Privacy Policy

Sign-in and identity

Squirroo uses Firebase Authentication (Google) to sign you in and keep your account secure across devices. Depending on your device, you may sign in with Google and, on iOS, Sign in with Apple.

When you sign in, we receive information from your identity provider, such as:

• A stable account identifier from the provider
• Your email address (if the provider shares it)
• Whether your email is verified

We use this only to create and maintain your Squirroo account, link your grocery retailer connections, and sync your receipt data.

Apple private relay email

If you use Sign in with Apple and choose Hide My Email, we accept and store Apple's private relay address (for example *@privaterelay.appleid.com) as your account email. We treat it like any other verified email for sign-in and account recovery.

What we do not do with sign-in data

• We do not sell your sign-in information.
• We do not use Firebase or Google/Apple sign-in data for unrelated advertising profiles.
• We do not post to your social accounts.

Retailer connections

You can choose to connect your Woolworths (Everyday Rewards) and/or Coles (Flybuys/Coles account) accounts to import your purchase history.

Your consent comes first. Before any connection is made, we show you a consent screen describing what we will access and why. Nothing is collected until you agree, and we keep a record of the consent you gave (what data, for which purposes, and when).

Your password stays with the retailer.You sign in on the retailer's own login page. Squirroo never sees or stores your retailer password.

What we collect from a connected retailer

• Purchase history / receipts — items purchased, quantities, prices, discounts, purchase dates, and store locations
• Basic profile details — your name and loyalty card details, used to link receipts to your Squirroo account

Why we collect it

We use retailer data only to provide the Squirroo service:

• Import your receipts automatically so you don't have to scan or type them
• Compare prices across supermarkets to find you savings
• Show you insights about your grocery spending

We do not sell your retailer data, share it with advertisers, or use it for purposes beyond the ones above.

Data retention

• Your link to a supermarket account is kept only while it is connected in Squirroo. When you disconnect, we remove the link from our side.
• Imported receipt data is kept for up to 24 months to power your spending history and insights, after which it is automatically deleted.
• If you delete your Squirroo account, your data is deleted rather than retained for the full period.

Your rights and controls

• Disconnect anytime. In Settings, you can disconnect Woolworths or Coles and choose whether to delete your imported receipts for that retailer. Disconnecting removes the link from our side.
• Withdraw consent. Disconnecting a retailer withdraws your consent for future collection from that retailer.

Security

Data is stored on Google Cloud infrastructure in encrypted form in transit and at rest. Access to production data is restricted.

Non-affiliation

Squirroo is an independent app. We are not affiliated with, endorsed by, or sponsored by Woolworths Group, Coles Group, or any supermarket. All product names and trademarks are the property of their respective owners.

Contact

For privacy questions, contact squirroo.labs@gmail.com.