Last Updated: February 2026
Sqirl ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our application and services ("Service").
By using the Service, you consent to the practices described in this Privacy Policy.
During the alpha testing period, we may collect additional diagnostic information to help improve the Service. This may include error logs, performance metrics, and feature usage patterns. This data is used solely for development purposes and will be handled in accordance with this Privacy Policy.
| Data Type | Purpose | Encryption |
|---|---|---|
| Email address | Account creation, login, communications | Stored in plaintext |
| Phone number (optional) | Alternative login method | Stored in plaintext |
| Password | Authentication, key derivation | Hashed (never stored in plaintext) |
| Name (optional) | Personalisation | Stored in plaintext |
| Country | Localisation, card definitions | Stored in plaintext |
| Lists and list items | Core functionality | End-to-end encrypted |
| Loyalty card details | Card storage feature | End-to-end encrypted |
| Gift card details | Card storage feature | End-to-end encrypted |
| Expense transactions | Expense tracking feature | Stored in plaintext (for calculations) |
| Budget categories | Budget management feature | Stored in plaintext |
When you use the Service, we may automatically collect:
We use essential cookies and local storage to:
We do not use third-party advertising cookies or tracking cookies.
We use the information we collect to:
Sqirl uses end-to-end encryption to protect your sensitive data:
Important: Because we cannot access your encryption keys, if you forget your password and have not set up a recovery key, we cannot help you recover your encrypted data.
We do not sell your personal information. We may share your information only in the following circumstances:
When you use sharing features (such as group lists or shared cards), your information is shared with the users you designate.
We may share information with third-party service providers who perform services on our behalf, such as:
These providers are contractually obligated to protect your information and use it only for the purposes we specify.
We may disclose your information if required to do so by law or in response to valid legal requests by public authorities.
If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.
We retain your information for as long as your account is active or as needed to provide you with the Service. We may also retain information as necessary to:
When you delete your account, we will delete or anonymise your personal information within 30 days, except where retention is required by law.
We implement appropriate technical and organisational measures to protect your information, including:
However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
Depending on your location, you may have certain rights regarding your personal information:
If you are in the EEA or UK, you have additional rights under the General Data Protection Regulation:
Our legal basis for processing your information includes: performance of our contract with you, your consent, and our legitimate interests in operating and improving the Service.
If you are a California resident, you have the right to:
If you are an Australian resident, your personal information is handled in accordance with the Australian Privacy Principles under the Privacy Act 1988 (Cth). You have the right to:
Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. When we transfer your information internationally, we take appropriate safeguards to protect your information in accordance with applicable law.
The Service is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If we learn that we have collected personal information from a child under 16, we will take steps to delete that information.
We use privacy-focused analytics to understand how the Service is used. Our analytics:
We may update this Privacy Policy from time to time. We will notify you of any material changes by:
Your continued use of the Service after changes become effective constitutes acceptance of the revised Privacy Policy.
If you have any questions about this Privacy Policy or our privacy practices, please contact us at:
Email: privacy@sqirl.net
For data protection inquiries or to exercise your rights, please email: privacy@sqirl.net
© 2026 Sqirl. All rights reserved.