Privacy Policy

Last Updated: March 31, 2026

1. Introduction

streakd ("we", "us", or "our") operates the streakd mobile application (the "App"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our App.

2. Information We Collect

Personal Information You Provide:

• Account information: email address, username, display name, and password
• Profile picture (optional)
• Goal titles and descriptions you create
• Photos and captions you upload as progress posts

Information Generated Through Your Use of the App:

• Friendship connections (who you are friends with, pending and accepted)
• Reactions you place on friends' posts
• Block records (users you have blocked)
• Reports you submit about other users or posts
• Streak counts and post history for each goal

Information Collected Automatically:

• Device push notification token (with your permission)
• Basic usage data (e.g., when you log in)

3. How We Use Your Information

We use the information we collect to:

• Create and manage your account
• Display your posts to your friends (based on your privacy settings)
• Send push notifications (streak reminders, friend requests, reactions) if enabled
• Process subscription payments through Apple's App Store (via RevenueCat)
• Enforce blocks and review reports to maintain a safe community
• Improve and maintain the App

4. How We Share Your Information

We do not sell your personal information. We share information only as follows:

• With your friends: Your posts, username, display name, and profile picture are visible to accepted friends (unless you set a goal to "private").
• Service providers: We use third-party services to operate the App:
  • DigitalOcean for server and database hosting
  • Cloudflare R2 for image storage
  • RevenueCat for subscription management
  • Expo for push notifications
• Legal requirements: We may disclose information if required by law.

5. Data Storage and Security

Your data is stored on secured servers hosted on DigitalOcean. Images are stored via Cloudflare R2. We use industry-standard security measures including encrypted passwords (bcrypt) and JWT-based authentication with access and refresh token rotation. However, no method of electronic storage is 100% secure.

6. Data Retention

We retain your data for as long as your account is active. When you delete your account, all your data (profile, goals, posts, images, friendships, reactions, blocks, reports, and notification settings) is permanently deleted.

7. Your Rights

You may:

• Access and update your profile information at any time within the App
• Delete your account and all associated data from within the App (Settings > Delete Account)
• Control who sees your posts via goal privacy settings ("friends" or "private")
• Enable or disable push notifications and specific notification types
• Block other users to prevent them from seeing your content

8. Children's Privacy

The App is not intended for children under 13. We do not knowingly collect information from children under 13. If we learn that we have collected information from a child under 13, we will delete it promptly.

9. Third-Party Services

The App uses Apple's In-App Purchase system (via RevenueCat) for subscriptions. Your payment information is handled entirely by Apple and is not accessible to us.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of changes by updating the "Last Updated" date. Continued use of the App after changes constitutes acceptance.

11. Contact Us

If you have questions about this Privacy Policy, contact us at:
Email: support@streakd.social
Legal inquiries: legal@streakd.social