Privacy Policy

Website launch notifications

If you joined our launch email list on this website, we store that address to send you launch and related product updates about Squirroo. We do not sell that email or use it for unrelated advertising. You can unsubscribe using the link in those emails (where provided), or contact us to ask us to remove it.

Sign-in and identity

Squirroo uses Firebase Authentication (Google) to sign you in and keep your account secure across devices. Depending on your device, you may sign in with Google and, on iOS, Sign in with Apple.

When you sign in, we receive information from your identity provider, such as:

• A stable account identifier from the provider
• Your email address (if the provider shares it)
• Whether your email is verified

We use this only to create and maintain your Squirroo account, link your grocery retailer connections, and sync your receipt data.

Apple private relay email

If you use Sign in with Apple and choose Hide My Email, we accept and store Apple's private relay address (for example *@privaterelay.appleid.com) as your account email. We treat it like any other verified email for sign-in and account recovery.

What we do not do with sign-in data

• We do not sell your sign-in information.
• We do not use Firebase or Google/Apple sign-in data for unrelated advertising profiles.
• We do not post to your social accounts.

Retailer connections

You can choose to connect your Woolworths (Everyday Rewards) and/or Coles (Flybuys/Coles account) accounts to import your purchase history.

Your consent comes first. Before any connection is made, we show you a consent screen describing what we will access and why. Nothing is collected until you agree, and we keep a record of the consent you gave (what data, for which purposes, and when).

Your password stays with the retailer.You sign in on the retailer's own login page. Squirroo never sees or stores your retailer password.

What we collect from a connected retailer

• Purchase history / receipts — items purchased, quantities, prices, discounts, purchase dates, and store locations
• Coarse location for pricing — postcode and state from a connected retailer (or the shopping state you pick in Settings), so we can show the right regional prices. We do not store your name or suburb.
• Loyalty identifiers — retailer account or card identifiers used only to link imported receipts to your Squirroo account

Why we collect it

We use retailer data only to provide the Squirroo service:

• Import your receipts automatically so you don't have to scan or type them
• Help you plan shops and compare prices across supermarkets
• Show you insights about your grocery spending

We do not sell your retailer data, share it with advertisers, or use it for purposes beyond the ones above.

Paper receipt scanning

You can optionally photograph or upload a paper receipt. We process the image to extract line items (using automated text recognition) so those purchases can feed Your buys and related features. By default we process the image and do not keep a long-term copy of the photo; we store the structured receipt data that results. You can delete scanned receipts in Settings.

Purchases and Premium

If you buy Premium, payment is handled by the App Store or Google Play. We receive and store entitlement / purchase status so we can unlock Premium features. We do not receive or store your full card number.

Analytics and notifications

• Analytics. We use Firebase Analytics to understand how the app is used (for example which screens and features people open) so we can improve Squirroo. Event payloads are not meant to include your grocery list contents as free text.
• Push notifications. If you allow notifications, we store a device push token (via Firebase Cloud Messaging) so we can send you product notifications you opt into. You can turn notifications off in your device settings.

Data retention

• Your link to a supermarket account is kept only while it is connected in Squirroo. When you disconnect, we remove the link from our side.
• Imported receipt data is kept for up to 24 months to power your spending history and insights, after which it is automatically deleted.
• If you delete your Squirroo account, your data is deleted rather than retained for the full period.

Your rights and controls

• Disconnect anytime. In Settings, you can disconnect Woolworths or Coles and choose whether to delete your imported receipts for that retailer. Disconnecting removes the link from our side.
• Withdraw consent. Disconnecting a retailer withdraws your consent for future collection from that retailer.
• Export your data. In Settings → Export my data, you can download a JSON copy of your profile, supermarket connection metadata (not passwords or tokens), receipts, and shop history.
• Delete your account. In Settings → Delete my account, you can permanently delete your Squirroo account. That removes your sign-in, supermarket links, receipts, shop history, and Premium on this account. It does not cancel an App Store or Play subscription — manage that in your store settings.

Security

Data is stored on Google Cloud infrastructure in encrypted form in transit and at rest. Access to production data is restricted.

Non-affiliation

Squirroo is an independent app. We are not affiliated with, endorsed by, or sponsored by Woolworths Group, Coles Group, or any supermarket. All product names and trademarks are the property of their respective owners.

Contact

For privacy questions, contact squirroo.labs@gmail.com.