Privacy policy.
The information below describes which data Squadly processes and for what purposes.
1. Controller
Four Keys Interactive GbR
Seestr. 110
71067 Sindelfingen, Germany.
Contact: [email protected] · +49 (0)7031 / 68 80 421.
2. Purpose and scope
We process personal data in order to technically provide Squadly, authenticate users, manage groups and events, and operate the voting and planning features.
- User authentication and account management
- Management of groups, memberships, and invitations
- Conducting activity and date polls
- IT security, stability, and abuse detection
3. Which data we process
Depending on how you use the service, we process in particular account data, session and security data, group and membership data, and content within the app.
- Account data: technical provider identifier, optional Google sign-in, chosen username
- Session data: session token, expiration times, IP address, user agent
- Group data: group name, roles, memberships, invitation codes
- Event data: titles, descriptions, activity options, time slots, and poll results
4. Local storage
The web application stores technically necessary information locally, such as session data and theme settings, so that sign-in and use of the service work.
This storage is based on Section 25(2) TDDDG and Article 6(1)(b) and (f) GDPR.
5. Legal bases
Processing is based in particular on Article 6(1)(b) GDPR for providing the app, Article 6(1)(c) GDPR for legal obligations, and Article 6(1)(f) GDPR for security and stability interests.
Where consent is required, we process data on the basis of Article 6(1)(a) GDPR.
6. Recipients and service providers
To provide the service, we use providers for hosting, infrastructure, and authentication. When Google sign-in is used, the technical data required for that purpose is transmitted to the relevant OAuth provider.
Some services may involve transfers to third countries, particularly the United States. Where required, such transfers are based on appropriate safeguards.
7. Storage period
We store personal data only for as long as necessary for the stated purposes.
Account and group data remain stored until deletion unless statutory retention obligations require otherwise. Sessions end through logout, expiration, or revocation.
8. Your rights
You have, in particular, the right to access, rectification, erasure, restriction of processing, data portability, and objection to certain processing activities.
You also have the right to lodge a complaint with a data protection supervisory authority. The competent authority for us is, in particular, the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg.