Privacy Policy

squared.engineering ("we", "us", "our") is operated by Parsa Mivehchi, based in Port Moody, British Columbia, Canada. We are committed to protecting your privacy and handling your personal information responsibly. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data.

This policy applies to the squared.engineering web application and companion iOS app. By using our services, you agree to the collection and use of information in accordance with this policy.

Account Information

When you create an account, we collect your email address and display name. This information is used for authentication, account management, and communication about the service.

Application Data

As you use squared.engineering, you may provide work experience records, project descriptions, competency narratives, NPPE study progress, CPD activity logs, and other professional development information. This data is created and owned by you.

Analytics (Anonymous)

We use Vercel Analytics and Speed Insights to collect anonymous, aggregated usage data such as page views and performance metrics. This data does not identify individual users and is used solely to improve the service.

Payment Information

Subscription payments are processed by Stripe. We do not store your credit card number or banking details on our servers. Stripe handles all payment data in accordance with PCI DSS standards.

• Web app: Your data is stored in a Supabase-hosted PostgreSQL database with Row Level Security (RLS). Each user can only access their own rows.
• iOS app: Data is stored locally on your device using GRDB (SQLite). Local data never leaves your device unless you explicitly enable sync.
• Encryption: All data in transit is encrypted via TLS. Supabase encrypts data at rest.

squared.engineering includes Watson, an AI assistant powered by Anthropic's Claude API. When you use AI features (competency interviews, narrative drafting, study assistance), relevant context from your session is sent to the Anthropic API for processing.

• AI requests are routed through our server-side API to protect API credentials.
• Anthropic does not use API inputs or outputs to train their models, per their commercial API terms.
• We do not store AI conversation logs beyond the duration of your active session.
• If you use the Bring Your Own Key (BYOK) option, your API key is stored in your browser's secure storage and is never sent to our servers.

We use the information we collect to:

• Provide and maintain the squared.engineering service
• Authenticate your account and manage your subscription
• Process AI requests through the Anthropic API on your behalf
• Send transactional emails (account verification, password reset)
• Improve the service through anonymous, aggregated analytics
• Respond to support requests and feedback

• We do not sell your personal information to third parties.
• We do not use third-party advertising or ad tracking on the platform.
• We do not share your data with third parties for marketing purposes.
• We do not access, read, or analyze the content of your competency narratives, project descriptions, or other user-authored content for any purpose other than providing the service to you.

We use the following third-party services to operate squared.engineering:

• Supabase: Database, authentication, and hosting (PostgreSQL with RLS)
• Vercel: Web application hosting, analytics, and speed insights
• Stripe: Subscription payment processing
• Anthropic: AI features via the Claude API
• Apple: iOS app distribution and in-app purchases via the App Store

Each of these services has its own privacy policy. We encourage you to review them.

Under the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation, you have the right to:

• Access: Request a copy of all personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete personal information.
• Export: Export your data at any time using the built-in PDF and Markdown export features.
• Deletion: Request deletion of your account and all associated data. You can initiate this from Settings, or contact us directly.
• Withdraw consent: You may withdraw consent for data processing at any time by deleting your account.

We retain your data for as long as your account is active. If you delete your account, all associated data is permanently removed from our database. We do not retain backups of deleted user data beyond standard database backup retention periods (up to 30 days), after which it is permanently purged.

squared.engineering is designed for engineering professionals and graduates. We do not knowingly collect personal information from anyone under the age of 16. If you believe we have collected data from a minor, please contact us and we will promptly delete it.

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. If we make material changes, we will notify registered users via email. Continued use of the service after changes constitutes acceptance of the updated policy.

For privacy-related questions or to exercise your rights, please reach out through the feedback widget in the app, or contact us via the email address provided in your account settings. You may also connect with us on LinkedIn.