Privacy Policy

Effective date: April 25, 2026

Summons ("we", "us", "our") operates the Summons mobile application. This policy describes what personal data we collect, how we use it, and your choices regarding that data.

1. Data We Collect

Data	Source	Purpose
Email address	Google or Apple Sign-In	Account identification and contact
Username	You provide it	Display name visible to friends and squad members
Google ID / Apple ID	OAuth provider	Authentication
Device push token	Your device (via Expo Notifications)	Sending push notifications you have opted into
Timezone	Your device	Displaying session times in your local time
Friend relationships	Your actions in the app	Social features (friend list, suggestions)
Squad membership	Your actions in the app	Group features
Session RSVPs	Your actions in the app	Scheduling features
Chat messages	Messages you send in squad and session chats	Delivering messages to other squad members, content moderation

We do not collect precise location data, contacts, or photos.

2. How We Use Your Data

We use your data solely to operate and improve the Summons app:

Authenticate you and maintain your session
Display your profile to friends and squad members
Store and deliver chat messages you send to other squad members
Deliver push notifications about sessions, friend requests, and squad activity
Show session times in your local timezone
Enforce our content moderation and acceptable-use policies

We do not sell your personal data. We do not use your data for advertising or profiling.

3. Third-Party Services

We use the following third-party services that may process your data:

Google Sign-In / Apple Sign-In — authentication. Governed by Google's Privacy Policy and Apple's Privacy Policy.
Expo Notifications — push notification delivery.
Supabase — database hosting and storage. Your account data is stored on Supabase's infrastructure. Governed by Supabase's Privacy Policy.
Cloudflare — network security and content delivery. API traffic is routed through Cloudflare's network. Governed by Cloudflare's Privacy Policy.
Sentry — error monitoring and diagnostics. May process technical data such as device information and error context to help us fix issues. Governed by Sentry's Privacy Policy.

Each third-party provider is contractually required to protect your data to a standard at least equal to this policy.

4. Data Retention

We retain your account data for as long as your account is active. Chat messages are retained for as long as the squad they belong to exists. If you delete your account, we permanently delete all associated personal data, including your chat messages, within 30 days.

5. Your Rights

You may at any time:

Access your data by viewing your profile in the app.
Update your username through the app.
Delete your account and all associated data using the "Delete account" option on the Profile screen.
Revoke consent by deleting your account or contacting us to request data removal.

6. Data Security

We protect your data with industry-standard measures including encrypted connections (TLS), hashed tokens, and access controls on our servers. No method of transmission or storage is 100% secure, but we take reasonable steps to protect your information.

7. Children's Privacy

Summons is not directed at children under 13. We do not knowingly collect data from children under 13. If we learn we have collected such data, we will delete it promptly.

8. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes by posting the updated policy in the app. Your continued use of Summons after a change constitutes acceptance of the updated policy.

9. Contact Us

If you have questions about this policy or your data, contact us at summons@sloan.cc.