Privacy Notice – Squid Chat
Version: 1.0
Updated: March 2026
This Privacy Notice describes how Njuice AB (“we”, “us”) collects and processes your personal data in connection with your use of the Squid Chat app, (the “Service”), which is available through our mobile app and our web app (together the “Apps”), and if you otherwise communicate with us in relation to the Service, for example if you contact us for support.
The Service is an AI service aggregator that gives users access to all of the world’s leading AI models in a single app. The use of the Service requires that you accept our Terms of Service.
The Privacy Notice also explains your rights in relation to your personal data in accordance with the General Data Protection Regulation (GDPR) and supplementary data protection regulations.
responsibility for the processing of your personal data
Njuice AB is responsible (the controller) for the collection and processing of your personal data as described in this Privacy Notice, unless otherwise is stated. Please see the section at the bottom for contact information.
personal data that we collect and process
We collect and process the following categories of personal data about you if you use our Service and if you communicate with us in relation to the Service:
- Identification information, which makes it possible to identify you, for example your name and user identifiers.
- Contact information, which makes it possible to contact you, for example your e-mail address.
- Profile information, including your language preferences and profile picture (if it is shared from your Apple Account or Google Account).
- User content, for example your prompts in the Service, your conversation history, and other content that you upload to the Service.
- Communication if you communicate with us, for example contents in e-mail or the responses you provide when participating in a survey.
- Usage information that is generated based on your activity and use of the Service, for example which functionality you use in the Service, including which AI services that you interact with, and actions that you take when you use the Service, for example if you have liked or disliked a response generated by the Service.
- Technical information about the device that you access and use our Service, for example your IP address, type of device, version of browser, operating system, and the mobile app.
From which sources we collect personal data
Yourself
We collect your personal data mainly from yourself when you provide your personal data to us, for example when you create a user account for the Service to access and use the Service or when you communicate with us.
App Stores
Moreover, we collect your personal data from the App Store from which you have downloaded the mobile app, such as Apple App Store, for example to manage your access to premium functionality in the Service if you have made an in-app purchase to get access to such premium functionality.
Identity service providers
You can create a user account for the use of the Service using your Apple ID or your Google Account. As such, when you use either your Apple Account or your Google Account to sign into the Service, we collect the personal data that these identity service providers share with us to authenticate you.
For which purposes we process when using the service
Below we describe for which purpose we process your personal data when you use our Service. In relation to each purpose, we explain which categories of personal data that we process, the legal basis that we rely on for the processing, for how long we store your personal data for the specific purpose, and if we share your personal data with any external recipient.
Provide and manage your access to the Service
We process your personal data to provide and manage your access to the Service, for example to:
- Register and manage your user account in the Service to give you access to the Service.
- Give you access to premium functionality if you have a premium subscription for the use of the Service.
- Store information generated by the use of your Service, for example your conversations and conversation history.
- Tailor the content of the Service based on your usage and activity.
Please note that you must provide the information that we ask for to register a user account. If you do not provide the necessary information, we cannot register your user account.
Categories of personal data:
|
Legal basis:
Performance of a contract: The processing of your personal data is necessary to fulfil our Terms of Service. |
| Storage period:
Personal data is stored for this purpose for as long as you are an active user of our Service. You are an active user of the Service if you have used the Service or if you have logged into your user account during the last twelve (12) months. |
External recipients:
|
Communicate with you about the Service
We process your personal data to communicate with you about the Service, for example to:
- Notify you of updates to the Apps and the Service, such as changes to the system requirements for the mobile app.
- Notify you about any maintenance that means that the Service will be temporarily unavailable.
Categories of personal data:
|
Legal basis:
Performance of a contract: The processing of your personal data is necessary to fulfil our Terms of Service. |
| Storage period:
Personal data is stored for this purpose for as long as you are an active user of our Service. You are an active user of the Service if you have used the Service or if you have logged into your user account during the last twelve (12) months. |
External recipients:
|
Provide and document support and respond to questions
We process your personal data to provide and document support and respond to questions when you contact us, including for example to:
- Register, manage and respond to questions and support matters.
- Investigate, identify and resolve identified issues, errors and incidents.
- Communicate with you and others as necessary to manage the support matter.
Categories of personal data:
|
Legal basis:
Legitimate interest: The processing of your personal data is necessary to satisfy our legitimate interest of ensuring resolving our user’s issues, which we consider under a balancing test outweighs your interest and the potential impact on your fundamental rights and freedoms. |
| Storage period:
Personal data is stored for this purpose for as long as you are an active user of our Service. You are an active user of the Service if you have used the Service or if you have logged into your user account during the last twelve (12) months. |
External recipients:
|
Communicate about us, our business and our services
We process your personal data to communicate with you about us, our business and our services in different channels, such via e-mail, push notifications, or directly in the Service, for example to:
- Send you communication about our Service, such as information about new features and functionality in the Service.
