Privacy Policy

App: StreakUp

Last updated: October 23, 2026

StreakUp ("the App") helps you track goals with daily check ins, streaks, reminders, and optional Premium purchases. This Privacy Policy explains what information is processed, why it is used, and the choices available to you.

StreakUp is operated by Alexander Kemos, trading as Ktisis Arc, in British Columbia, Canada. We are responsible for the processing described in this policy. Contact app.inquiries2026@gmail.com for privacy questions or requests.

Goal Data Stays in Private App Storage

Ordinary habit tracking does not require an account. Optional AI chat uses an automatic secure service identity and requires explicit consent. Goal titles, descriptions, dates, custom reminder text, check ins, missed days, notes, and most settings are stored locally in the App's private storage using Hive and SharedPreferences. We do not include this content in analytics or advertising events. Optional AI chat shares the selected context explained below.

Depending on your iOS or Android backup settings, Apple or Google may include the App's local storage in an operating system or device backup and may restore it when you reinstall the App or move to another device. Those backups are controlled through your Apple or Google account and are handled under the platform provider's policies.

A cached Premium status is also stored on your device so the App can load quickly. Current purchase entitlement status is verified with RevenueCat when the App starts or you restore purchases. Purchase status updates received while the App is open are also applied.

Optional AI Chat for Adults 18+

AI chat uses an automatic secure identity managed by Supabase, without requiring an email or password. Your messages, pet name, optional display name, current goal titles, schedules and recorded progress, up to 16 recent messages, bounded excerpts of older chat and relevant memories you enable are sent over HTTPS to StreakUp and your selected AI provider for safety checks and replies. Included conversations use Anthropic. With your own API key, choose among providers currently available in the App. Goals refresh on each send. The AI only sees context that fits. StreakUp keeps account, consent, access and usage metadata. Its backend database does not store conversation text. The selected provider may retain requests under its API policies. Avoid secrets and sensitive information. Optional memories are encrypted on this device. Eligible statements expire after 30 days, explicitly saved statements after 90 days and pending drafts after 24 hours. View, edit or delete them in Conversation memory. Your current chat is stored encrypted on this device and survives reopening the App. New chat deletes the current transcript and keeps optional memories. Turning memory off deletes saved memories and the current chat. Deleting AI data or your pet leaving also clears this chat and its memories. Editing or deleting an individual memory clears dialogue that could bring its old details back. Local deletion cannot retract requests already sent or remove provider records. A personal API key is stored securely on this device for your service identity and sent over HTTPS to StreakUp, which uses it transiently with the selected provider. API billing is separate from consumer subscriptions.

When you first set up AI chat or verify a purchase, StreakUp automatically creates a secure service identity with Supabase. No email or password is required. This identifier links consent, access and usage records, so it is pseudonymous rather than anonymous activity. Existing signed in identities are retained on upgrade. Supabase processes the service identifier, authentication records and technical connection information. For existing email accounts, it also retains the email already supplied. Consent records include the notice version, acceptance time and revision. They also include the country you select as your current place of use, so we can check AI provider availability. This is your declaration, not GPS or verified location. Update it in AI service settings when you travel or move. We do not send this country field to the AI model or use it for advertising. It is removed with your AI consent records when you delete AI data. Access, usage and safety controls are associated with your chat account. These records are personal data. No date of birth or identity document is requested. You confirm that you are at least 18. You can withdraw AI consent in AI service settings. Deleting AI data revokes access and removes its authentication, consent, profile and active access records. Minimal request, daily usage and cost metadata remains without the account link for up to 90 days, plus the next daily cleanup interval. These records do not contain conversation text or personal API keys. A limited purchase reference and original purchase and hosted eligibility dates remain to restore purchases and prevent a new Lifetime AI year after account deletion or reinstall. The deleted chat account link is removed. These limited records remain while needed to restore the purchase or enforce its original AI window, including after account deletion. Deleting AI data does not cancel a store subscription. Your free habits and pet remain available.

