Privacy Policy
Your habits are personal. Here's exactly what we collect, why, and the control you keep over it — in plain language, not legalese.
This Privacy Policy explains how Streakky Private Limited ("Streakky", "we", "us"), incorporated in Ghaziabad, Uttar Pradesh, India, handles your information when you use the Streakky apps and website (the "Service").
verified_userThe short version: we collect only what the Service needs, we never sell your data, we use no third-party advertising trackers, and every XP event is recorded in an immutable, auditable log you can inspect. Streakky is not end-to-end encrypted — see §5.
01 What we collect
You give us
- Account details — name, date of birth, gender, and password (stored only as a salted hash).
- Up to three email addresses — one primary plus two aliases, any of which signs you in. An address can belong to only one Streakky account. You may attach an optional institute or employee ID to an address; it is stored qualified with that address's domain (
22cs041@uni.edu) and is used only as an alternative sign-in name. - Habit & sprint data — the habits you track, parameters you log, completions, honest skips, and notes.
- Squad activity — squads you join, messages and nudges you send, reactions.
- Photos and voice notes — images you attach to messages or feedback, and voice notes you record for feedback. Both are screened automatically before anyone reads them (§2).
- Emergency contacts — names and phone numbers you enter for the SOS tools, and whether each matches an existing Streakky account.
- Location — only on request — your coordinates (read once, and only when you tap “share my location” in a chat, so that the message can carry a place name instead of raw numbers. Foreground only, never in the background, never stored as a history, and never attached to a streak or to analytics). Declining the permission disables that one button and nothing else.
Mood check-ins
- Mood check-ins — a 1–10 rating and any note you write, when you choose to check in. Used only to show you your own patterns; never to profile you or make decisions about you.
- Streakky does not read Apple Health or Health Connect, and collects no sleep, step, or heart-rate data.
We collect automatically
- Timezone — your IANA timezone, so streaks count in your local day.
- Device & usage — app version, device type, and basic diagnostics to fix crashes.
- Push notification tokens — one per device, so a notification reaches the right one. Removed when you sign out.
- XP audit events — an immutable record of every XP change, with the reason attached.
02 How we use your data
We use your information solely to run and improve the Service:
- To calculate streaks, Efficiency %, and XP — including the honesty reward for logged skips.
- To power real-time Squad Pulse and deliver tribe nudges and notifications.
- To turn a location you explicitly share into a place name for that one message.
- Automated screening. Feedback text, images and voice notes are checked before any person reads them — images by Google Cloud Vision, voice notes transcribed by Google Cloud Speech-to-Text and then screened as text. Content that fails is blocked and its media deleted.
- Notification previews. Message text is used to build the push notification a recipient sees on their lock screen.
- Where you consented, to show you your own mood and wellness patterns. We do not use wellness data to profile you or to make decisions about you.
- To maintain your auditable XP history so you can tap any number and see why you earned it.
- To keep the Service secure, diagnose problems, and notify you of important changes.
We do not use your data for third-party advertising, and we do not sell or rent it to anyone.
03 Legal basis
Where the GDPR or India's Digital Personal Data Protection Act applies, we process data on the basis of performing our contract with you (running the Service), your consent (optional notifications), and our legitimate interest in keeping the Service safe and reliable. You may withdraw consent at any time.
05 Security
Data is encrypted in transit (TLS) and at rest. Passwords are stored only as salted hashes. Access to production data is restricted and logged. The XP audit log is append-only and immutable, so your earned history cannot be silently altered.
lockStreakky is not end-to-end encrypted. We can technically access message content, and we do — to build notification previews and to run the automated safety checks in §2. Please don't send anything through Streakky that you would not want stored on our servers.
06 Data retention
We keep your data for as long as your account is active.
Deleting your account. In the app, About Streakky → Delete Account sends a request to our support team. You have 24 hours to revert it, and you keep full use of Streakky until the account is actually removed — nothing is locked while the request is open. After reverting, deletion is unavailable for 24 hours.
Once removed, we delete your sign-in credentials, every email address and institute/employee ID on the account, your profile, and your habit history. Content you posted into a shared squad may remain visible to that squad, because removing it would take other members' history with it. We keep limited records where law, tax, or fraud-prevention requires, and aggregated anonymous statistics indefinitely.
07 Your rights
Depending on where you live, you may have the right to:
- Access a copy of your data and export it.
- Correct inaccurate information.
- Delete your account and associated personal data.
- Object to or restrict certain processing, and withdraw consent.
- Manage your sign-in addresses — add, edit or remove any of your three email addresses, and choose which is primary.
- Refuse location access — the app can read your device location (needed only when you tap “share my location” in a chat: we read the coordinates once, turn them into a place name so your squad sees “Koramangala, Bengaluru” rather than a pair of numbers, and send that as your message. There is no background tracking, no location history, and no location in any streak, XP, or analytics record). Decline the permission, or revoke it later in your device settings, and every other part of Streakky works exactly as before.
Most of these are self-service in the app. For anything else, email us and we'll respond within 30 days.
08 Children
Streakky is not directed to children under 13 (or the minimum age in your country). We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.
09 Changes to this policy
We may update this policy as the Service evolves. We'll post the new version here with a revised "last updated" date and, for material changes, notify you in the app.
10 Contact us
Questions about privacy or your data? Reach our team at support@streakky.com.
Streakky Private Limited · Ghaziabad, Uttar Pradesh, India.