Who this is about
Squad operates the Squad apps and this site. If you have a question about anything here, write to [email protected], and a person reads it.
What we collect
Your account. When you sign in, we store an identifier from the sign-in provider along with your display name and email address. We never see or store your password.
What you and your squad say and do. Messages in your threads, the tasks your members take on, the facts they remember about you, the files they produce, the approvals you grant or refuse, and voice-call transcripts when you use calls. This is the working material of the product; without it Squad has nothing to be useful with.
Health, contacts and location. If you connect Apple Health, Squad reads only the activity, sleep, workouts and nutrition you choose to share in Health, and a member receives the part it needs to answer you. Contacts are looked up when you connect Apple Contacts or save a card from a thread, and your location is used only when you share it in a thread. None of it is used for advertising or sold.
Reports and blocks. If you report a person or a message, we receive the reported words, your note, and who is involved, so our team can review it. If you block somebody, we keep that you did, so nothing they write reaches you.
The beta list. If you sign up on this site to test Squad, we keep the email address and anything you typed with it, and use them only to send you builds and to ask how it went. Write to us to be taken off the list.
Connected accounts. If you connect a calendar, mailbox or file service, we store the connection and the access it was granted. The credentials themselves live in a dedicated secret store; the main database holds only a reference to them, never a token.
Devices and payments. Push notification tokens for the devices you use, and subscription receipts from the app store you bought through. We never receive your card details.
Operational records. Logs of what the system did, which exist so failures can be diagnosed and so the action log you read in the app is accurate.
How your data reaches an AI model
Squad's members are language models, so making them useful means sending them the relevant part of your conversation, the memories that bear on it, and the results of any tools they used. Two things we want to be exact about. We do not send your data to model providers for training, and we ask our providers not to train on it. And a member only receives what its task requires: the member planning your meals does not get your mailbox.
What connections can and cannot do
Connecting an account is not the same as handing it over. You choose which specific resources Squad may use, down to a particular calendar or a particular mailbox. Only the members whose work needs a connection can use it. Unless you change it, they read from it without asking and ask you before they change anything, and some actions, such as removing a calendar event, always ask you first. You can set what each member may do with each capability to allow, ask, or deny. Squad members never receive the provider credentials themselves; they ask the platform to act, and the platform decides whether they may.
You can disconnect a provider at any time, which revokes the stored grant and stops further use immediately.
Who else sees it
We do not sell your data and we do not share it for advertising. We use these services to run Squad, and they receive only what their job requires:
We may also disclose data if the law genuinely requires it, and we will tell you when we are permitted to.
How long it is kept
Your squad's contents stay until you delete them or delete your account. Some things clear themselves sooner: an approval nobody answers expires, a half-finished connection attempt is discarded, and orphaned files are swept up. Operational logs are kept only as long as they are useful for diagnosis.
What you can do
See it. The app shows you what your squad remembers, and the action log shows what every member did, when, and whether a standing rule allowed it or you approved it.
Delete it. You can forget individual memories, delete threads, or delete your entire account from the app. Deleting the account erases the squads you own and everything in them; it is irreversible, which is why it asks you to type the word out.
Get a copy. We do not have a self-service export yet. Write to [email protected] and we will put one together for you.
Depending on where you live you may have further rights over your data: to correct it, to restrict how it is used, or to object. The same address reaches us for those.
Children
Squad is not intended for children under 13, and we do not knowingly collect their data. A shared squad can include people you invite with limited access, but the account holder is responsible for who they bring in.
Security
Traffic is encrypted in transit. Provider credentials are held in a dedicated secret store rather than the application database, so the database can be compromised without the credentials going with it. No system is perfectly secure, and we will not pretend otherwise.
Changes
If this policy changes in a way that materially affects you, we will say so in the app rather than quietly changing the date at the top.
Contact
[email protected] reaches us for anything on this page, including requests about your data.