Privacy Policy

Last updated: October 23, 2026

1. Who We Are

squeevio.com is a suite of mobile applications and a web platform operated by Linis IT, Polki 1/30, 02-826 Warszawa, Poland. This policy covers all products under the squeevio.com brand: the main squeevio app, Breavio (breathing & meditation), Circlio (contact group manager), Chainio (habit tracker), Humorio (mood & emotion diary), and Palzo (an app for keeping your own decision with trusted pals). Contact: support@squeevio.com · privacy@squeevio.com.

2. What Data We Collect

  • Account data: Email address, display name — provided via Google, Facebook, or Microsoft OAuth, or entered directly during registration.
  • Device data: Enrollment ID, device model, app version — for policy delivery and support.
  • Content filtering preferences: Blocked categories, blacklisted domains — stored server-side to sync across sessions.
  • Community chat messages: Text only, stored with an anonymous SHA-256 hash of your user ID. Your real name is never stored in messages.
  • Mood & wellbeing logs: Mood check-ins and HALT scores you voluntarily record. Stored only for your account.
  • Circlio — Contacts (with permission): When you grant READ_CONTACTS / WRITE_CONTACTS / CALL_PHONE permissions, Circlio reads your device contacts solely to display and organize them inside the app. Circlio does not read your phone's call history; it only remembers, on your device, the calls you start from inside the app, to count your call goals. Contact data is never uploaded to our servers — it remains on your device only.
  • Breavio / Chainio: Breavio and Chainio do not collect any personal data beyond optional account sign-in (email and name via OAuth). Breathing session counts and habit completion records are stored locally on your device or, if you sign in, synced to your account on our servers.
  • Palzo: Palzo is an app for keeping your own decision with trusted pals. We process your account email and display name, an account and device identifier (device name, app version), a push-notification token and, when an event occurs, the incident type passed to your pal (for example protection switched off, or an attempt to open blocked content), without any details. Content filtering runs locally on your device through a VPN service; we do not collect or send the list of sites you visit. The accessibility, device administrator, usage-statistics and display-over-other-apps permissions are used only to protect your own commitment from being removed, and not to collect data. If you send a report from the app ("Report an Issue"), we receive its title and description, device information (phone model, system version, app version) and, only if you enter it, a contact email for our reply. On Android the app's recent technical log is attached by default; you can switch this off before sending. The report is linked to your account; it goes to our support inbox, our internal support Telegram chat and a private GitHub issue (see Section 6). Crash reporting is not active in the iOS apps; on Android, Crashlytics crash reports are described in Section 6. We do not sell data and we show no ads.
    • Installed apps (Android, only with your consent): If you agree, Palzo on Android sends us the list of apps installed on your phone: each app's package name, its name, and whether it is a system app. We use it only so you can choose which apps to block and see those settings in your account. Your pal does not see the list; they see only how many apps are blocked. We keep only the most recent list, replaced with each update, and delete it when you withdraw consent or remove the device or your account. You can withdraw consent at any time in the app's Settings; Palzo then stops sending the list. Without consent, the rest of the app works as usual.
    • Contacts: Palzo does not read or send your contacts. If you pick your pal's phone number from your phone book, you choose that one number yourself, and it stays only on your device (stored encrypted) so you can call your pal quickly. Palzo may also show the phone number your pal chose to add to their own profile.
    • Voice: Palzo does not record your voice and has no voice-memo feature. The microphone is used only during a live call with your pal that you start or accept. Audio is sent in real time through LiveKit Cloud (see Section 6) and is not stored by us or saved on the device. Regular phone calls to your pal go through your phone's dialer, not through our servers.
    • A heads-up for your pal when protection stops: So your pal can support you, Palzo lets them know when protection on your device stops working: when the VPN is switched off, when the device stops checking in with our server, or when the app is uninstalled. For this we keep the protection status of each of your devices (on or off) and the time the device last checked in. Your pal gets a push notification with what happened and when, with no browsing history and no app content.
  • Humorio: Humorio is a mood and emotion diary. Without an account, your entries stay only on your device. If you sign in (email and name via OAuth), the entries you choose to record are synced to your account on our servers: the emotions you pick with their intensity, your HALT scores (hungry, angry, lonely, tired), an optional free-text note (up to 500 characters) and the time of the entry. These are wellbeing data that you provide voluntarily; they are visible only to your account, are not shared with other users or third parties, are not used for advertising or profiling, and are not a medical record or diagnosis. Humorio requests no device permissions beyond network access, and shows no ads.
  • Newsletter email: If you tick the newsletter consent checkbox during registration, or submit your email through the newsletter signup form on squeevio.com, we collect your email address and add it to our Polish- or English-language mailing list (based on your selected site language) via our email provider, Sender.net. This is entirely optional and separate from your account — see Section 6 for the processor and Section 8 for how to unsubscribe.
  • Contact widget messages: If you use the "Contact us" chat widget on squeevio.com, we collect your email address, the optional name you provide, and the text of your message. This is forwarded to our support team via Telegram and email (Microsoft 365 / Exchange Online) so we can reply — including any follow-up messages you send in the same conversation. See Section 6 for these processors and Section 8 for deletion.

3. Google User Data — Access, Use, Storage & Sharing

This section specifically documents our use of data received via Google OAuth, in compliance with the Google API Services User Data Policy.

