. You can decline or change your choice at any time by clearing your browser's site data for squeevio.com.

7. Data Retention

  • Community chat messages: maximum 300, oldest deleted automatically as new ones arrive.
  • Account data and filtering preferences: retained while account is active.
  • Orbio contact data: never uploaded to servers, deleted from the app when you uninstall or revoke permissions.
  • Deletion: upon account deletion request, all server-side personal data is removed within 30 days.

8. Account & Data Deletion

You can request deletion of your account and all associated personal data at any time. We process deletion requests within 30 days.

  • By email: privacy@squeevio.cominclude your registered email address and the subject line "Data deletion request".
  • Via Google: Revoke squeevio app access at myaccount.google.com/permissions, then email us to remove your account.
  • Orbio: Contact data lives on your device only — uninstalling the app removes it entirely. No server-side deletion needed.

9. Your Rights (GDPR / RODO)

Under GDPR, you have the right to: access your data, correct inaccuracies, request deletion (see Section 8), export your data in machine-readable format, and object to processing. Submit requests to privacy@squeevio.com.

10. Contact

Linis IT, Polki 1/30, 02-826 Warszawa, Poland
General & support: support@squeevio.com
Privacy & data requests: privacy@squeevio.com

See also: Terms of Service · Refund Policy · About squeevio