Privacy policy
Last updated 6 November 2026
The short version
Squared reads the email and calendars you connect so it can run your family's life admin. Here is what that means in practice:
- You choose what Squared reads. Nothing is connected until you connect it, and you can disconnect at any time.
- We use your data to run Squared for you. It builds a private record of your household and turns it into your week, your to-dos and suggestions for what to do next.
- We never sell your data or use it for advertising.
- We don't use your email or calendar to train general models, ours or anyone else's.
- Squared asks before it acts. It never pays, signs or sends anything in your name without your say-so.
- You can see, download or delete your data from Settings, or by emailing us.
The rest of this page gives the detail.
1. Who we are
Squared is run by Life Squared Limited, trading as Squared, a company registered in England and Wales (company number 17562934). Our registered office is International House, 64 Nile Street, London, England, N1 7SR. Life Squared Limited is the controller of your personal data, which means we decide how it is used and are responsible for protecting it. In this policy, "we" means Life Squared Limited. Our Information Commissioner's Office (ICO) registration number will appear here shortly.
This policy covers the Squared iPhone app, our website and any guest links we send to people you invite.
Questions, or want to use your rights? Email squaredprivacy9@gmail.com or write to us at the address above. We reply within one month.
2. What we collect
We collect only what Squared needs to work. Most of it comes from the accounts you choose to connect.
| What | Examples | Where it comes from |
|---|---|---|
| Account details | Name, email address, Google account ID, profile photo | You, when you sign in with Google |
| Messages including: sender, recipients, subject, date, body and attachments. | Gmail, once you connect it | |
| Calendar | Events, times, places, attendees, descriptions | Google Calendar, once you connect it |
| Your household record | Family members, home, schools and clubs, car, insurance, subscriptions, documents and money accounts that Squared finds or you add | Squared builds it from the above, and you check and correct it |
| What you tell Squared | Instructions in plain English ("Leave it to Squared" rules), approvals, corrections, plans you authorise, messages to us | You |
| People you invite | Name, email or phone number | You |
| App and device data | Device model, iOS version, app version, crash reports, push notification token, how you use app features | Your phone and the app |
| Messaging groups (V2) | Messages in WhatsApp groups you choose to share | You, when you connect them |
| Bank data (V2) | Account names, balances, transactions | Your bank, through a regulated open banking provider, when you connect it |
| School apps (V2) | Notices, dates, payment requests | School apps you connect |
We do not collect your Google password. You sign in through Google, and Google gives us a token that you can revoke at any time.
Your email and calendar will contain information about other people, and may contain sensitive information such as health details. Section 6 explains how we handle that.
3. How we use it, and why we're allowed to
Data protection law requires a lawful basis for each use. Ours are below.
| What we do | Lawful basis |
|---|---|
| Read your connected email and calendar to find what matters to your household: dates, deadlines, bookings, bills, school notices | Contract: it is the service you signed up for |
| Build and update your household record, and ask you to confirm what Squared has learned | Contract |
| Turn that record into your family week, to-do list, money view and suggestions ("use cases") shown to you | Contract |
| Prepare plans and carry out actions you authorise, such as adding an event, drafting a reply or booking | Contract, and your instruction each time |
| Share specific items with people you invite, such as a job for a grandparent to confirm | Contract, at your request |
| Keep Squared secure, prevent fraud and abuse, fix bugs | Legitimate interests: running a safe, working service |
| Improve Squared for you, for example learning from your corrections so its suggestions fit your family | Contract and legitimate interests. This learning stays within your account. |
| Understand which features people use, using app usage data only (never email or calendar content) | Legitimate interests. You can opt out in Settings. |
| Send you service messages, such as security alerts and changes to this policy | Contract and legal obligation |
| Send product news or invite you to research calls | Consent. You can unsubscribe at any time. |
| Keep records we are required to keep, and respond to lawful requests | Legal obligation |
We will not use your data for a new purpose that doesn't fit these without telling you first, and asking for consent where the law requires it.
We never sell your personal data, use it for advertising, or use it to decide on credit, insurance or employment.
4. Data from your Google account
Squared's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
In practice:
- What we access. With your permission we read your Gmail messages and your Google Calendar events, and create or update events on the family calendar you choose. We ask only for the Google permissions these features need. Google's consent screen lists them before you agree.
- What we use it for. Only to provide and improve the features you can see in Squared: your household record, your family week, your to-dos and the suggestions and actions Squared shows you.
- What we don't do. We don't sell Google data. We don't use it for advertising, retargeting or interest-based ads. We don't use it to decide creditworthiness or for lending. We don't transfer it to data brokers or information resellers.
- No training of general models. We don't use Google data to develop, improve or train generalised or non-personalised AI or machine learning models. Neither do the providers we use to process it.
- People don't read it. Our staff can't read your email or calendar unless you ask us to (for example, to help with a support request and with your explicit permission), it is needed for security or to investigate abuse, or the law requires it.
- Who else receives it. Only the service providers in section 7 that we need to run Squared, under contracts that hold them to these same limits.
- How to stop it. Disconnect Gmail or Calendar in Squared's Settings, or remove Squared at myaccount.google.com/permissions. Section 8 explains what we then delete.
5. How Squared reads and decides
Squared uses automated tools, including a large language model provided by Google (Gemini), to read your email and calendar, pick out what matters, and suggest what to do. A person at Squared is not involved in each suggestion.