- Send you communication about our business and other services that we provide.
- Provide you with offers and marketing for the use of our services.
You can always unsubscribe from our marketing communications, for example by clicking on the unsubscribe link in the communication, or by contacting us.
Categories of personal data:
|
Legal basis:
Soft-opt-in: We rely on the soft opt-in rule as a legal basis for send digital marketing communication about our own similar products and services. Consent: To the extent your consent is required to digital marketing communication, we only send such communication to you if you have provided your prior consent. In such a case, we also rely on the consent as a legal basis for the processing of personal data for this purpose. |
| Storage period:
Personal data is stored for this purpose for as long as you are an active user of our Service and for a period of twelve (12) months thereafter. You are an active user of the Service if you have used the Service or if you have logged into your user account during the last twelve (12) months. This means that if you are inactive, we keep your personal data for this purpose for a maximum period of 24 months. The above applies unless you have previously objected to our processing of your personal data for marketing purposes. |
External recipients:
|
Carry out user surveys
If you participate in a user survey that we carried out, we process your personal data for this purpose, including for example to:
- Send out the survey to you.
- Collect your feedback and compile the user feedback into a report.
Moreover, where relevant, we process your personal data to decide which target group should receive the survey, what questions should be included in the survey.
Your opinions above our business, and our services are important and necessary for us to enable us to develop and improve our business and services.
Categories of personal data:
|
Legal basis:
Legitimate interest: The processing of your personal data is necessary to satisfy our legitimate interest of carrying out user surveys to collect information to enable us to develop and improve our Service, which we consider under a balancing test outweighs your interest and the potential impact on your fundamental rights and freedoms. |
| Storage period:
Personal data is stored for this purpose for the duration of the survey and for a period of three (3) months thereafter in order to compile the responses in a report. Thereafter your personal data will be deleted or de-identified. Final reports which do not include your personal data is stored until further notice or until deleted. |
External recipients:
|
Follow up and evaluate the use of the Service
We process your personal data to follow up and evaluate the use of our Service, for example how you interact with the Service and which features that you use. This helps us better understand how the Service is used and how we can continue to develop and improve the Service to provide you with an even better user experience.
Categories of personal data:
|
Legal basis:
Legitimate interest: The processing of your personal data is necessary to satisfy our legitimate interest to better understand how the Service is used, which we consider under a balancing test outweighs your interest and the potential impact on your fundamental rights and freedoms. Consent: To the extent your personal data is collected directly from your device or by using cookies and similar technologies, we process your personal data based on the consent that you provide for this purpose. |
| Storage period:
Personal data is stored for this purpose for as long as you are an active user of our Service, however, up to a maximum period of [24 months]. You are an active user of the Service if you have used the Service or if you have logged into your user account during the last twelve (12) months. |
External recipients:
|
Develop, test and improve the Service
We process your personal data, when necessary, to develop, test and improve the Service, for example to:
- Develop and test new functionality to improve the Service.
- Identify, investigate, and resolve issues, errors and bugs.
- Train our own AI model that we use to provide the Service.
It is important to us to continuously develop and improve the Service to ensure a great user experience. Moreover, if it is possible to achieve the purpose of the processing with anonymised personal data, we first make sure to anonymise your personal data.
Categories of personal data:
|
Legal basis:
Legitimate interest: The processing of your personal data is necessary to satisfy our legitimate interest of continuously developing and improving the Service to ensure a great user experience, which we consider under a balancing test outweighs your interest and the potential impact on your fundamental rights and freedoms. Consent: To the extent your personal data is collected directly from your device or by using cookies and similar technologies, we process your personal data based on the consent that you provide for this purpose. |
| Storage period:
Personal data is stored for this purpose during a period of up to twelve (12) months from the date your personal data was further processed for this purpose. |
External recipients:
|
Detect, investigate and prevent misuse of the Service
We process your personal data, where needed, to detect, investigate and prevent misuse of the Service, for example to:
- Enforce limitations and implement measures to prevent misuse, for example temporary suspensions and bans.
- Carry out automatic and manual checks of for example login attempts.
- Review logs to detect suspected misuse of the Service, for example to identify unusual user behaviour or patterns.
We are committed to protect your personal data and information in the Service.
