legal

Privacy policy

effective date · 27 august 2026

This Privacy Policy governs the access and use of the sqill GO! mobile application (hereinafter “App”), which belongs to and is managed by Success Invitation, S.A., a company registered in Rua Júlio Araújo Vieira, nº 33, 3045-482 Taveiro, Portugal, with the sole registration number at the Commercial Registry Office and legal person 516561073, (hereinafter “Sqill” or “We”).

This Privacy Policy describes how we collect, use, and protect your personal information when you use our Service. By using our Service, you agree to the collection and use of information in accordance with this policy.

1. Information we collect

We collect minimal personal information necessary to provide our Service. The information we collect includes:

  • Email Address: Required for account creation and communication
  • Name: First and last name for account identification
  • Account Information: Basic profile information provided during registration
  • Social Platform Data (when you connect a Meta or TikTok account): user IDs, display names, public profile information, and OAuth access tokens stored securely to maintain authentication.
  • Content & Metrics Data: posts, videos, images, captions, hashtags, and associated metadata retrieved from connected social accounts; performance metrics and audience insights (reach, impressions, engagement, demographic breakdowns — where provided in aggregated form by the platform).
  • Technical Data received via APIs: IP address, device type, browser/app type, language settings, and similar technical identifiers, as transmitted to us by the Meta Graph API or TikTok APIs during authenticated sessions.

We do not collect personal information beyond what is explicitly described above. All information is retained securely and is not shared with third parties except as outlined in this policy.

2. Face data and TrueDepth API use

sqill GO! uses Apple's TrueDepth camera system to enable real-time facial overlays and effects. Here's how we handle face data:

  • Data Access: We only access facial tracking data (such as head position and expressions) required to position digital effects on the user’s face
  • On-Device Processing: This data is processed entirely on-device and is not stored, recorded, or transmitted to our servers or any third parties
  • No Identification: We do not use this data for user identification, authentication, or profiling
  • No Storage: No face mesh, depth map, or biometric information is stored or shared with third parties
  • Real-Time Only: Face data is used exclusively for real-time effects and is discarded immediately after use

This facial data processing complies with Apple's guidelines for TrueDepth camera usage and prioritizes user privacy and security.

3. How we use your information

We use the collected information solely for the following purposes:

  • To provide and maintain our Service
  • To create and manage your account
  • To communicate with you regarding your account or our Service
  • To improve our Service and user experience
  • To comply with legal obligations
  • To retrieve and display metrics, posts, and insights from your connected Meta (Facebook/Instagram) and TikTok accounts, solely for your own use within the App
  • To enable content performance analysis and reporting within the App on your behalf
  • To authenticate and maintain your connections to third-party social platforms via OAuth tokens

We do not sell, trade, rent, or otherwise transfer your personal information to third parties for commercial purposes.

4. Data sharing and third parties

We do not sell your personal data. We may share your information only in the following limited circumstances:

  • Service Providers: We may employ third-party companies to facilitate our Service, provide the Service on our behalf, or assist us in analyzing how our Service is used
  • Legal Requirements: If required by law or to protect our rights and the safety of our users
  • Business Transfers: In the event of a merger, acquisition, or sale of assets
  • Meta Platforms, Inc.: When you connect your Facebook or Instagram account, certain data is transmitted to and from Meta’s servers via the Meta Graph API. Meta processes this data in accordance with its own Privacy Policy.
  • TikTok / ByteDance: When you connect your TikTok account, certain data is transmitted to and from TikTok’s servers via the TikTok APIs. TikTok processes this data in accordance with its own Privacy Policy.

Any third parties we work with are obligated to protect your information and use it only for the specific purposes outlined in their agreements with us. Data obtained via Meta or TikTok APIs is not used for advertising, profiling, or any purpose beyond providing the features you have requested, and is not combined with other datasets in a way that could identify end users.

5. Third-party services

Our app may use third-party services that may collect information used to identify you. Links to privacy policies of third-party service providers used by the app:

6. Data security

We value your trust in providing us with your Personal Information and strive to use commercially acceptable means of protecting it. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

7. Log data

In case of an error in the app, we collect data and information (through third-party products) called Log Data. This Log Data may include information such as your device Internet Protocol ("IP") address, device name, operating system version, the configuration of the app when utilizing our Service, the time and date of your use of the Service, and other statistics.

8. Cookies

Cookies are files with a small amount of data that are commonly used as anonymous unique identifiers. Our Service does not use cookies explicitly. However, the app may use third-party code and libraries that use cookies to collect information and improve their services.

