1. Who we are
Partysquad is a private, invite-only social hub for a closed group of friends. The service is operated by the Partysquad maintainers. For privacy questions, contact privacy@partysquad.be.
2. Data we collect
- Account data: email address, username, password (hashed).
- Profile data: display name, avatar, bio, birthday, language and theme preferences.
- Content you create: chat messages, photos, events, expenses, ideas, polls and reactions.
- Device data for push notifications: device push token, platform (iOS / Android / web).
- Technical data: IP address, browser/device user agent, last seen timestamp.
3. How we use your data
- To provide the core features of the app (chat, events, expenses, etc.).
- To authenticate you and keep your account secure.
- To send you push and email notifications you have opted into.
- To enforce our terms and prevent abuse.
We do not sell your data. We do not use your data for advertising.
4. Legal basis (GDPR)
We process your data on the basis of (a) the contract between you and us to provide the service, (b) your consent for optional features such as push notifications, and (c) our legitimate interest in keeping the service secure.
5. How we protect your data
- Passwords are never stored in plain text. They are hashed by our authentication provider using industry-standard algorithms (bcrypt).
- All data is transmitted over HTTPS/TLS.
- Database access is protected by Row-Level Security policies so that you can only read and modify data you are authorised to access.
- Private files (avatars, album photos, chat attachments) are stored in private storage buckets and served via short-lived signed URLs.
6. Data sharing
Your content is visible to other members of Partysquad according to the visibility you choose (e.g. group, trip, public to all members). We share data with the following processors strictly to run the service:
- Supabase (database, authentication, storage hosting)
- Apple Push Notification service (iOS push delivery)
- Firebase Cloud Messaging (Android push delivery)
- Our transactional email provider (account & notification emails)
7. Data retention
We retain your data for as long as your account is active. When you delete your account, your profile and personal content are deleted or anonymised within 30 days, except where we are legally required to keep certain records.
8. Your rights
You have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request deletion of your account and data.
- Export your data in a portable format.
- Withdraw consent for push and email notifications at any time.
- Lodge a complaint with your local data protection authority.
To exercise any of these rights, email privacy@partysquad.be.
9. Children
Partysquad is not directed at children under 13 (or 16 in the EU). We do not knowingly collect data from children below this age.
10. Changes to this policy
We may update this policy from time to time. We will notify you of material changes through the app or by email.
11. Contact
Questions about this policy? Email privacy@partysquad.be.