Plain privacy guide · Draft for private preview

Your family’s info stays small.

An adult owns the account. Children can use Squish Scout only with that adult. We do not ask children for their real name, email, school, birthday, precise location, or contacts.

What can be public

A Public clue can show the collectible, store, broad quantity, shelf price, and time seen. It does not show the scout’s name, household, email, or home location.

What stays private

Private to your household: your collection, wanted list, hunt names, budgets, search ZIP, Scout Alerts and read state, and account details. Other scouts cannot open them. Nearby product watches use the one ZIP chosen by the account owner; this feature does not store a street address or GPS position.

Private clue reports: an authorized reviewer can see the reported clue, report text, and decision history. The review response does not attach the reporter’s name, email, user ID, or household ID. Report text is still treated as private because a person might type personal information into it.

Private store checks: a store claim can include a business website and a short ownership note. Only the claimant and authorized reviewers receive claim status. The ownership note is not public. A Stock Sheet file stays on the store owner’s device until Import is tapped. We keep the accepted product updates, not the raw CSV, and ask stores never to include customer, order, or employee information.

What we collect

• The adult’s sign-in identity and email.
• The household search ZIP chosen by the account owner.
• The clues, confirmations, collection choices, hunts, reports, support requests, store claims, normalized store inventory updates, and Scout Alert read choices the adult account submits.
• Basic security logs needed to keep the service working.

What a verified store can see

A verified store can receive broad demand bands only after at least 25 households contribute to one category and area. We do not show the store which families contributed, their ZIP codes, or an exact household count.

Photos are off

Photo uploads are disabled during the private preview. We will not turn them on until automated checks, human review, deletion, and appeal tools are ready.

Your choices

The account owner can change the search ZIP or start deletion in Grown-up Zone. Deletion is also available from the account deletion page. A seven-day recovery window protects against accidental loss. After recovery, the worker cancels an active subscription, deletes the owner’s Supabase adult identity, and erases the owned Scout Team data. Invited adults keep their separate accounts but are detached from the erased team. Scout keeps only a non-identifying completion receipt and, for 30 days, a one-way identity block so a still-valid access token cannot recreate the deleted account. Legally required paid Scout financial records pause for an approved records review. We do not sell personal information.

Launch status: The deletion worker code is ready and closed by default. Production secrets, a scheduler, disposable-account end-to-end proof, an approved retention policy, completion-notice delivery, legal review, and a working support channel remain public-launch gates.

Last updated August 19, 2026.