Categories of personal data:
|
Legal basis:
Legitimate interest: The processing of your personal data is necessary to satisfy our legitimate interest of preventing misuse of the Service and to protect the Service and your personal data, which we consider under a balancing test outweighs your interest and the potential impact on your fundamental rights and freedoms. |
| Storage period:
Personal data is stored for this purpose for as long as you are an active user of our Service. You are an active user of the Service if you have used the Service or if you have logged into your user account during the last twelve (12) months. Information in logs is, however, stored for a period of up to [2 months] from the date of the log entry. |
External recipients:
|
Additional purposes when we need to use your personal data for legal reasons
Fulfil legal obligations
We process your personal data when it is necessary for us to comply with our legal obligations, such as accounting requirements and obligations under the GDPR.
| Categories of personal data:
Categories of personal data concerned that are necessary to fulfil the legal obligation in the individual case are processed for this purpose. Normally, the following categories of personal data are processed:
|
Legal basis:
Gesetzliche Verpflichtung: The processing of your personal data is necessary to fulfil our legal obligations. |
| Storage period:
Personal data is stored for this purpose for the time necessary for us to comply with respective legal obligation to which we are subject. By way of example, personal data is stored in accounting material for seven (7) years calculated from the end of the calendar year in which the relevant financial year ended in accordance with the Accounting Act (1999:1048). |
External recipients:
|
Manage, defend and exercise legal claims and rights
We process your personal data when it is necessary to manage, defend and exercise legal claims and rights in an individual case, for example in connection with a dispute or a court process.
| Categories of personal data:
Categories of personal data concerned that are necessary to manage and respond to the legal requirement in the individual case are processed for this purpose. Normally, the following categories of personal data are processed:
|
Legal basis:
Legitimate interest: The processing of your personal data is necessary to satisfy our legitimate interest in managing, defending and exercising legal claims in an individual case, which we consider under a balancing test outweighs your interest and the potential impact on your fundamental rights and freedoms. |
| Storage period:
Personal data is stored for this purpose for the period necessary to manage, defend or exercise the legal claim in the individual case. |
External recipients:
|
Manage the sale and restructuring of all or parts of the business
In the event that all or part of our business is sold, or otherwise transferred or restructured, we process your personal data when it is necessary for this purpose.
Should the business be transferred to a buyer, your personal data would also be transferred or disclosed to the buyer. In such a case, the buyer would be responsible (controller) for its subsequent processing of your personal data and that the processing takes place for the same purposes as stated in this information, unless you receive other information in connection with the transfer.
| Categories of personal data:
Categories of personal data concerned that are strictly necessary to manage the sale or restructuring of all or part of the business in the individual case are processed for this purpose. |
Legal basis:
Legitimate interest: The processing of your personal data is necessary to satisfy our legitimate interest in managing a sale or restructuring of, where applicable, all or part of the business, which we consider under a balancing test outweighs your interest and the potential impact on your fundamental rights and freedoms. |
| Storage period:
Personal data is stored for this purpose for the time necessary to manage the sale or restructuring in the individual case. |
External recipients:
|
Respond to legal requests
We process your personal data when it is necessary to respond to legal requests from public authorities, such as law enforcement authorities and tax authorities.
| Categories of personal data:
The categories of personal data necessary to respond to and evaluate the request in the individual case are processed for this purpose. Normally, the following categories of personal data are processed:
|
Legal basis:
Gesetzliche Verpflichtung: When there is a legal obligation for us under law or regulation to respond to the legal request, the processing is carried out to fulfil the legal obligation in the specific case. Legitimate interest: If there is no explicit legal obligation for us to respond to the legal request or if we need support in order to properly respond to the legal request from external advisors, the processing is carried out in order to satisfy our legitimate interest of responding to the legal request if we assess that this legitimate interest under a balancing test outweighs your interests or the potential impact on your fundamental rights and freedoms in the individual case. |
| Storage period:
Personal data is stored for this purpose for the time necessary to respond to the legal request, and for a period of ten (10) years thereafter in order to document and be able to show that the request has been answered. |
External recipients:
|
With which recipients we share personal data
We share your personal data with external service providers that we have engaged. Examples of service providers are IT suppliers that provide systems and applications that we use within the business, for example to provide the Service.
Moreover, we use AI service providers that provide the AI models that the Service uses, and we will share your personal data with these AI service providers when you use their AI models in our Service. Examples of AI service providers that we use to provide the Service are: OpenAI, Anthropic, and Mistral. Information regarding all AI service providers that the Service uses is available directly in the Service.
Additionally, we share, when necessary, your personal data with the App Store that you have downloaded the mobile app from, for example to manage your subscription.
