Privacy Policy
Last updated: April 2026
Your privacy matters. This policy explains exactly what data Squiggle collects, how it is used, and the choices you have.
1. Who we are
Squiggle is a list app developed and operated by Khaled Abbes. If you have any questions about this policy, contact us at support@squigle.app.
2. What data we collect
We collect only what is necessary to run the app. Guest mode: No account is created. Your lists are stored exclusively on your device. We collect no personal information in this mode. Signed-in users: We collect your email address and display name (first and last name if provided) when you create an account via email/password, Apple Sign-In, or Google Sign-In. Your lists and settings are stored in our secure database (Supabase) to enable sync across your devices. All users: We store an anonymous device identifier used solely to enforce daily AI usage quotas. This identifier is not linked to your name, email, or any other personal data.
3. AI features (OpenAI)
Squiggle offers AI-powered features: Magic Add, Smart Sort, and Ask AI. When you use these features, the text you type — including your list name, existing items, and prompt — is sent to our servers and forwarded to OpenAI's API to generate a response. We do not store your prompts or AI-generated content on our servers beyond what is needed to complete your request. OpenAI processes this data according to their own privacy policy. Content sent to the OpenAI API is not used to train OpenAI models by default (API usage). For details, see: openai.com/policies/privacy-policy
4. Advertising (Google AdMob)
Squiggle displays ads served by Google AdMob to help keep the app free. AdMob may collect and use the following data: • Device advertising identifier (IDFA on iOS / GAID on Android) • IP address (used to infer approximate location for ad targeting) • Device type, OS version, app version • Ad interaction data (impressions, taps) On iOS, Squiggle requests permission to track you via Apple's App Tracking Transparency (ATT) prompt before any advertising ID is accessed. If you decline, AdMob will serve non-personalized ads only and will not access your IDFA. AdMob may use this data to show you personalized ads across apps and websites. You can opt out of personalized advertising at any time in iOS Settings → Privacy & Security → Tracking, or by visiting Google's Ad Settings at adssettings.google.com. AdMob data is processed by Google LLC in accordance with Google's privacy policy: policies.google.com/privacy Google is a signatory to the EU-US Data Privacy Framework and complies with GDPR and CCPA requirements for ad data.
5. Usage data
We keep a daily counter of AI requests per device (stored as an anonymous hash) to enforce fair-use quotas and keep the service sustainable. This counter resets every 24 hours and is never linked to a personal identity.
6. Data storage & security
All server-side data is stored in Supabase with row-level security enabled. Every request is authenticated and users can only access their own data. Data is encrypted in transit using TLS 1.2+. Passwords are never stored — authentication is handled by Supabase Auth (bcrypt hashing for email accounts, tokenised for OAuth). We do not sell, rent, or share your personal data with third parties for marketing or advertising purposes beyond what is described above (OpenAI for AI features, Google AdMob for ads). Squiggle currently runs on free-tier cloud infrastructure. While we take security seriously, we cannot guarantee continuous uptime or unlimited storage capacity.
7. Data retention
Your account data is retained as long as your account exists. AI usage counters are reset daily. Push notification tokens are removed when you sign out. If you delete your account, all associated data (lists, items, profile) is permanently deleted from our servers within 30 days.
8. Your rights
You have the right to: • Access the personal data we hold about you • Correct inaccurate data • Delete your account and all associated data (via My Account → Delete account, or by contacting support@squigle.app) • Opt out of personalised advertising (see the AdMob section above) • Lodge a complaint with your local data protection authority To exercise any of these rights, email support@squigle.app.
9. Children's privacy
Squiggle is not directed at children under 13. We do not knowingly collect personal information from children under 13. If we learn that we have inadvertently collected such data, we will delete it promptly.
10. Changes to this policy
We may update this Privacy Policy occasionally. When we do, we will update the date at the top of this page. Continued use of the app after changes constitutes acceptance of the updated policy.
11. Contact
Questions or requests? Email us at support@squigle.app — we aim to respond within 48 hours.