Last updated: April 2026
Squazyo™ ("we", "our", "us") operates a squash coaching platform that connects players, parents, and coaches for virtual and in-person sessions, including live Tournament Mode coaching. This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using the Squazyo mobile application or website you agree to the collection and use of information in accordance with this policy.
When you create an account we collect your name, email address, password (stored as a salted hash by Supabase Auth), date of birth (used to derive account type — adult, junior 13–17, or junior_restricted under 13), an optional nickname, and a role (player, parent, coach, or academy owner). Coaches additionally provide bio, experience, specializations, session types, location, country, and hourly rate. Parents may provide contact details for the children they manage. Academy owners provide an academy name and a unique invite code.
Squazyo uses Stripe to process all payments and coach payouts (Stripe Connect). Card numbers, CVV codes, expiry dates, and bank account details are collected directly by Stripe and are never stored on Squazyo servers. We retain only Stripe customer, payment intent, and connected account identifiers to reconcile bookings and payouts. For academy players who pay externally (Zelle, cash, bank transfer) a coach may record the amount and method in the app for bookkeeping only.
Players and parents can upload match videos to the Squazyo video library, stored in a private Supabase Storage bucket. Uploads use signed URLs with a one-hour expiry and require authentication to view. Deleted videos move to a "Recently Deleted" bin for 30 days before permanent removal. We do not share your match videos with third parties except with the coach you explicitly share them with for video analysis.
For every booking we retain session date and time, session type, participating user IDs, package information, coach notes, completion status, and reviews. For Tournament Mode sessions we store the video call link (FaceTime or WhatsApp) that you choose to share with your coach. The call itself takes place on Apple's or WhatsApp's infrastructure and is not recorded, transmitted, or stored by Squazyo.
We record your device timezone (from expo-localization) and preferred currency so amounts display correctly. If you opt in to push notifications we store an Expo push token. We log anonymous diagnostic events so we can detect errors and improve the app. We do not use third-party advertising SDKs.
We use information to: (a) create and manage your account; (b) match players with coaches; (c) process bookings, subscriptions, and payouts via Stripe; (d) send push notifications and in-app messages; (e) operate safety features such as under-13 parental approval, family accounts, and dispute resolution; (f) comply with legal obligations; and (g) improve the service. We do not sell your personal information.
We share information with the parties you transact with — coaches see booked players' names, nicknames, and skill levels. Parents see children's bookings, packages, and videos. Academy owners see roster and session history for players who joined via invite code.
Sub-processors: Supabase (database, authentication, storage), Stripe (payments), Expo (push notifications, OTA updates), Apple (App Store, FaceTime, IAP via RevenueCat), Google (Play Store, FCM), and WhatsApp (video calls when chosen by the user). We disclose data to law enforcement only when required by valid legal process.
Squazyo is intended for users aged 13 and older. Users under 13 (junior_restricted) must be linked to a verified parent account and every booking requires parent approval. Parents control payment and video storage for linked children. If we learn we have collected data from a child under 13 without verified parental consent we will delete that data promptly. Contact legal@squazyo.app.
Account information is kept while your account is active. Match videos are retained per your storage quota. Booking and payment records are retained for seven years for tax and audit purposes. When you delete your account, profile, messages, and preferences are erased within 30 days; anonymised aggregates may remain for accounting.
Depending on your location, you may have rights to access, correct, or delete your personal data (GDPR, UK GDPR, CCPA). Use account settings to update your profile, change notification preferences, export videos, and delete your account. Other requests: legal@squazyo.app (response within 30 days).
All traffic uses TLS. Passwords are salted and hashed. Database access is protected by row-level security. Video storage uses signed URLs with short expiries. No online service is 100% secure; if we become aware of a breach we will notify you without undue delay.
Squazyo is operated from the United States. By using the app you consent to transfer of your data to the US and countries where our sub-processors operate. For EEA/UK/Switzerland users we rely on Standard Contractual Clauses.
We may update this policy from time to time. Material changes will be notified in-app. Continued use after the update constitutes acceptance.
Questions? legal@squazyo.app