There is no StreakUp cloud backup or account recovery for local habits, pet history, conversations, memories or personal API keys. Uninstalling, clearing app storage or changing phones can remove these and your service identity. Device backups may restore some ordinary app data, but do not provide a supported way to recover your AI identity or keys. Restore Purchases recovers eligible store access using the same store account; it does not recover this local data or restart the Lifetime AI year. For welcome offer eligibility, Apple DeviceCheck or Google Play Integrity can provide a device token and a limited signal indicating whether this phone has used the offer. Our backend verifies the signal and records the claim status and time for your service identity. Raw proof tokens are used transiently and not stored in the trial ledger. The platform flag can survive uninstalling, factory reset and deletion of AI data; it does not restore identity, consent, purchases or API keys. We do not use this signal for advertising tracking. Contact app.inquiries2026@gmail.com for questions or applicable correction requests. A new service identity requires its own AI consent. Uninstalling does not itself request deletion of backend records. Use Delete AI data before uninstalling when you want to remove them.

These notices explain the feature and do not waive your legal rights. For privacy requests or concerns: app.inquiries2026@gmail.com.

Export chat and memories shares a readable, unencrypted JSON copy of your current chat and saved or pending memories. It excludes memory vectors and stored API credential fields. Anything you typed into the conversation may still be in the export. Protect the copy and choose where you share it. Temporary share copies may be kept by your operating system or sharing app. Exported copies are outside StreakUp deletion controls. Export is not a cloud backup or an import and restore feature. Current chats are limited to 2,000 messages or 8 MiB; at capacity the App asks you to export and start a new chat. It does not silently erase older displayed messages. The AI receives only selected context, so storing your chat does not guarantee perfect recall.

Third Party Services

The App uses the services below. These providers may process technical or usage information under their own privacy policies.

AI Providers and Supabase

Included AI chat uses the Anthropic API. Personal API connections support Anthropic, OpenAI and Google Gemini when available in AI service settings. Before conversation data is sent, the AI notice names your selected provider and asks for permission. Using a personal key changes who pays the provider; it does not make the conversation stay entirely on your phone. StreakUp routes the request through its backend for access checks, safety processing and replies. Switching providers never silently falls back to our paid AI service.

Provider retention and use of requests depend on the provider, API service, account settings and legal obligations. In particular, Google distinguishes paid and unpaid Gemini API services; unpaid services may use submitted content to improve its products and may involve human review. Do not assume that a personal key is a paid service or has zero retention. Review the provider terms before connecting it, and never submit secrets or sensitive personal information. StreakUp does not use your chat or shared goals for advertising.

The in app reporting control sends a selected report category associated with your service identity so we can investigate safety and service problems. It does not attach your conversation text. Reports remain for up to 90 days plus the next daily cleanup; deleting AI data removes the identity link. Reports are not monitored in real time and are not an emergency service. If you separately email support, we receive the content and contact details you choose to send.

Legacy Account Emails

New installations do not require email registration. Resend has delivered confirmation and recovery emails for earlier StreakUp accounts. It processes your email address, the account email content and delivery metadata such as delivery status and time. StreakUp does not send your habits, AI conversation content or provider API keys to Resend. Email records are handled under Resend's policies.

Resend Privacy Policy

Google User Messaging Platform and Google AdMob

Free users may receive banner, interstitial, or rewarded ads. Google may process:

Google User Messaging Platform checks whether a privacy message is required for your region. Your choice is stored on your device, so the App does not ask on every launch. A message can appear again if Google determines that a new choice is required, your previous choice expires, or you reopen Privacy choices in Settings. The App requests ads only when Google reports that ads may be requested.

On iOS, if you allow tracking in Apple's one time permission prompt, Google may use the advertising identifier for ad personalization and measurement. If you decline, ads may still be shown without that identifier.