We also share your personal data with the identity service providers that you have used to create your user account to authenticate you when logging in to the Service using your user account. Currently, you can create a user account using your Apple Account or your Google Account.
In addition, where necessary, we will share your personal data with other external recipients, including public authorities, legal advisors and insurance companies for legal purposes, for example to manage, defend or exercise legal claims and rights. Moreover, in case of a re-organisation or restructuring of our business, we will share your personal data, if necessary, with the parties involved in such transaction, for example a potential buyer and external advisors.
Where we process personal data
We store your personal data within the EU/EEA.
In certain cases, we transfer your personal data to recipients in third countries outside the EU/EEA, for example to service providers that we engage in such third countries.
In order to ensure an essentially equivalent level of protection for your personal data when transferred (or otherwise made available) to recipients in third countries outside of the EU/EEA, which do not provide an adequate level of protection, we normally use the EU Commission’s adopted standard contractual clauses for international transfers according to decision 2021/914 and implement – in light of the law and practices of the third country – necessary supplementary measures to ensure an essentially equivalent level of protection of the personal data transferred. This to ensure that your personal data is protected regardless of where it is processed.
We also rely on so-called adequacy decisions issued by the European Commission where personal data is transferred to countries and recipients covered by such decision, please see the European Commission’s website for more information on which countries that are covered by an adequacy decision. As an example, we rely on the EU-U.S. Data Privacy Framework for transfers to service providers in the United States that are certified under the framework, please see the framework website.
Protection of your personal data
We implement appropriate technical and organisational measures to protect the confidentiality, availability and integrity of your personal data in the Service. As such, we take measures to protect your personal data against unlawful or unauthorised access, alteration, loss and destruction, for example by:
- Ensuring that your user account is protected and not accessed by any unauthorised person.
- Carrying out logging for troubleshooting and to identify issues.
- Backing up your information to ensure that the information is still available in case of a technical or physical incident.
Your personal data is processed, when necessary, for this purpose. Personal data is stored for this purpose for such period that is outlined in relation to each purpose outlined in this information.
The legal basis for the processing of your personal data to protect your personal data in our IT systems and tools is that the processing is necessary in order for us to fulfil our legal obligation under Article 32 of the GDPR to implement appropriate technical and organisational measures to protect and safeguard your personal data (see Article 6(1)(c) of the GDPR). Personal data in logs for troubleshooting and error and incident management is stored for a period of up to [2 months] from the time of the log event.
Your rights
You have certain rights in relation to the processing of your personal data under the GDPR.
You have the right to:
- Access to and obtain a copy of your personal data together with additional information about our processing of your personal data (please see Article 15 of the GDPR).
- Rectification of or request that we supplement your personal data if you consider that your personal data is incorrect, incomplete, or misleading (please see Article 16 of the GDPR).
- Erasure of your personal data (please see Article 17 of the GDPR).
You also have the right to:
- Object to our processing of your personal data, for example our processing of your personal data for direct marketing purposes or when we rely on a legitimate interest as the legal basis for the processing (please see Article 21 of the GDPR).
- Request that our processing of personal data is restricted, which means that you can, at least for a certain period, prevent us from processing your personal data (other than storing your personal data) (please see Article 18 of the GDPR)
- Receive a copy of the personal data that you have provided to us in a structured and commonly used format and, where it is technically feasible, request that the personal data is transferred directly to an external recipient (data portability) (please see Article 20 of the GDPR).
- Withdraw your consent to the processing of personal data based on your consent (please see Article 7 of the GDPR).
- Lodge a complaint with your supervisory authority, please see contact details to the designated supervisory authorities within the EU on the European Data Protection Board’s website. In Sweden, we are under the supervision of the Swedish Authority for Privacy Protection (IMY).
Please note that certain rights only apply in certain situations, and that there are several exceptions to certain rights.
Automated individual decision-making
We do not carry out any automated individual decision-making that produces legal effects or otherwise significantly affects you in relation to the processing of personal data covered by this information.
How you exercise your rights
If you wish to exercise your rights, please e-mail us on contact@squidapp.co, or send us a letter to the address outlined below.
If possible, please use the e-mail address that you have registered for your user account, or which you have used when you have been in contact with us. This makes it easier to handle your request.
Updates to this Privacy Notice
We regularly update this privacy notice to ensure that it reflects the processing of your personal data. At the top, you can see when this privacy notice was last updated.
If you have questions
Please feel free to contact us if you have any questions about this privacy notice, how we handle your personal data, or if you wish to exercise your rights.
Njuice AB, company registration number 556801-9201
Address: Kapellgränd 3, 116 25, Stockholm, Sweden
E-mail: contact@squidapp.co