1. Who we are
This policy explains how your personal data is handled when you use the just streak mobile app, its home-screen widgets and the juststreak.app website (together, the "Service"). The Service is provided by Semih Soyer ("we", "us"), who is the controller of your data.
The short version: we only handle the data needed to keep your streaks going. We don't sell your data, we don't use it for ads, and we don't track you across other apps or websites. If you use the app without an account, your streaks never leave your phone.
2. What we collect
| Data | What it includes | When |
|---|---|---|
| Account details | Email address, name, optional username, sign-in method (email, Apple or Google). Passwords are only stored as a one-way hash. If you sign in with Apple, we keep a token from Apple so we can revoke the connection when you delete your account. | Only if you create an account |
| Streak data | Habit names and goals, icons and colors, scheduled days, reminder times, completed days and when you checked them, streak freeze activity, badges, and your app settings (theme, language, week start, notification preferences) | With an account, it's backed up on our servers and synced between your devices. Without one, it stays on your phone. |
| Device details | Platform, OS version, device model, app version, phone language and region, app language, time zone, notification permission, push token, your "News and offers" preference, last seen time | Only if you have an account |
| Subscription details | Plan, trial, purchase and renewal dates, store transaction IDs. We never see your card or payment details; Apple or Google handle the payment. | When you start Plus or restore purchases |
| Usage events | What you do in the app: screens opened, onboarding steps, creating and checking habits, seeing the paywall, purchase results, tapping a notification; plus technical details like device model, app version and language | Automatically. With an account, linked to your account ID (never your name or email). Without one, anonymous. |
| Crash and error reports | Technical details of the error, the screen you were on, device and OS details, app version | Automatically, when something breaks. With an account, linked to your account ID; your name, email and IP address are not sent. |
| Support messages | Your name, email, message and optional support code | When you contact us through the website or by email |
What we don't collect: location, contacts, photos, microphone, health data or advertising identifiers (IDFA/AAID). We don't track you across apps or websites.
Widgets: home-screen widgets read your streaks from the app on your phone. Data shared between the app and its widgets never leaves your device.
3. How we use it
- To save, show, back up and sync your streaks across devices,
- To create your account, sign you in and confirm your email with a verification code,
- To send reminders at the times you choose, a heads-up before your free trial ends and, if you opt in, news and offers,
- To manage your Plus subscription and free trial and restore your purchases,
- To find and fix bugs, keep the Service secure and prevent abuse,
- To understand how the app is used so we can improve it (where people get stuck, which features they use),
- To answer your support requests and meet our legal obligations.
We don't make automated decisions about you that have legal or similarly significant effects, and we don't build profiles to show you ads.
4. Legal bases
We process the data needed to provide the Service to perform our contract with you (GDPR Art. 6(1)(b)); records we must keep to meet legal obligations (Art. 6(1)(c)); usage events and crash reports for security, debugging and product improvement based on our legitimate interests (Art. 6(1)(f)); and news and offers notifications based on your consent (Art. 6(1)(a)), which you can withdraw at any time in the app. Users in Türkiye can find the equivalent information under Turkish law (KVKK) in our Turkish-language notice.
5. Service providers
We only share your data with the providers below, only for the stated purpose, and only for them to process it on our behalf.
| Provider | Purpose | Data | Location |
|---|---|---|---|
| Supabase | Accounts, sign-in and database (backing up and syncing streaks) | Account details, streak data, device details, support messages | EU (Ireland) |
| Apple, Google | Sign in with Apple, Sign in with Google, in-app purchases and notification delivery | Identity details needed for sign-in, your store account, notification content | Their own servers |
| RevenueCat | Verifying subscription status and restoring purchases | Your account ID (or an anonymous ID without an account), subscription and transaction details | USA |
| Expo (650 Industries) | Delivering remote notifications (news and offers) to your phone | Push token and notification content | USA |
| Sentry (Functional Software) | Crash and error reports | Error details, device details, your account ID | EU (Germany) |
| PostHog | Product analytics (usage events) | Usage events, device details, your account ID | EU |
| Resend | Sending verification code emails | Your email address and the email content | EU (Ireland) |
| Cloudflare | Hosting and protecting the website, access control for the admin panel | Your IP address and browser details when you visit the website, what you send through web forms | Global network (US-based) |
We don't share your data with anyone else unless the law requires it (for example, a court order). We don't sell your data.
6. International transfers
Our database, email delivery, crash reports and analytics are hosted in the European Union; subscription verification and notification delivery run in the United States. For transfers outside the EEA and the UK we rely on the European Commission's Standard Contractual Clauses or adequacy decisions, and for transfers from Türkiye on the safeguards required by Article 9 of the KVKK.
7. How long we keep it
| Data | How long |
|---|---|
| Account and streak data | While your account is open. Deleted immediately if you delete your account in the app, or within 30 days if you request it on the website. Removed from server backups within 30 days. |
| Device details and push token | While your account is open. A device's push token is deleted when you sign out on it. |
| Usage events | Up to 12 months |
| Crash and error reports | Up to 90 days |
| Subscription records | For the legal retention periods of the app stores and our subscription provider |
| Support messages | 2 years after the request is closed |
| Using the app without an account | Your streaks live only on your phone and are deleted when you delete the app |
8. Your rights
You can access, correct, delete, restrict or object to the processing of your data, and receive it in a portable format.
- Correct: change your name and username in Profile › Edit profile, and your email and password in Settings.
- Export: download your streaks in Settings › Export data (CSV).
- Delete: delete your account and all its data right away in Settings › Delete account, or on our website. If you'd also like your usage events and crash reports deleted before their retention period ends, just email us.
- Notifications: turn reminders and news and offers off in Settings › Notifications.
- Anything else: email support@juststreak.app. We'll reply free of charge within 30 days.
If you're in the EEA or the UK, you can also complain to your local data protection authority.
9. Children
The Service isn't directed at children under 13, and we don't knowingly collect data from them. If the age of digital consent in your country is higher, you need a parent's permission to create an account if you're under that age. If you believe a child has given us data, let us know and we'll delete it.
10. Security
Data travels between your phone and our servers over encrypted connections (TLS) and is encrypted at rest. Each user can only access their own data (row-level access rules). Only authorized team members can access our admin panel, after email verification through Cloudflare Access, and every access is logged. No system is perfect; if a data breach happens, we'll notify you and the relevant authorities within the time required by law.
12. Changes
When we update this policy, we change the date at the top. If a change significantly affects how we handle your data, we'll also let you know in the app.
13. Contact
Semih Soyer · [yasal yazışma adresin]
Privacy requests: support@juststreak.app
Support: support@juststreak.app