squeezeBack to sign in
Legal

Privacy Policy.

Effective May 18, 2026

This Privacy Policy explains how Everywhen Software LLC, doing business as Lemon Drop Labs (“Lemon Drop Labs,” “we,” “us,” or “our”) collects, uses, shares, and protects information when you use the Squeeze website, mobile applications, and related services (the “Service”).

The short version: Squeeze is a budget tracker. We collect the minimum information needed to sign you in and store the budget data you enter. We do not sell your data, we do not show third-party ads, and we do not share your data with advertising networks. We do not use your data to train AI models. We do not connect to your bank.

Squeeze offers a Free tier and a paid Squeeze Premium tier. On the Free tier, we may show you first-party promotions for Squeeze Premium and our own features. These promotions are served by us and do not involve any third-party ad networks. Premium subscribers do not see upgrade prompts.

1. Information we collect

1.1 Information from your identity provider

When you sign in with Google or Apple, your provider sends us the following profile information so we can create and identify your account:

  • Your email address
  • Your name
  • Your profile picture URL (optional, used only for in-app display)
  • A stable provider user identifier

We do not receive your provider password. We request only the minimum OAuth scopes needed to identify you (typically openid, email, and profile for Google, or name and email for Apple).

1.2 Information you provide

You enter information into the Service to manage your budget, including:

  • Transactions (amount, date, merchant or description, category, kind)
  • Categories (name, color, icon)
  • Budgets (name, cap amount, interval, carry-over, optional account links)
  • Account labels (name, icon — no bank credentials or account numbers)
  • Recurring charges (amount, cadence, next date)

Squeeze does not connect to any bank or financial institution. You decide what to enter and what to leave out.

1.3 Information collected automatically

When you use the Service, we and our infrastructure providers may automatically collect:

  • Your IP address (used for rate limiting and basic abuse prevention)
  • Browser or device information sent in HTTP request headers (user agent, language)
  • Standard server and application logs (timestamps, request paths, response status codes, errors)
  • A session cookie (sq_session) that contains an encrypted, HTTP-only authentication token
  • A small amount of local-only data such as your theme preference and active budget selection, stored in your browser’s localStorage or in secure device storage on mobile

We do not use third-party analytics, advertising trackers, or cross-site cookies. We do not use cookies for behavioral advertising. We do not collect mobile advertising identifiers (IDFA, AAID).

1.4 Purchase and billing data

When you purchase Squeeze Premium, your payment is processed by Apple (via in-app purchase on iOS) or Google(via Google Play Billing on Android). We do not receive or store your payment card number, CVV, or full billing address. We do receive a purchase receipt and transaction identifier, which we use to grant and verify access to Premium features. Squeeze Premium is a one-time, non-consumable purchase — there is no recurring billing.

1.5 First-party promotions (Free tier)

On the Free tier, we may show in-app promotions for Squeeze Premium and other features. To decide which promotions to show, we use only information you have already provided to the Service — for example, the screen you are viewing, your tier, whether you have ever subscribed before, and how long you have been using Squeeze. We do not use the contents of the budget data you enter (your transactions, categories, amounts, merchant names, budgets, accounts, or recurring charges) to select or target promotions. Promotion data stays inside Squeeze and is not shared with third parties for advertising.

2. How we use information

We use the information described above to:

  • Provide the Service to you, including authenticating you and saving the data you enter
  • Maintain and improve the Service, fix bugs, and develop new features
  • Process Squeeze Premium subscriptions and confirm entitlement to paid features
  • For Free-tier users, show first-party promotions for Squeeze Premium and other features we offer, using only information you have already provided to the Service (see Section 1.5)
  • Secure the Service, including detecting and preventing abuse, fraud, and unauthorized access
  • Communicate with you about the Service, including responding to your requests and sending important notices (we do not currently send marketing emails)
  • Comply with legal obligations and enforce our Terms of Service

We rely on the following legal bases where applicable: performance of a contract (to provide the Service you signed up for), our legitimate interests (security, product improvement), your consent (for any future features that require it), and compliance with legal obligations.

3. How we share information

We do not sell your personal information. We do not share your personal information with third-party advertising networks. We share information only as follows:

  • Service providers (sub-processors) that host and operate the Service on our behalf, under contractual confidentiality and security obligations.
  • App store and payment processors: Apple and Google process Squeeze Premium purchases and provide us with the subscription information needed to grant access.
  • Legal and safety reasons: when we believe in good faith that disclosure is required by law, legal process, or to protect the rights, property, or safety of Lemon Drop Labs, our users, or the public.
  • Business transfers: in connection with a merger, acquisition, financing, or sale of assets, in which case we will require the recipient to honor this Privacy Policy.
  • With your direction: when you ask us to share information on your behalf.