  • Data Accessed: When you sign in with Google, we request only your email address and public profile name via the openid, email, and profile OAuth scopes. We do not request access to Gmail, Google Drive, Calendar, Contacts, or any other Google services.
  • Data Usage: Your email is used solely to create and identify your squeevio account, and to send account-related emails (password reset, important service updates). Your name is displayed in the app interface. No Google data is used for advertising, profiling, or sold to third parties.
  • Data Sharing: Your email and name received from Google are not shared with any third party except our infrastructure provider (Microsoft Azure, EU region) which hosts the database. No Google user data is shared with advertisers, analytics providers, or data brokers.
  • Data Storage & Protection: Email and name are stored in a PostgreSQL database hosted on Microsoft Azure (Poland Central region, EU). Data is encrypted at rest (AES-256) and in transit (TLS 1.3). Access is restricted to authenticated backend services only.
  • Data Retention & Deletion: Google-sourced data (email, name) is retained for as long as your account is active. You can request full account and data deletion at any time by emailing privacy@squeevio.com. We process deletion requests within 30 days.

Our use of Google user data complies with the Google API Services User Data Policy, including the Limited Use requirements.

4. What We Do NOT Collect

  • Browsing history — DNS queries are evaluated locally on your device; domain names are never sent to our servers.
  • Voice recordings. Live calls between pals are sent in real time through LiveKit Cloud and are never recorded or stored.
  • Location data or your phone's contacts.
  • Humorio diary entries and Palzo incident details are never used for advertising and never shared with advertisers or data brokers.
  • Advertising identifiers.
  • Any Google service data beyond email and name (no Gmail, Drive, Calendar, Contacts).

5. How We Protect Your Data

  • All communication uses HTTPS / TLS 1.3.
  • Session tokens stored in Android EncryptedSharedPreferences (AES-256-GCM).
  • Content filtering policy is RSA-2048-signed and verified on-device before application.
  • Chat messages use SHA-256 hashed user IDs — no personally identifiable information in message records.
  • Database access restricted to backend services via credentials stored in Azure Key Vault.

6. Third-Party Services

  • Microsoft Azure: Backend and frontend hosting, PostgreSQL database (Poland Central, EU).
  • Google Firebase: Push notifications (FCM) for call and unlock alerts, and Crashlytics crash reporting from the Android apps only (device model, OS version, stack traces — never browsing data). Crash reporting is not active in the iOS apps.
  • Stripe, PayPal, Paddle, Tpay: Payment processing for donations and subscriptions. We do not store card data.
  • Google OAuth, Microsoft OAuth, Facebook OAuth: Social sign-in. We receive email and name only. See Section 3 for full details on Google data.
  • Sender.net: Newsletter delivery. If you opt in to the newsletter, your email address is stored on Sender.net's servers, used only to send you squeevio product updates, and never used for advertising or shared with other third parties. You can unsubscribe at any time via the link in every newsletter email or by emailing privacy@squeevio.com.
  • Telegram (Telegram FZ-LLC): If you use the "Contact us" widget on squeevio.com, your name, email, and message text are forwarded to a private Telegram chat used internally by our support team, so we can notify them and reply directly from Telegram. Telegram is based outside the EEA; only the message content you submit is sent to it, no other site data. Reports sent from inside the apps are posted to the same private chat.
  • LiveKit Cloud / Jitsi (8x8): Voice-call infrastructure. Calls are anonymous (room names are unguessable hashes) and encrypted in transit, and we never record or store audio — but media passes through the provider's servers, so calls are not end-to-end encrypted.
  • Ko-fi: Donation processing. If you donate, Ko-fi shares your email, name and any message with us so we can acknowledge the donation.
  • GitHub: Bug and feature reports submitted from inside the app are filed as issues in a private GitHub repository, including the device information, your account identifier, the optional app technical log and the contact email you provide. Messages sent through the website contact widget are NOT sent to GitHub.
  • Microsoft 365 / Exchange Online: Contact widget and feedback-form messages are also emailed to our support inbox (support@squeevio.com) via Microsoft Graph / Exchange Online, so a message reaches us even if nobody is watching Telegram.
  • Google Analytics: With your consent (via the cookie banner on squeevio.com), we use Google Analytics 4 to understand website traffic — pages visited, general location (country/city level), device type. IP addresses are anonymized before storage. This does not run inside the mobile/desktop apps, only on the squeevio.com website, and never runs before you accept the cookie banner. You can decline or change your choice at any time by clearing your browser's site data for squeevio.com.

7. Data Retention

  • Community chat messages: maximum 300, oldest deleted automatically as new ones arrive.
  • Account data and filtering preferences: retained while account is active.
  • Circlio contact data: never uploaded to servers, deleted from the app when you uninstall or revoke permissions.
  • Deletion: upon account deletion request, all server-side personal data is removed within 30 days.

8. Account & Data Deletion

You can request deletion of your account and all associated personal data at any time. We process deletion requests within 30 days.

  • By email: privacy@squeevio.com — include your registered email address and the subject line "Data deletion request".
  • Via Google: Revoke squeevio app access at myaccount.google.com/permissions, then email us to remove your account.
  • Palzo / Humorio: Delete your account in the app or write to privacy@squeevio.com (or use squeevio.com/data-deletion); this removes your account data and, for Humorio, the synced diary entries. Without an account, Humorio entries live only on your device and uninstalling removes them.
  • Circlio: Contact data lives on your device only — uninstalling the app removes it entirely. No server-side deletion needed.

9. Your Rights (GDPR / RODO)

Under GDPR, you have the right to: access your data, correct inaccuracies, request deletion (see Section 8), export your data in machine-readable format, and object to processing. Submit requests to privacy@squeevio.com.

10. Contact

Linis IT, Polki 1/30, 02-826 Warszawa, Poland
General & support: support@squeevio.com
Privacy & data requests: privacy@squeevio.com

See also: Terms of Service · Refund Policy · About squeevio