Squish Alert has no accounts, no logins and no profiles. There is very little to tell,
which is the point.
What we store
A push token. Issued by Apple or Google so we can send you a notification.
It identifies a device installation, not a person.
Your alert settings. Which shops you muted, which tags you follow or muted,
and which shops or items you hide.
Your app details. The app version and whether the phone runs Android or
iOS, so we can fix problems.
Your subscription status. An anonymous RevenueCat ID for this install and
whether its subscription is active and until when. RevenueCat reads this from your app store
purchase; we never see your payment details.
Alerts we sent you. Which restock alerts went to this device and when, so
the app can show your recent alerts.
Shops you suggest. The link you submit, when, what our checks decided, and
the internet address it came from (used only to limit abuse), linked to your device so the
app can show you the outcome.
Reports you file. If you report a shop, the reason, any note you add and
our reply, linked to your device so the app can show you the outcome.
What we do not store
No name, email address, phone number or postal address.
No location, contacts or photos. We store the push token, a random installation identifier, a one-way hash of its device key, app/platform version and alert settings so the service can authenticate and deliver alerts.
No browsing history, and no record of which shops you opened.
No adverts in the app, and we never sell data.
Who else sees it
Apple and Google handle payments and deliver notifications, relayed through Expo's push service.
RevenueCat manages subscriptions on our behalf.
Our hosting provider (Railway) stores the database. Shop links you suggest, and public
retailer pages considered during discovery, are checked by AI models through OpenRouter.
The model receives the link and up to 6,000 characters of the public retailer page
needed to assess it; that retailer text can contain information published by the shop, such as reviews
or contact details. We do not send your name or contact details to OpenRouter. Some of these providers
are in the United States, under their standard data-protection terms. Nobody else receives your data,
and none of it is sold.
Why we use it
To provide the service you subscribe to (contract): the push token, your
alert settings, your app details and your subscription status.
To keep the service fair and working (legitimate interests): the internet
address on shop suggestions, used only for daily limits, and the reports you file.
How long we keep it
Your device, push token and settings: until you delete them, or 12 months after the app last
contacted us.
The internet address on a shop suggestion: 30 days.
The record of alerts sent to your device: 30 days.
Shop suggestions and reports themselves: kept, without a direct device link once your device is deleted. A one-way per-device report key remains only to limit abuse; the shop facts themselves describe shops rather than people.
Your rights
You can ask to see, correct, delete or restrict the data about your device, object to how it is
used, or ask for a copy. Delete my data in Settings does the most common of these at once; for
anything else, email us. If you are unhappy with how we handle your data you can complain to the
Information Commissioner's Office at ico.org.uk if you
are in the UK. Wherever you live, including the United States, you can use these same choices, and we
do not sell your data or share it for advertising.
Deleting it
Settings → Delete my data removes your device, its push token, its settings and its alert history immediately,
and unlinks any shops you suggested or reports you filed, erasing the internet address stored with
them. Alerts stop until you next open the app. You can also email nicholas.orr099@gmail.com and we will do it.
Who we are
Squish Alert is run by Nicholas Orr, who is the data controller for the information above.
Contact: nicholas.orr099@gmail.com.
Shop data
We read publicly available product pages from retailers to determine stock. We identify
ourselves as NeedohTrackerBot and limit how often we request any one shop.
Last updated 2 November 2026. If this policy changes, we update this page
and the date above.