3.1 Sub-processors

We currently rely on the following providers to operate the Service:

  • Google — identity provider (OAuth sign-in)
  • Apple — identity provider (Sign in with Apple)
  • Supabase — managed PostgreSQL database hosting
  • Vercel — web application hosting and edge delivery
  • Upstash — rate-limit storage (Redis)
  • Sentry— error monitoring and performance tracking (application errors and stack traces may include contextual data such as request paths and user identifiers)
  • Resend— transactional email delivery (processes email addresses to send welcome and account-lifecycle emails)
  • RevenueCat— in-app purchase and subscription management (processes purchase receipts, transaction identifiers, and subscription status)
  • Expo / EAS — mobile build and over-the-air update infrastructure
  • Apple — in-app purchase and subscription processing on iOS
  • Google Play — in-app purchase and subscription processing on Android

This list may change as we improve the Service; the most current list will appear here.

4. Data retention

We retain the budget data you enter for as long as your account is active. If you delete an individual record in the app (a transaction, category, budget, etc.), it is deleted from our active database. Backups created in the ordinary course of operating the database may persist for a limited period before being overwritten.

Server logs and rate-limit records are retained only as long as needed for security and operational purposes, typically no more than 30 days.

5. Account deletion and your choices

You can:

  • Delete data in-app: remove individual transactions, recurring charges, budgets, accounts, or categories at any time.
  • Sign out: end your session at any time from the profile menu.
  • Delete your account: request deletion of your account and associated budget data by emailing hello@lemondroplabs.io from the email address on file. We will confirm receipt and complete deletion within a reasonable period, except where retention is required by law.
  • Restore your Premium purchase: if you sign in on a new device, use the “Restore purchases” option in the app. Squeeze Premium is a one-time purchase with no recurring charges; there is nothing to cancel.
  • Revoke Google access: visit myaccount.google.com/permissions to revoke Squeeze’s access to your Google account.
  • Revoke Apple access: visit appleid.apple.com/account/manage and remove Squeeze from the “Sign in with Apple” section to revoke its access to your Apple ID.

6. Your privacy rights

Depending on where you live, you may have rights regarding your personal information, including the right to access, correct, delete, or port your data, the right to object to or restrict certain processing, the right to withdraw consent, and the right not to be subject to discrimination for exercising your rights.

To exercise any of these rights, email hello@lemondroplabs.io. We will verify your request by confirming the email on file and respond within the time required by applicable law. You may also designate an authorized agent to make a request on your behalf, subject to verification.

6.1 For California residents

Under the California Consumer Privacy Act (CCPA/CPRA), California residents have the rights described above, plus the right to know the categories of personal information collected and disclosed. The categories we collect are identifiers (e.g., email, account ID), commercial information (Premium subscription status), internet or other electronic activity (logs of your interactions with the Service), and inferences strictly limited to operating the Service. We do not sell or share personal information for cross-context behavioral advertising, and we do not use third-party ad networks. We do not knowingly collect personal information of minors under 16.

6.2 For users in the European Economic Area, United Kingdom, and Switzerland

If you are in the EEA, UK, or Switzerland, Lemon Drop Labs is the controller of your personal data. You have the rights described above under the GDPR or UK GDPR, and the right to lodge a complaint with your local supervisory authority. We rely on Standard Contractual Clauses or other appropriate safeguards for international transfers where required.

7. Security

We use commercially reasonable technical and organizational measures to protect your information, including encryption in transit (HTTPS), authenticated session cookies with short expirations, rate limiting on sensitive endpoints, server-side authorization checks scoped to your user identifier, and storage on managed infrastructure with industry-standard practices. No security measure is perfect; you use the Service at your own risk and are responsible for the security of the identity provider account you use to sign in.

8. Children’s privacy

The Service is not directed to children under 13, and we do not knowingly allow registration by or collect personal information from individuals under 13. If you believe a child under 13 has provided us with personal information, please contact us at hello@lemondroplabs.io and we will delete the account and associated information.

9. International users

Lemon Drop Labs operates the Service from the United States. If you access the Service from outside the United States, you understand that your information will be transferred to, stored, and processed in the United States and other countries where our service providers operate, which may have different data-protection laws than your country.

10. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Effective” date above and, where appropriate, provide an in-product notice. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

11. Contact us

Questions, requests, or concerns about this Privacy Policy or our practices? Email hello@lemondroplabs.io.