Privacy Policy

Last updated: 2026-10-27.

This policy covers the Squizzy mobile app (iOS and Android) and its server at api.trysquizzy.com (together, "Squizzy"). Squizzy finds public Threads conversations where your product is relevant, drafts a reply, and posts it only when you tap publish. It is built for makers and businesses promoting their own product.

Who we are

Squizzy is operated by TABLOW, a sole proprietorship registered in Ontario, Canada. TABLOW is the controller of the personal data described here. Contact for all privacy questions and requests: support@trysquizzy.com.

Squizzy is not affiliated with or endorsed by Meta.

Data about you

You sign in with Threads. We ask Threads for these permissions: threads_basic, threads_keyword_search, threads_content_publish, threads_manage_replies, threads_read_replies. We collect:

Threads account: your Threads user ID, username and access token. The token is encrypted at rest and stays on our server, never on your device.
Your posts and replies: read when you run profile analysis (at setup, up to 3 times a day) to build your product profile. Your own replies are also checked so Squizzy skips conversations you already answered.
What you enter or confirm: product profile, keywords, reply drafts and edits.
Published replies: a record of each reply you publish through Squizzy (text, the post it answers, time). For a week after you post, we check once a day whether the post's author replied to your reply, and keep only a yes/no. We don't store who else replied or what anyone wrote.
Blocked authors: usernames of people you chose not to see again.
Device: a push notification token.
Subscription: whether Squizzy Pro is active and until when, and the random subscriber ID used with RevenueCat. Payment details stay with Apple or Google; we never see them.
Consent and usage: the time you agreed to AI processing, and daily usage counts used to enforce limits.

Threads does not give us your email address. If you email us, we keep the conversation to answer you.

Data about other people

Squizzy searches public Threads posts for your keywords. For each post found it processes the text, the author's username, the link and the time.

Posts waiting to be scored can sit in our processing queue for up to about 24 hours (for example when the daily AI limit is reached).
Posts scored as not relevant are discarded right after scoring. We keep only their post IDs, for up to 30 days, to avoid processing them twice.
Relevant posts are shown to you as opportunities. If you do not act on one, it is deleted after 7 days. If you reply, the post text, the author's username, the link and the reason it was a fit are removed after 7 days; the remaining reply record (post ID, score, status, time) is deleted after 90 days.
A small random sample of scored posts (text, author username and post time) is kept for up to 14 days to check and improve scoring quality. It is evaluated by AI and is not used to train AI models. If you withdraw AI consent, the samples from your searches are deleted right away.

Opt out: if you do not want Squizzy to process your public posts, email support@trysquizzy.com with your Threads username. We add your username to an exclusion list, Squizzy skips your posts, and posts of yours we already hold are deleted within a day. We keep your username on that list until you ask us to remove it.

How we use data and why (legal bases)

To provide Squizzy to you (contract): sign-in, profile, keyword search, drafts, publishing, deletion.
AI analysis (your consent, given in the app): analyzing your posts, scoring public posts and writing drafts. Without AI consent, Squizzy still searches your keywords and shows matching public posts without AI scoring; nothing is sent to Anthropic.
Push notifications (your consent, given in your device settings).
Processing public posts (legitimate interests): surfacing conversations relevant to your product. We limit the impact on authors with short retention and the opt-out above.

We do not sell personal data, show ads, or use tracking or advertising SDKs.

Who processes data for us

Anthropic PBC (USA): Claude AI analyzes your posts, scores public posts and writes drafts (it receives the post text, and the author's username when drafting a reply). Used only after your consent in the app. Per Anthropic's commercial terms, data sent through its API is not used to train its models.
Cloudflare, Inc. (global network): hosting, database and email routing.
RevenueCat, Inc. (USA): manages Squizzy Pro subscriptions bought through the App Store or Google Play. It receives a random subscriber ID we create for your account (not your name or Threads account) and the store's purchase records.
Google LLC (Firebase Cloud Messaging): delivers push notifications. It receives your push token and the notification text, which can include a public post's author username and a short excerpt.
Apple Inc. (Apple Push Notification service, APNs): on iPhone, Firebase delivers push notifications through APNs, which receives the same token and notification text.
Meta Platforms (Threads): receives the replies you approve, to publish them on your account.
The operator receives service notifications by email (Gmail). These do not include post text.

International transfers

Data is transferred from your country to the USA (Anthropic, Google, Apple, Meta, RevenueCat) and to Cloudflare locations worldwide. We rely on these providers' contractual safeguards for such transfers.

How long we keep data

Account data: until you delete your account. Accounts disconnected from Threads, or needing a new sign-in, for more than 30 days are deleted automatically.
Drafts: 30 days.
Published reply records: until you delete your account. The other person's username is removed after 7 days.
Push tokens: until you sign out or the token stops working.
Blocked authors: until you delete your account.
Exclusion (opt-out) list: usernames, until the person asks to be removed from it.
Public posts: see "Data about other people" above.
Deletion request log: confirmation code and timestamps only, no personal data.

Security

Threads access tokens are encrypted at rest. Only our server calls the Threads API. Data travels over HTTPS.

Your rights

You can ask to access, correct, delete or export your data, object to processing, or withdraw consent at any time. Email support@trysquizzy.com. To delete everything right away, use Settings → Delete account in the app. See data deletion.

You can also complain to a regulator: in Canada, the Office of the Privacy Commissioner of Canada; in the EU, your local data protection authority; in Korea, the Personal Information Protection Commission or the KISA Privacy Center (see the Korean policy).

Age

Squizzy is for people 18 or older using it for their business or work. We do not knowingly collect data from children.

Changes

We update the date above when this policy changes. For material changes we will notify you in the app before they take effect.

Contact

TABLOW, Ontario, Canada · support@trysquizzy.com