Privacy Policy
Last updated: 29 October 2026
This policy explains what data the Square & Compass mobile app and its web platform collect, why, and what choices you have. The service is operated by Sosofresh S.R.L., Romania (“we”), which is responsible for your data.
What we collect
- Account details: your name, username, email address, profile photo, preferred language and your role or position in your organization. Your password is stored only as a secure hash.
- What you create: posts, comments, reactions, messages (including photos, documents and voice messages), replies to event invitations and files you add to the library.
- Device details: a push notification token and your device platform, so we can send you notifications.
- Basic activity: when you last used the app, to show what is new since your last visit.
- Invitations: the email address an administrator invites, to send the invitation.
We do not use advertising, we do not sell your data, and the app contains no analytics or tracking tools.
How we use it
- To run the service: sign you in, show your organization’s content and deliver messages.
- To send the notifications you choose, and invitation emails.
- To keep the service secure and fix problems.
We process this data to provide the service you or your organization signed up for, and for our legitimate interest in keeping it secure.
Who can see it
Your content is visible only to members of your organization, according to the permissions your organization’s administrators set. Private messages are visible only to the people in that conversation.
We rely on a small number of trusted service providers to run the app, under contracts that limit how they may use your data:
- cloud hosting, database and file storage;
- push notification delivery;
- email delivery, for invitations;
- automatic translation of a post or comment, only when you ask for it and your organization has it turned on. Private messages are never sent for translation.
We do not sell or share your data with anyone else. Where a provider processes data outside the European Union, standard contractual clauses or equivalent safeguards apply.
Phone permissions
The app asks for access to your camera, photos or microphone only when you use a feature that needs it, such as setting a profile photo, sharing a picture or recording a voice message. You can change these permissions at any time in your phone’s settings.
How long we keep it
We keep your data while your account is active. If your account is deleted, your profile, devices and private messages are deleted; posts and comments you wrote in your organization may remain without your name. Deleted messages lose their text and attachments right away.
Your rights
Under the GDPR you can ask to access, correct, delete or export your data, and to restrict or object to how we use it. To make a request, including deleting your account, email us at contact@squarecompass.dev. You can also complain to the Romanian data protection authority (ANSPDCP, dataprotection.ro).
Security
All traffic is encrypted, passwords are stored as hashes, and files can be opened only by signed-in members of the organization they belong to.
Children
The service is not intended for anyone under 16.
Changes
If we change this policy we will update this page and the date above. Significant changes will also be announced in the app.
Contact
Sosofresh S.R.L. · contact@squarecompass.dev