You have the option to either accept or refuse these cookies and know when a cookie is being sent to your device. If you choose to refuse cookies, you may not be able to use some portions of this Service.

9. Children's privacy

Our Services do not address anyone under the age of 13. We do not knowingly collect personally identifiable information from children under 13. If we discover that a child under 13 has provided us with personal information, we immediately delete this from our servers.

If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us so that we can take necessary actions.

10. Your rights

Depending on your location, you may have certain rights regarding your personal information, including:

  • The right to access your personal information
  • The right to correct inaccurate personal information
  • The right to delete your personal information
  • The right to restrict processing of your personal information
  • The right to data portability
  • The right to revoke access to your connected Meta or TikTok accounts at any time, either within the App settings or directly through Facebook/Instagram settings or TikTok settings
  • The right to request deletion of social platform data we hold on your behalf (separate from the data held by Meta or TikTok under their own policies)

To exercise these rights, please contact us using the information provided below.

11. Changes to this privacy policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "effective date" at the bottom of this policy.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

12. Contact us

If you have any questions or suggestions about our Privacy Policy, do not hesitate to contact us:

  • Email: admin@heysqill.com
  • Address: Rua Júlio Araújo Vieira, nº 33, 3045-482 Taveiro, Portugal

13. Social media platform integrations (Meta & TikTok)

The App allows you to connect your Meta (Facebook/Instagram) and/or TikTok accounts in order to retrieve metrics, posts, and performance insights for display within the App. This section describes how we handle the data involved in those integrations.

13.1 Meta (Facebook & Instagram)

sqill GO! uses the Meta Graph API to access data from your connected Facebook and/or Instagram Business or Creator accounts. The types of data we may access include: account profile information, media content (posts, images, videos), performance metrics and insights (reach, impressions, engagement, follower demographics in aggregated form), and hashtag data.

This access is granted by you via OAuth and is limited strictly to the permissions you authorise. We do not access personal data of your followers beyond aggregated, anonymised insight reports provided by Meta.

Data obtained via the Meta API is processed in accordance with Meta’s Platform Terms and Meta’s Developer Data Use Policy. We do not use this data for ad targeting, profiling, or any purpose outside the App features you have requested.

Meta Platforms, Inc. acts as an independent data controller for data processed on its own systems. For information on how Meta uses your data, please consult the Meta Privacy Policy.

13.2 TikTok

sqill GO! uses TikTok's developer APIs to access data from your connected TikTok account. The types of data we may access include: public profile information, content (videos, captions, hashtags), and performance metrics and insights (views, likes, comments, engagement rates, audience data in aggregated form).

This access is granted by you via OAuth and is limited strictly to the permissions you authorise. Data accessed through TikTok APIs is processed only for the limited purpose of enabling the features you have requested within the App.

Data obtained via TikTok APIs is processed in accordance with TikTok’s Developer Terms of Service and TikTok’s Developer Data Sharing Agreement. We do not sell or disclose TikTok data for cross-context behavioural advertising.

TikTok Pte. Ltd. / TikTok Technology Limited acts as an independent data controller for data processed on its own systems. For information on how TikTok uses your data, please consult TikTok’s Privacy Policy.

13.3 General principles for all social platform integrations

  • We only request the minimum permissions necessary to provide the features you have activated.
  • Social platform data is never combined with other user datasets in a way that identifies individual end users beyond what is necessary to provide the Service.
  • We do not sell social platform data to any third party.
  • If you disconnect a social account from the App, we will cease retrieving new data and will delete previously retrieved data in accordance with the retention periods described in Section 14.
  • Any sub-processors who may have access to social platform data to support infrastructure or service operations are bound by confidentiality and data protection obligations no less protective than those set out in this Policy.

14. Retention of social platform data

Data retrieved from Meta and TikTok APIs is retained only for as long as necessary to provide the service features you have requested, and no longer than permitted under the respective platform's developer terms.

  • OAuth access tokens: retained for as long as your account connection remains active. Tokens are invalidated immediately upon disconnection or account deletion.
  • Performance metrics and insights: retained for up to 24 months from the date of retrieval, to allow historical trend analysis within the App. You may request earlier deletion at any time.
  • Content data (posts, captions, media metadata): retained for as long as the content is active on the relevant platform and your account remains connected. Deleted or archived content is removed from our systems within 90 days.
  • Data may be retained longer where required by applicable legal obligation. Upon expiry of the applicable retention period, data is securely deleted or anonymised.

Effective date: 27 august 2026