Privacy policy

Who we are

Streako is operated by Deepak Maurya ("we", "us"). For any privacy question or request, email support@codewithdeep.com.

Data we collect

• Account details: your email address, and optionally a name, username and avatar. If you sign up with a password, we store only a one-way hash of it, never the password itself.
• Sign-in with Google or Apple: if you use these, we receive your account identifier and email address from that provider.
• Habit data: the habits, categories, goals, check-ins, reminders, streaks, XP, levels and badges you create or earn in the app, and your time zone so days roll over at your midnight.
• Social data: if you use social features, your friend connections, challenges you create or join, and reports you submit.
• Contact matching (optional): if you choose Find friends from contacts and allow access, the app reads the phone numbers and email addresses in your address book on your device and converts each one into a one-way SHA-256 hash before sending it. We compare those hashes with the verified numbers and emails of people who allow it, return the matches to you, and keep nothing we received. Contact names never leave your device. Hashing keeps raw numbers out of transit and logs, but it is not anonymous: a hash of a known number can be checked, which is why we neither store the hashes nor use them for anything else.
• Device and notification data: a push notification token for each device you sign in on, and your notification preferences.
• Launch waitlist: if you ask to be notified when the app launches, your email address and the page you signed up from. This is separate from any account.
• Security data: for each signed-in session we store the IP address and device user agent, to protect your account and let you review active sessions.

The app contains no advertising SDKs and no third-party analytics or tracking tools. We do not access your location, photos or microphone. Contacts are read only when you choose to find friends, as described above, and access can be withdrawn in your phone's settings at any time. The camera is used only when you choose to scan a challenge or friend QR code, and no images are stored.

How we use it

• To run the app: save and sync your habits across devices, compute streaks and stats, and award XP and badges.
• To send the notifications you ask for, such as habit reminders and streak alerts, and account emails like verification and password reset.
• To power social features you opt into, such as showing your progress to friends in a challenge.
• To email waitlist signups a confirmation and, when the app launches, the link to download it. Nothing else.
• To keep the service secure: prevent abuse, rate-limit sign-in attempts and investigate reports.

We do not sell, rent or share your personal data for advertising.

Who processes your data

We use a small number of service providers who process data only on our behalf:

• Supabase: database hosting (Mumbai, India region).
• Render: hosting for the app's server.
• Expo and Google Firebase Cloud Messaging: delivering push notifications.
• Google and Apple: sign-in, only if you choose those options.
• Our email delivery provider: sending account emails and waitlist emails.
• Google Analytics: website visit statistics, only if you accept the cookie notice on this website.

Website analytics and cookies

This website (streako.app) uses Google Analytics 4 to understand how visitors find and use it, such as which pages are viewed and roughly where visitors come from. It sets cookies in your browser and only runs if you choose Accept on the cookie notice. If you choose Decline, it never loads.

Google processes this data under its own privacy policy. We do not use it for advertising and do not link it to your app account. To change your choice, clear this site's data in your browser and the notice will appear again. This applies to the website only: the app itself contains no analytics or tracking tools.

Visibility

Your profile is private by default. Other people see your information only when you connect with them as friends or join a shared challenge, and only what that feature needs, such as your name and challenge progress.

Contact matching is on by default: someone who already has your verified phone number or email saved can see that you are on Streako, with your name, username, avatar and level, and send you a friend request. They do not see your number, email, habits or anything else. Turn this off in Settings → Profile → Let contacts find me.

Retention and deletion

We keep your data while your account is active. When you delete your account, your account and everything linked to it are permanently erased from our database straight away. Copies may remain in our providers' routine backups for a limited period before they are overwritten. See how to delete your account.

Waitlist addresses are kept until the launch announcement has gone out and we no longer need them, or until you ask us to remove yours: reply to the confirmation email or write to support@codewithdeep.com.

Your rights and choices

• Access and portability: export all your data as JSON, or your check-ins as CSV, from Settings → Export your data.
• Correction: edit your profile and habits in the app at any time.
• Deletion: delete your account in the app, or email us.
• Contacts: finding friends from contacts is optional; withdraw contacts access in your phone settings, and stop others finding you in Settings → Profile → Let contacts find me.
• Notifications: turn reminders and alerts on or off in the app or in your phone settings.

Depending on where you live, including under India's Digital Personal Data Protection Act and the GDPR, you may have further rights. Email support@codewithdeep.com and we will respond within 30 days.

Security

Data is encrypted in transit with HTTPS. Passwords are hashed with Argon2, and sessions use short-lived tokens. No system is perfectly secure, but we work to protect your data and will notify you of any breach as the law requires.

Children

Streako is not directed at children under 13, and we do not knowingly collect their data. If you believe a child has created an account, email us and we will delete it.

Changes

If we change this policy, we will update the date above and, for significant changes, tell you in the app before they take effect.