Privacy Policy

Last updated: December 19, 2024

Streakify ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our habit tracking application.

Quick Summary

  • What we collect: Email, habits you create, completion data, and device info for notifications
  • What we don't collect: Health data, location data, or any data we don't need
  • We never sell your data: Your personal information is never sold to third parties
  • You control your data: Export or delete your data anytime from your profile

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

  • Email address: Used for authentication and account recovery
  • Display name: Optional, shown in the app
  • Profile preferences: Theme selection, notification settings

1.2 Habit Data

To provide our service, we store:

  • Habit names and descriptions: The habits you create
  • Completion records: When you mark habits as complete
  • Streak data: Your current and longest streaks
  • Notes and mood tracking: Optional notes you add to completions
  • Gamification data: XP, level, and achievements earned

1.3 Technical Information

We automatically collect:

  • Device information: Browser type, operating system (for compatibility)
  • Push notification tokens: If you enable notifications
  • Usage analytics: Anonymous page views and feature usage via Vercel Analytics

1.4 Information We Do NOT Collect

  • Health data from Apple Health, Google Fit, or similar services
  • Location data or GPS coordinates
  • Contacts or social connections
  • Payment information (we don't process payments)

2. How We Use Your Information

We use your information to:

  • Provide the service: Track your habits, streaks, and progress
  • Send notifications: Habit reminders and motivational messages (if enabled)
  • Improve the app: Analyze anonymous usage patterns to enhance features
  • Communicate: Send important service updates (rarely)

We do not use your data for: Advertising, profiling, or selling to third parties.

3. Data Storage and Security

3.1 Where We Store Data

Your data is stored securely on:

  • Supabase: PostgreSQL database with row-level security (hosted on AWS)
  • Vercel: Application hosting with edge caching

3.2 Security Measures

  • All data transmitted via HTTPS/TLS encryption
  • Database access protected by row-level security policies
  • Authentication handled by Supabase Auth (industry-standard)
  • No passwords stored in plain text

4. Third-Party Services

We use the following third-party services:

ServicePurposeData Shared
SupabaseDatabase & AuthenticationAll account and habit data
VercelHosting & AnalyticsAnonymous usage data
Google AI (Gemini)AI-powered suggestionsHabit names (for generating tips)

Each service has its own privacy policy. We only share the minimum data necessary for each service to function.

5. Your Rights

You have the right to:

  • Access: View all data we have about you
  • Export: Download your data in JSON format (Profile → Export Data)
  • Correct: Update your information anytime
  • Delete: Permanently delete your account and all data (Profile → Delete Account)
  • Opt-out: Disable notifications, analytics, or cookies

For EU/EEA Residents (GDPR)

Under the General Data Protection Regulation, you have additional rights including data portability and the right to lodge a complaint with a supervisory authority. Our legal basis for processing is your consent and legitimate interest in providing the service.

For California Residents (CCPA/CPRA)

Under the California Consumer Privacy Act, you have the right to know what personal information we collect and to request deletion. We do not sell your personal information.

6. Cookies and Local Storage

We use:

  • Essential cookies: Authentication tokens (required for login)
  • Local storage: Theme preferences, notification settings, offline data
  • Analytics cookies: Vercel Analytics for anonymous usage tracking (can be disabled)

We do not use advertising cookies or tracking pixels. You can manage cookie preferences in your browser settings.

7. Children's Privacy

Streakify is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

8. Data Retention

We retain your data for as long as your account is active. If you delete your account, all personal data is permanently removed within 30 days. Anonymous, aggregated analytics data may be retained indefinitely.

9. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you via email or in-app notification at least 30 days before the changes take effect. Your continued use of Streakify after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy or want to exercise your rights, please contact us:

Email: privacy@streakify.org

Response time: Within 30 days