Privacy Policy

Squeeeks · Last updated 19 October 2026

Squeeeks is a cleaning-habit game. This policy explains what the app collects, why, how long it is kept, and what you can ask us to do with it. It applies to the Squeeeks iOS app, and to the squeeeks.app website and its early-access list, which have their own section below.

Who is responsible for your data

The data controller for Squeeeks is:

Brendan Trey Keane (independent developer), bkbrohon795@gmail.com

You can reach us about anything in this policy at bkbrohon795@gmail.com.

What we collect

We do not collect precise location, contacts, health, biometric or demographic data. If you take an optional photo of a room you have cleaned, it stays on your device and is never uploaded. Your password is handled by Firebase Authentication when you sign in; we do not store it and cannot see it.

Why we use it, and our lawful basis

If you are in the UK or the European Economic Area, the UK GDPR and the EU GDPR require us to tell you the lawful basis for each use. They are:

WhatWhy we use itLawful basis
Account details, profile information, game dataTo create your account, save your progress, and let you play with friends you have acceptedPerformance of a contract — this is the service you signed up for
Family chat and household dataTo deliver your messages and chores to the members of your familyPerformance of a contract
Reports and blocksTo review reports of abuse, enforce blocks and keep other players safeLegitimate interests — keeping the community safe, which App Store rules also require
Year of birth (not stored)To confirm you are old enough to create an accountLegitimate interests and our legal obligations towards children
Purchase historyTo give you what you bought and to keep subscriptions working across your devicesPerformance of a contract
Device tokenTo send the reminders you asked forConsent — you choose this at the notification prompt, and can withdraw it at any time in iOS Settings
Crash reportsTo find and fix faults that make the app breakLegitimate interests — keeping the app working for everyone. Crash reports are not linked to your account

Providing your account details is a contractual requirement: without an email address and a user ID we cannot create an account, and you would not be able to save progress or use friend features. Nothing in the app requires you to give us data by law.

What we do not do

Automated decisions

We do not use your data to make automated decisions about you, and we do not build advertising or marketing profiles from it. Nothing in the app decides anything about you without a person involved, and no feature currently analyses your history to make inferences about you. If that ever changes, this policy will be updated before the feature is switched on.

Who can see your information

Your profile and house layout are visible only to friends you have accepted. Settings contains a Be discoverable toggle; turning it off makes your account unsearchable by display name.

If you join a family, its members can see your display name and avatar, the messages you post in the family chat, and the chores assigned within it. People outside the family cannot.

You can report a message or a player, and block a player, from inside the app. A blocked player can no longer send you a friend request, a gift or a family message, and no longer appears in your searches. Reports are read by us and are not shown to the person you reported.

Data is stored using Google Firebase (Authentication, Cloud Firestore, Cloud Functions, Cloud Messaging, and Crashlytics), which processes it on our behalf. Apple processes in-app purchases and, if you use it, Sign in with Apple.

Where your data is processed

Google processes Firebase data on servers in the United States. For users in the UK and the European Economic Area, that is a transfer outside your home country, and it needs a legal mechanism.

Google states that it complies with the EU–U.S. and Swiss–U.S. Data Privacy Frameworks and the UK Extension to the EU–U.S. Data Privacy Framework, and additionally offers Standard Contractual Clauses through its Cloud Data Processing Addendum. Those are the mechanisms this transfer relies on.

In the language of the GDPR and of California law, we are the controller (or business) and Google is our processor (or service provider). Google publishes this position itself at firebase.google.com/support/privacy.

How long we keep it

We do not set a fixed number of days. Instead:

Your rights

Wherever you live, you can ask us to do the following, and we will not treat you any differently for asking:

Email bkbrohon795@gmail.com to exercise any of these. We may need to confirm you control the account's email address before we act, so that nobody else can make a request about your data.

If you are in the UK or the EEA and you think we have got this wrong, you have the right to complain to your data protection supervisory authority. In the UK that is the Information Commissioner's Office (ico.org.uk); in the EEA it is the authority in the country where you live. You can complain without contacting us first, though we would rather have the chance to fix it.

