Squish Find Privacy Policy

Effective October 21, 2026 · Version 2026-10-21

Who we are

Joseph S Apps, LLC operates Squish Find, its iOS and Android apps, and its companion website at www.squishfind.com. Contact itsjosephsapps@gmail.com for support, privacy questions, access, correction, export or deletion requests.

Information we process

You can browse public community reports without an account. Accounts use your email, authentication-provider identifier, verification status and sign-in session. With Sign in with Apple you may choose an Apple private-relay email. We record your confirmation that you are at least 13 and accept our community terms; we do not ask for an exact birthday. Contributions include your product description, public shop or online product link, observation time, optional price and notes, photo, and related confirmations or moderation reports. We store watches, notification choices where enabled, blocked-account relationships and policy acknowledgments associated with your account. Do not include names, faces, license plates, home addresses or other private information in a post.

Optional location, camera and photos

Squish Find requests foreground location only when you choose Use my location in Spotted. The coordinates and reported accuracy pass through our server to Google Places to suggest nearby public shops. Squish Find does not store those coordinates in your profile, report, location history or application logs, and does not request background location. You explicitly confirm the public shop before posting. You may decline location and search by shop/city/ZIP or enter a public shop manually. A published shop identifies a retail location, never the contributor's device position.

Camera or photo-library access is requested when you choose that option. A photo remains a local draft until you submit. The server decodes and re-encodes accepted images and strips original EXIF metadata before private storage. Photos and posts await moderation before appearing publicly. A photo may still reveal information visibly; review and crop it before submitting.

Public information and service providers

Approved reports, sanitized proof photos, public shop details or retailer links, observation times, optional prices/notes and confirmation totals can be seen by other users and shared publicly. Account email, authentication identifiers, device position and private storage paths are not included in the public report. Authorized staff can review pending photos, reports and relevant account records for moderation, safety and support.

Google Firebase and Google Cloud provide authentication, databases, private photo storage, website hosting and operational/security logs. Google Maps/Places provides interactive maps and public-shop suggestions. Loading a map sends the requested public search area or shop, network information such as IP address, and browser/device information to Google; Google may use its own cookies and display map advertisements under its policies. Review Google's Privacy Policy and Google Maps Terms. Outbound Shop Now and directions links open independent retailer/map services governed by their policies. Apple and Google handle native purchases if subscriptions are offered; Squish Find does not receive payment-card numbers. Verified purchase, entitlement and renewal references may be associated with your account to deliver purchased features. Push delivery, when enabled and opted into, uses a device push token or browser push subscription and watch preferences.

We use information to provide the service, verify accounts and access, process contributions, enforce safety rules, support optional watches/purchases, prevent abuse, and handle privacy requests. We do not sell personal information or use an advertising identifier or an analytics/tracking SDK in the apps. Our hosting providers process operational and security logs. Information may be disclosed where legally required or reasonably necessary to protect rights, safety and security. Service providers may process information in the United States and other countries.

Optional watch alerts

Alerts require your permission on each device or browser. We use Apple Push Notification service for iOS, Firebase Cloud Messaging for Android, and your browser’s push provider for the website. Private registrations include your account identifier, device token or browser subscription endpoint and encryption keys, platform, and registration update time. Notification providers receive the destination and a generic message about a matching approved sighting; our notification text does not include your device location, photo or private account details. Delivery may be delayed or unavailable and does not guarantee stock. Use Wish list to disable alerts, or change permission in device/browser settings. Signing out removes that device’s server registration when the request succeeds; if offline, use system settings to stop notifications immediately. Account deletion removes associated registrations and delivery records. Registration information is kept while needed to provide opted-in alerts; operational delivery records are kept as needed for service reliability and security.

Retention and deletion

Account content and preferences are kept while needed to provide your account and the service. Availability labels expire separately from record retention: an old report may remain historical until removed. Temporary shop-selection IDs expire after 15 minutes; expired selection and daily-limit records are removed by scheduled cleanup. Choose Delete my account in Profile/You to remove the authentication account and associated posts, photos, watches and other account records. A recent sign-in and an explicit deletion confirmation protect this action; linked Apple authorization is revoked as part of deletion. Public reports are hidden when deletion begins. Failed external deletion steps remain in a private retry queue until completed. Deleted photos may remain recoverable in Google Cloud's configured seven-day soft-delete retention before permanent expiry. Firestore's short recovery window and infrastructure/security logs can temporarily retain limited operational information. We do not promise immediate erasure from every provider backup or from copies other people made of a public post. Information necessary for a legal obligation, fraud investigation or dispute may be retained only as needed for that purpose.

Your choices and rights

Use account settings to download your account data, sign out, block contributors or request deletion. You can also email us or use our account-deletion instructions without reinstalling the app. We verify ownership before releasing private data or acting on an email request. Never send a password, verification code, government ID or payment details. Depending on your location, you may have rights to access, correct, delete, restrict or object to processing, receive a copy of your information, or complain to a privacy authority. Contact us to exercise applicable rights. Deleting an app account does not cancel an Apple/Google subscription; manage renewal separately in your store settings.

Age and policy changes

Squish Find is for adult and teen collectors age 13+ and parents, and is not an under-13 posting service. If you are under 13, do not create an account or submit content. Minors must have any parent/guardian permission required by their local law. Contact us if you believe a child under 13 submitted personal information so we can investigate and remove it. We may update this policy; material changes will be dated and communicated through the service where required.

Terms · Community guidelines · Support