Privacy Policy

Last updated October 2, 2026

This Privacy Policy describes how SquadlyClub ("Squadly", "we", "us", or "our") collects, uses, and shares information when you use the Squadly website and application (the "Service").

1. Information we collect

Account information

Name, email address, and password (hashed — we never store it in plain text) or, if you sign in with Google, your Google account's name, email, and profile photo.

Shared-living and travel data you enter

Expenses, splits, chores, trip itineraries, packing lists, messages, and similar content you or your squad members create. This is the core purpose of the Service, and it is visible to the other members of any squad or trip you're part of — see "How we share information" below.

Finance module data

If you use the personal finance tools, the income, bills, debts, goals, credit card, and property details you enter, plus any receipts you upload. This data is not shared with your squads — it's private to your account. We do not currently connect directly to your bank; all finance data is entered manually or uploaded by you.

Payment information

Squadly does not currently take payments and we do not collect card or bank details. If we introduce paid plans, we will update this policy before we start and use a payment processor so that card numbers never reach our systems.

Usage and device information

IP address, browser type, device identifiers, and basic usage logs, collected to keep the Service secure and working correctly.

Analytics cookies (only if you accept them)

If you accept analytics cookies in the cookie banner, we use Google Analytics to understand how the Service is used. If you decline, Google Analytics does not load — see our Cookie Policy.

2. How we use your information

  • To provide the Service — calculating splits, tracking balances, showing your itineraries and chores.
  • To send account emails — email verification codes, password resets, and (if you opt in, in Settings) notifications about squad activity.
  • To detect fraud and abuse and to keep the Service secure.

3. How we share information

With your squad

This is the core of how Squadly works: when you join a squad or trip, the expenses, splits, chores, and itinerary items you add to it are visible to the other members of that squad or trip. Your name and profile photo are visible to anyone you're connected with. Personal finance data (Section 1, "Finance module data") is never shared this way.

Service providers

We share the minimum data necessary with the vendors who help us run the Service:

  • Microsoft Azure — hosting the website.
  • Google Cloud — hosting the application server.
  • MongoDB Atlas — database storage.
  • Brevo — sending sign-up codes and password-reset emails.
  • Cloudflare Turnstile — checking that sign-up and login requests come from people, not bots.
  • Plaid — only if you choose to connect a bank. You sign in to your bank inside Plaid's window, so Squadly never sees your bank username or password. Plaid gives us read-only access to your account names, balances and transactions. It cannot move money. Plaid's own use of your data is described in its privacy policy at plaid.com/legal. You can disconnect a bank in Finance at any time, which deletes our access key; deleting your account also revokes access at Plaid and removes the transactions imported from your bank.
  • Google (sign-in, Analytics) — sign-in with Google, and analytics only if you accept cookies.

We do not sell your personal information, and we do not share it for third-party advertising. We do not send your finance data to any AI service. If that ever changes, we will tell you first and ask for your consent.

Legal reasons

We may disclose information if required by law, subpoena, or to protect the rights, property, or safety of Squadly, our users, or the public.

4. Data retention and deleting your account

We keep your account data for as long as your account is active. You can delete your account yourself at any time in Settings → Account → Delete account. We ask you to confirm twice: once with your password (or an emailed code if you sign in with Google), and once by typing a confirmation phrase.

What is deleted

Deletion is immediate and permanent. We erase your profile and sign-in details, all active sessions, and everything you entered in the Finance module: bills, budgets, debts, credit cards, income, savings goals, investments, properties, payroll records, reports and transactions. We also erase your notifications, activity history, friend connections and pending requests, and any trip, event, project or squad that no one else is part of.

What stays for other people

Some records belong to several people, such as an expense you split with a housemate or a trip with other travellers. Removing them would change what other people owe and are owed, so they stay, with your name and details replaced by "Deleted user". Nothing in them links back to you. If you created a shared trip, another traveller becomes its owner.

What we cannot delete

We send one email to your address confirming the deletion, and keep nothing afterwards. Backups made by our database provider, if any, are outside our day-to-day control and are replaced on the provider's normal schedule. We do not restore individual accounts from them. If the law requires us to keep a specific record, for example in response to a valid legal request, we keep only that record.

Deleted data cannot be recovered, by you or by us. If you want a copy first, email privacy@squadlyclub.com before you delete.

5. Security

Passwords are hashed with bcrypt and never stored in plain text. Data in transit is encrypted with TLS/HTTPS. Our database provider encrypts data at rest. Access to production systems is limited to what's needed to operate the Service. No system is perfectly secure, and we can't guarantee absolute security — see our Security page for more detail, and please report any vulnerability you find to security@squadlyclub.com.

If we experience a data breach affecting your personal information, we will notify affected users and relevant authorities as required by applicable law.

6. Your rights

Depending on where you live, you may have the right to:

  • Access a copy of the personal data we hold about you.
  • Correct inaccurate data — most of this you can do yourself in Settings.
  • Delete your account and personal data yourself, instantly, from Settings → Account → Delete account (see Section 4), or by emailing us.
  • Export your data in a portable format.
  • Object to or restrict certain processing.

To exercise any of these rights, use the in-app tools where available, or email privacy@squadlyclub.com. We'll respond within the time required by applicable law.

California residents (CCPA/CPRA)

In the past 12 months we have collected the categories of personal information described in Section 1 for the purposes described in Section 2. We do not sell or "share" (as that term is defined under the CCPA, including for cross-context behavioral advertising) your personal information. California residents have the right to know, delete, correct, and limit use of sensitive personal information, and the right not to be discriminated against for exercising these rights. To submit a request, email privacy@squadlyclub.com.

European users (GDPR)

If you're in the EU/UK, our legal basis for processing is performance of our contract with you (to provide the Service), your consent (for analytics cookies, where applicable), and our legitimate interests (fraud prevention, security). You have the rights listed above, plus the right to lodge a complaint with your local data protection authority.

7. Children's privacy

Squadly is not directed at, and is not intended for use by, anyone under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us at privacy@squadlyclub.com and we will delete it.

8. International data transfers

Squadly is operated from the United States, and your information is processed and stored on US-based servers. If you're accessing the Service from outside the US, your information will be transferred to, and processed in, the United States.

9. Changes to this policy

We'll update the date at the top of this page when we make changes, and notify you by email or an in-app notice for anything material.

10. Contact us

SquadlyClub
privacy@squadlyclub.com