- The model provider processes data for us only. It receives the text needed for each task, returns the result, and is contractually barred from using your data to train its models or for any purpose of its own. We use Gemini through Google Cloud's Vertex AI, which does not use our data to train models. Google may hold the text in memory for up to 24 hours to speed up responses, and may log it to detect abuse of its services.
- Squared can get things wrong. That is why it asks you to confirm what it learns (Wrong / That's right / Almost) and shows you a plan before it acts.
- You stay in charge of decisions. Squared doesn't make decisions that have legal or similarly significant effects on you without your involvement. It always asks before paying, signing or sending anything in your name. Every action it takes is shown to you afterwards.
- Learning stays with you. When Squared learns from your approvals and corrections, that learning applies to your household only.
If you think Squared has got something wrong about you, correct it in the app or contact us.
6. Other people, children and sensitive information
Other people in your email and calendar. Your inbox includes messages from schools, clubs, friends, family and businesses. Squared processes what it needs about them to run your household admin, on the basis of our legitimate interests and yours. We never contact them unless you ask us to, and we never share records about other people onward. People who are not Squared users can ask us about their data at squaredprivacy9@gmail.com.
Your children. Squared is for adults; you must be 18 or over to create an account. Your household record will include information about your children, such as names, ages, schools, clubs and appointments. We use it only to help you organise family life, give it extra care, and never use it for marketing or profiling of the child.
Your partner and shared records. Each person owns their own records and chooses what to share. When partners share a record, such as the home or a child, the two versions merge into one that both can see. Records you haven't chosen to share stay private to you.
People you invite as guests. Grandparents, a nanny or other parents see only the items you send them through a guest link. We use their contact details to send that link and record their reply. Each link may invite them to join Squared; we won't send them further marketing unless they sign up.
Sensitive information. Email can contain health details, religious or political information, or details of a child's needs. Squared doesn't go looking for these, but it may process them where they sit in your messages. Where it surfaces them, it is only to help you with the task they relate to, such as a GP appointment.
7. Who we share it with
We share personal data only with the service providers we need to run Squared. They act on our instructions under written contracts, keep it secure, and may not use it for their own purposes.
| Provider | What they do | Data involved | Location |
|---|---|---|---|
| Google Cloud | Hosts our servers and database | All data held by Squared | [UK / EU] |
| Google (Gemini) | Reads text to extract details and draft suggestions | Email and calendar content needed for each task | [Same Google Cloud region] |
| Sign-in, Gmail and Calendar access | Account details; calendar changes you approve | Global | |
| Apple | App distribution, push notifications | Device token, notification text | Global |
| [EMAIL PROVIDER] | Sends account and guest-link emails | Name, email address | [Location] |
| [ANALYTICS / CRASH TOOL] | App usage stats and crash reports | App and device data only | [Location] |
| [OPEN BANKING PROVIDER] (V2) | Connects your bank accounts | Bank data you choose to share | [Location] |
We also share data:
- With people you choose, such as your partner or a guest, when you share a record or send a link.
- When you authorise an action, with the business involved. For example, when Squared books a dentist appointment it sends the details that booking needs.
- If the law requires it, or to protect someone's safety, or our rights.
- If Squared is sold or merges, with the new owner, who must keep to this policy. We will tell you before that happens.
8. Where it's stored, how long we keep it, and how we protect it
Transfers outside the UK. Some providers process data outside the UK, for example in the US. When they do, we use the protections UK law requires: a UK adequacy decision (including the UK Extension to the EU-US Data Privacy Framework), or the ICO's International Data Transfer Agreement or Addendum. Ask us for a copy.
How long we keep it.
| Data | How long |
|---|---|
| Raw email and calendar content | Only as long as needed to process it, then deleted within [X days]. We keep the details Squared extracted in your household record. |
| Your household record and settings | While your account is open |
| After you disconnect Gmail or Calendar | We stop reading it at once and delete the raw content within [X days]. Your household record stays unless you delete it. |
| After you delete your account | Deleted within 30 days, and from backups within [90] days |
| Guest contact details | Until the guest link expires, or for [X months] if unanswered |
| Crash and usage data | [X months] |
| Records we must keep by law, such as billing | As long as the law requires, usually 6 years |
Security. Data is encrypted in transit (TLS) and at rest. Google access tokens are stored encrypted and separately from content. Access by our team is limited to those who need it, logged, and protected with multi-factor authentication. If a breach puts you at risk, we will tell you and the ICO as the law requires.
9. Your rights and controls
In the app. Settings shows which accounts Squared reads and exactly what it reads from each. From there you can disconnect any account, correct your household record, change what Squared may do without asking, turn off usage analytics, and delete your account.
Your legal rights. Under UK data protection law you can:
- get a copy of your data, and receive it in a portable format
- have inaccurate data corrected
- have your data deleted
- restrict or object to how we use it, including use based on legitimate interests
- withdraw consent at any time, where we rely on consent
- ask for a person to review an automated decision that significantly affects you
To use any of these, email squaredprivacy9@gmail.com. We may ask you to confirm your identity. We reply within one month, and it's free.
10. Changes and complaints
Changes. We'll update this policy as Squared changes, for example when we add bank or WhatsApp connections. If a change affects how we use your data, we'll tell you in the app or by email before it takes effect, and ask for consent where the law requires it. The date at the top shows the latest version.
Complaints. Please contact us first at squaredprivacy9@gmail.com so we can try to put things right. You can also complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113.