Privacy Policy

Effective 2026-06-18 · support@squadpax.com

Summary

SquadPax collects the fitness, nutrition, and account data you enter so the app can work. We treat your health and fitness data as sensitive. We do not sell your data or use it for advertising. You can export or delete your data at any time.

1. Data we collect

Account: email address (for sign-in), and your chosen handle and display name.

Squads & check-ins: squad membership, check-in records, and optional check-in photos (which auto-expire after 24 hours).

Nutrition: food logs and totals (calories, protein, carbs, fat), water intake, and optional meal photos you submit to the AI scanner.

Fitness & body: workouts and sets, body measurements, weight, and BMI you log.

AI: the messages and images you send to the coach, and a per-day count of AI calls (for rate limiting).

Device: a push-notification token if you enable notifications. We do not collect precise location or your contacts.

2. Sensitive (health) data & your consent

Body measurements, weight, BMI, and the food/exercise data you log are health-related and are treated as a special category of personal data under laws such as the EU/UK GDPR, India’s DPDP Act, and the California CPRA.

We process this data only with your explicit, opt-in consent, which we ask for in the app and which you can withdraw at any time by deleting your account. We process it solely to provide the tracking and coaching features you requested.

3. Who processes your data

Supabase — hosts our database, authentication, and photo storage (data processor).

Anthropic — receives the text and images you send to the AI coach / meal scanner to generate responses (data processor). It is not used to train models on your data under our configuration.

Expo / Apple / Google — deliver push notifications and provide app sign-in and billing.

Lookups to USDA FoodData Central and Open Food Facts are for food search only and do not include your personal data.

4. How we use it

To operate the features you use, show your squad shared progress (streaks and whether members checked in), generate AI coaching, and keep the service secure. We do not sell your data or run third-party ads.

5. Your rights

Depending on where you live, you can request access, correction, deletion, a portable copy, or restriction of your data, and you can object to or withdraw consent for processing.

You can delete everything yourself from Profile → Delete account, which permanently removes your account, your logs, and your stored photos. For any other request, contact support@squadpax.com. You may also complain to your local data-protection authority.

6. Retention & security

We keep your data until you delete your account; check-in photos auto-expire after 24 hours. Data is encrypted in transit, and access is restricted per-user by database row-level security.

No system is perfectly secure; we will notify affected users and regulators of a qualifying breach as required by law.

7. International transfers & children

Your data may be processed in countries other than yours (including the United States) under appropriate safeguards such as Standard Contractual Clauses.

SquadPax is not for children under 16 and we do not knowingly collect their data; if you believe a child has, contact us and we will delete it.

8. Changes & contact

We will notify you in-app of material changes to this policy.

Effective 2026-06-18. Data controller contact: support@squadpax.com.