Privacy Policy

Effective Date: July 19, 2026 · Last Updated: July 19, 2026

RivrHub ("we," "us," or "our") operates the Squishy Sourcer mobile application and website (collectively, the "Service"). This Privacy Policy explains what information we collect, how we use it, and your choices regarding your data.

1. Information We Collect

We collect the following categories of information when you use Squishy Sourcer:

Account Information: When you create an account, we collect your email address and a display name (if you choose to provide one).

Location Preferences: We collect the ZIP code you provide to identify nearby retail stores and deliver relevant inventory results. We do not collect precise GPS location data.

Push Notification Tokens: If you enable push notifications, we collect your device's push notification token (APNs token for iOS, FCM registration token) to deliver stock alerts to your device.

Store Preferences: We store your selected retailers, tracked stores, watchlist products, and alert preferences to personalize your experience.

Usage Data: We collect basic usage information such as pages viewed, features used, and interaction timestamps to improve the Service.

Device Information: We may collect your device type, operating system version, and browser user agent string for compatibility and troubleshooting purposes.

2. How We Use Your Information

We use the information we collect to:

• Provide and operate the Service, including scanning retailer inventory near your ZIP code
• Send you push notifications and email alerts when tracked products are restocked
• Manage your account, subscription, and preferences
• Improve the Service, fix bugs, and develop new features
• Prevent fraud and abuse

3. Third-Party Services

Supabase: We use Supabase for authentication, database storage, and serverless backend functions. Your account data, preferences, and push tokens are stored in Supabase's infrastructure. Supabase's privacy policy is available at supabase.com/privacy.

Firebase Cloud Messaging (Google): We use Firebase Cloud Messaging to deliver native push notifications to your device. Your device's push token is shared with Firebase for this purpose. Google's privacy policy is available at policies.google.com/privacy.

Stripe: If you subscribe to a paid plan, payment processing is handled by Stripe. We do not store your credit card number or payment details on our servers. Stripe's privacy policy is available at stripe.com/privacy.

4. Data Sharing and Selling

We do not sell, rent, or trade your personal information to any third party. We do not share your data with advertisers. We only share data with the third-party service providers listed above, solely for the purpose of operating the Service.

5. Data Retention

We retain your account information and preferences for as long as your account is active. If you delete your account, we will remove your personal data from our systems within 30 days, except where we are required to retain it by law.

6. Your Rights and Choices

• You may update your email, ZIP code, and alert preferences at any time within the app.
• You may disable push notifications through your device's system settings or within the app.
• You may request deletion of your account and associated data by contacting us at the address below.
• If you are a California resident, you have additional rights under the CCPA, including the right to know what data we collect, the right to delete your data, and the right to opt out of the sale of personal information (which we do not engage in).

7. Children's Privacy

Squishy Sourcer is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will promptly delete it.

8. Security

We use industry-standard security measures to protect your data, including encrypted connections (HTTPS/TLS), secure authentication, and access controls on our backend infrastructure. However, no method of electronic transmission or storage is 100% secure.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy within the app or by email. Your continued use of the Service after changes are posted constitutes acceptance of the revised policy.

10. Contact Us

If you have any questions about this Privacy Policy or your data, please contact us at:

RivrHub
Email: josh@rivrhub.com