If you are in California

The CCPA and CPRA give California residents specific rights and require us to describe our collection in the statute's own categories. In the last 12 months we have collected:

CCPA categoryWhat that means hereBusiness purpose
IdentifiersEmail address, user ID, display name, device push tokenCreating and securing your account; sending reminders you asked for
Commercial informationRecords of in-app purchases and subscriptionsDelivering what you bought; supporting refunds and billing questions
Internet or other electronic network activity informationCrash diagnostics: the error, device model, OS version, and recent in-app event namesFinding and fixing faults
Other information you create in the appTasks, streaks, house layout, in-game currency, friend connections, family chat messages, reports you makeRunning the game, saving your progress, delivering messages to your family, keeping players safe

We disclose these categories to two kinds of third party for those business purposes: Google (Firebase Authentication, Cloud Firestore, Cloud Functions, Cloud Messaging and Crashlytics) and Apple (in-app purchases and Sign in with Apple). Both act as service providers.

We do not sell your personal information and we do not share it for cross-context behavioural advertising, as those terms are defined by California law. We never have. Because we do not sell or share, there is nothing for you to opt out of — but the rest of your rights still apply: the right to know what we collect, to delete it, to correct it, and to not be discriminated against for exercising any of them. We do not offer financial incentives in exchange for personal information.

The one kind of sensitive personal information, as the CPRA defines it, that we hold is the content of the messages you post in a family chat. We store it only so that the members of your family can read it, and we use it for nothing else. We do not collect precise geolocation, government identifiers, racial or ethnic origin, religious beliefs, health data or biometrics. We do not use or disclose sensitive personal information for any purpose that would require a right-to-limit notice.

You can make any of these requests at bkbrohon795@gmail.com. An authorised agent may make a request on your behalf, and we will ask for proof that you authorised them.

How we protect your data

We would rather describe what actually exists than make claims we cannot stand behind:

No service can promise perfect security, and we are not going to pretend otherwise.

If something goes wrong

If a breach of personal data happens and it is likely to be a risk to your rights and freedoms, we will report it to the relevant supervisory authority without undue delay, and within 72 hours of becoming aware of it where the GDPR requires that. If the risk to you is high, we will tell you directly as well, without undue delay. Where other laws set their own notification duties, we will follow those too.

Children

Squeeeks is for people aged 13 and over. It is not an App Store Kids Category app and it is not directed at children under 13. When you create an account, the app asks for your year of birth and does not let you continue if you are under 13. We do not store the year you enter or your age.

We do not knowingly collect personal information from children under 13. If we learn that an account belongs to a child under 13, we will delete it and its data. If you are a parent or guardian and think your child has an account, email us at the address below and we will delete it. Anyone can also delete an account and all of its data at any time from Settings → Account & Data → Delete account.

The squeeeks.app website and early-access list

The website at squeeeks.app has a short quiz and an early-access list for the iPhone beta. You can take the quiz without giving us anything: your answers stay in your browser unless you choose to join the list.

What we collect.

Why. To send your confirmation email, your beta invite and news about the launch, and to decide what to build: your answers tell us which problems matter most to the people waiting. In GDPR terms the email list rests on your consent, which you give by confirming your address and can withdraw at any time with the unsubscribe link. The IP hash rests on our legitimate interests in stopping abuse of the form. The step counts are not personal data.

Who processes it. Cloudflare hosts the website and its database, and runs the Turnstile check that tells people from bots before you can join. Resend delivers our emails. Both act for us as processors (service providers, under California law), and both are based in the United States, so your data may be processed there.

How long. Until you unsubscribe or ask us to delete it. Every email has an unsubscribe link. When you unsubscribe, we delete your quiz answers and where you came from, and keep only your email address and its dates, as the record that you asked not to be emailed. To have that deleted too, write to bkbrohon795@gmail.com.

What we never do. We never sell it, never share it for advertising, and never use it to make decisions about you.

Changes

If this policy changes materially, the updated version will be posted on this page with a new date.

Contact

Questions or deletion requests: bkbrohon795@gmail.com