Last updated: August 19, 2026

    What We Collect

    Account Information

    • Name and email address (via Sign in with Apple, Google sign-in, or email signup)
    • Phone number, if you add one to your profile
    • Profile photo (optional), taken with your camera or chosen from your photo library with your permission

    Location Data

    • Your precise location (GPS coordinates), collected only with your permission, to find events and activities near you and to power features you request (such as weather-aware plan suggestions)
    • A home city and zip code you set during onboarding
    • Your location is never shown to or shared with other users
    • You can decline or disable location access in iOS Settings and pick a city manually instead

    Contacts

    • If you grant contacts access, we use the names and phone numbers of contacts you select to send invites and to find people you already know on Squishmish
    • Contacts access is optional; every core feature works without it

    Calendar

    • If you grant calendar access, we read your busy windows so your crew can see when you are free. Event details from your calendar are never shared

    Usage and Analytics Data

    • Events you view, save, and RSVP to, and your swipe history, to personalize recommendations
    • Messages sent in event group chats (visible only to that event's members)
    • Product analytics (screens viewed, features used) collected via PostHog and linked to your user ID, account email, and sign-in method so we can understand and improve the product
    • Crash reports and performance diagnostics collected via Sentry, including a replay of the screens leading up to an error, masked the same way (all text and images hidden before it leaves your device)

    Device Information

    • Push notification token (for event reminders and updates)
    • Device type and OS version (for crash reporting and diagnostics)

    How We Use It

    • Show you relevant local events based on your interests and location
    • Enable event planning, crew management, and group chat
    • Personalize your event feed with our recommendation engine
    • Send push notifications for RSVPs, messages, and event reminders
    • Improve the app experience

    What We Don't Do

    • We never sell your data to third parties
    • We never share your location with other users (it is used to find nearby events and to power features you request, such as weather-aware plan suggestions)
    • We never use your data for advertising or cross-app tracking
    • Chat is between you and your crew; we only access message content when required to review a report of abuse

    Third-Party Services

    • Supabase (database and authentication): supabase.com/privacy
    • Google (optional Google sign-in; venue details and photos via Google Places): some venue information and photos in the app come from Google Maps. Google's handling of data is described in the Google Privacy Policy, and use of that content is subject to the Google Maps/Google Earth Additional Terms of Service. Venue lookups run on our servers using venue names from our event catalog, never your identity, account details, or search history. When the app shows a photo hosted by Google, your device loads it from Google's servers directly, which shares your device's IP address with Google the same way any web image load does
    • PostHog (product analytics): posthog.com/privacy
    • Sentry (crash reporting and performance): sentry.io/privacy
    • Anthropic (Claude AI): powers event curation and the AI planner. When you use the planner, the notes you type and the details of the shortlisted events are processed by Anthropic's API. When you set a profile picture, the photo may also be checked by Anthropic's API for safety before it is published. Anthropic does not use this data, including your photos, to train models
    • Nominatim / OpenStreetMap (geocoding): converts place searches you type into coordinates
    • Open-Meteo (weather): weather lookups for plan suggestions, using approximate coordinates and no account identifiers
    • Ticketmaster (event data): no personal data shared
    • Expo (push notifications): device tokens for notification delivery

    Invite texts are sent from your own phone through the Messages app; we never send SMS on your behalf.

    Data Retention

    • Account data is kept while your account is active
    • You can delete your account at any time from Profile > Delete Account, or by following our account deletion instructions
    • Account deletion removes your personal data within 30 days. If you signed in with Apple, we also request revocation of your Sign in with Apple authorization
    • The group chats of events you created are deleted along with those events. Messages you sent in other people's chats may remain visible to those chats with your identity removed

    Your Rights

    • Access: View your data in your Profile
    • Delete: Delete your account anytime; your personal data and the chats of events you created are removed, and messages you sent in other people's chats are de-identified rather than deleted
    • Portability: Contact us to request a copy of your data
    • Opt-out: Disable location, notifications, or delete your account

    Children's Privacy

    Squishmish is not intended for users under 17. We do not knowingly collect data from minors.

    Contact Us

    For privacy questions: privacy@squishmish.ai

    Changes

    We may update this policy. Changes will be posted here with the updated date.