StreakzyStreakzy Privacy Policy
Last updated: October 25, 2026
Streakzy is a habit tracker made by genzjutsu, operated by TODO: your full legal name ("we", "us"). This policy explains what we collect when you use the Streakzy app, why, who we share it with, and the choices you have. If you have any question, email support@genzjutsu.com.
The short version: we collect only what the app needs to work. We don't show ads, we don't use analytics or tracking tools, we don't access your location or contacts, and we never sell your data.
What we collect
Information you give us
| Data | Why we need it |
|---|---|
| Email address and password | To create your account and let you sign in. Your password is stored only as a secure hash by our authentication provider; we never see it in plain text. |
| Display name | To show who you are to friends you connect with. |
| Habits (names, schedules, settings) and completions (when you mark a habit done) | This is the core of the app: tracking your habits and calculating streaks. |
| Friends (your friend code, friend requests you send or receive, and the friends you accept) | To let you connect with and see the progress of people you choose. |
About habit names. You decide what to call your habits. Some names may reveal things about your health or private life (for example "take medication" or "therapy exercises"). We use this information only to run the app for you. We don't analyse it, profile you with it, or share it with anyone beyond our hosting provider. If you'd prefer, use a neutral name; you can rename or delete a habit at any time.
Information created as you use the app
| Data | Why we need it |
|---|---|
| Gems, streak freezes and quests (balances, earned and spent items, quest progress) | To run the rewards features. These are stored on our servers so they stay in sync across your devices. |
| Technical logs (IP address, device and app information, request times) | Recorded automatically by our hosting provider when the app talks to our servers. Used for security, preventing abuse, and fixing problems. |
Information that stays on your device
Some settings never leave your phone: reminders and notification times, quiet hours, theme, and home-screen widget data. We can't see them, and they are removed when you uninstall the app.
What we don't collect
- No advertising, and no advertising identifiers.
- No third-party analytics or tracking tools.
- No location, contacts, photos, microphone or camera access.
- No sale or rental of your personal data, ever.
What other users can see
Streakzy has social features. People you add as friends can see your display name and your habit and streak progress as shown in the app's friends screens. Your friend code can be shared by you with anyone; anyone who has it can send you a friend request, which you can accept or ignore. Your email address is never shown to other users.
How we use your information
We use your information only to:
- provide the app's features (accounts, habits, streaks, friends, rewards);
- keep the service secure and prevent abuse;
- respond to you when you contact us;
- meet our legal obligations.
We don't use it for advertising, and we don't make automated decisions about you that have legal or similarly significant effects.
Legal bases (for users in the EU/EEA, UK and similar regions). We process your account, habit, friend and rewards data because it's necessary to provide the service you asked for (performance of a contract). We process technical logs for our legitimate interest in keeping the service secure and working. Where any information you choose to enter reveals health information, we process it only to provide the features you use it for, based on your explicit choice to enter it, and you can delete it at any time.
Who we share it with
We share data only with service providers that help us run the app, under contracts that require them to protect it:
- Supabase, which hosts our database and handles sign-in. Your data is stored in the TODO: Supabase region (Supabase dashboard → Project Settings → General) region.
- Apple and Google, which distribute the app and, if you buy a paid feature in the future, process the payment. We don't receive your full payment details.
- Email providers, used to send account emails (such as confirming your email or resetting your password).
- Cloudflare and Google (Gmail), which host our website and forward and store emails you send to support@genzjutsu.com.
We may also disclose information if required by law, or to protect the rights, safety or property of our users or others. If genzjutsu is ever sold or merged, your information may transfer to the new owner, who will remain bound by this policy for the data already collected.
International transfers
Our providers may process data in countries other than your own. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses.
How long we keep it
- Account, habit, friend and rewards data: for as long as you have an account. When you delete your account, this data is deleted from our live systems promptly (normally immediately, and in any case within 30 days).
- Backups: deleted data may remain in encrypted backups for up to 30 more days before it is overwritten.
- Technical logs: kept for a limited period (normally no more than 90 days).
- Emails you send us: kept as long as needed to help you, then deleted.
Your choices and rights
- Access and edit: you can see and change your display name, habits and friends in the app.
- Delete: you can delete your account and data at any time in the app (Settings → Account → Delete account). See how to delete your account for details, including an email option.
- Notifications: turn reminders off in the app or in your phone's settings.
Depending on where you live (for example under the GDPR in the EU/UK, or the CCPA in California), you may also have the right to request a copy of your data, correct it, object to or restrict processing, or receive it in a portable format. Email support@genzjutsu.com from the address linked to your account, and we'll respond within 30 days. You also have the right to complain to your local data protection authority.
We don't sell or "share" personal information for cross-context behavioural advertising as defined by California law.
Security
Data is encrypted in transit (HTTPS) and protected by access rules in our database so that each user can only access their own data and what their friends have shared. No system is perfectly secure, but we work to protect your information and will notify you if a breach affects you where the law requires.
Children
Streakzy is not intended for children under 13 (or under 16 in the EU/EEA and UK, unless the law of your country sets a lower age). We don't knowingly collect data from children below these ages. If you believe a child has given us data, contact us and we'll delete it.
Changes to this policy
If we change this policy, we'll update the date at the top. If the change is significant (for example, adding a new kind of data such as Sign in with Google), we'll tell you in the app before it takes effect.
Contact
TODO: your full legal name (genzjutsu), TODO: your country
Email: support@genzjutsu.com