After Premium access is verified, the App does not initialize Google Mobile Ads or request ads. Firebase Analytics, described below, may still operate for Premium users.

For more information:

Google Analytics for Firebase

The App uses Google Analytics for Firebase to understand reliability, feature use, audience size, and advertising performance. Google Analytics may automatically collect:

The App may send custom event names and nonpersonal status values, such as whether an ad loaded or a consent flow succeeded. It does not send your goal titles, descriptions, notes, reminder text, name, email address, or precise location to Firebase Analytics.

Google retains Analytics data according to the retention settings for the StreakUp Analytics property and may retain aggregated reports for longer.

For more information:

Firebase Crashlytics

The App uses Firebase Crashlytics to diagnose crashes, fatal Flutter errors, and Android application not responding events. Crashlytics may process a Crashlytics installation identifier, Firebase installation identifier, crash time and stack trace, app version, device model, operating system, memory and storage state, and other technical diagnostics.

StreakUp disables Crashlytics collection by default. It enables collection only when Google's regional consent check says additional consent is not required. It remains disabled when a consent choice is required or the consent state is unavailable. The App does not attach goal content, notes, reminder text, names, email addresses, or a custom user identifier to crash reports.

For more information:

Apple App Store and Google Play Billing

Apple processes iOS purchase transactions and Google processes Android purchase transactions, including subscriptions and one time purchases. Depending on your platform, Apple or Google may process purchase history, transaction status, payment information, account identifiers, device information, and fraud prevention data. StreakUp does not receive your full payment card details.

Optional Developer Support

Where available, you may choose to support the developer through a Stripe or PayPal checkout opened in your browser. This is a voluntary, one time payment and does not unlock Premium or any digital benefits. The payment provider processes the information you enter, including payment and contact details, under its own privacy policy. Ktisis Arc may receive transaction records and payer contact details for receipts, support, refunds, accounting, and legal obligations. The App does not receive card details or send your goal content to these providers. You can use the App without making a support payment.

Stripe Privacy Policy and PayPal Privacy Statement

RevenueCat

RevenueCat manages Premium entitlement status and validates purchase receipts. RevenueCat may process:

The App does not provide your name, email address, goal content, or store account credentials to RevenueCat.

For more information: RevenueCat Privacy Policy

How Information Is Used

Sharing

We do not sell your personal information for money. Advertising providers may process identifiers and interactions for personalized advertising where permitted by your choices and applicable law; some laws describe this as sharing for targeted advertising. Use Privacy choices and your device controls to manage available choices. Goal titles, descriptions, notes, check ins and reminder text are not sent to advertising, analytics or purchase providers by the App. Optional AI chat shares messages and selected goal context with StreakUp, Supabase and the selected AI provider as described above. Optional support checkouts involve Stripe or PayPal as described above.

Retention

Optional local memories expire after 30 days, explicitly saved memories after 90 days and pending drafts after 24 hours. Account deletion clears corresponding local memories and recent chat. Unlinked cloud request and usage metadata remains for up to 90 days plus the next daily cleanup. Limited purchase references and original purchase and hosted eligibility dates remain while needed to restore the purchase or enforce its original AI window, including after account deletion. The deleted chat account link is removed.

Security

Local information is protected by the application sandbox provided by iOS or Android. Data sent to third party services uses encrypted HTTPS connections. No security method is perfect, but the App limits collection and does not store conversation text or shared goal content in its backend database. AI providers process requests under their own API policies and may retain them. There is no promise of zero retention.

Your Choices

For instructions and a way to request help without the App, visit Delete StreakUp AI data. We may need to verify control of the service identity before acting on a request. Never send a password, API key or authentication token to support.

AI service settings let you withdraw AI consent or delete the AI account. Conversation memory lets you view, correct or delete local memories. Your current chat is stored encrypted on this device and survives reopening the App. New chat deletes the current transcript and keeps optional memories. Turning memory off deletes saved memories and the current chat. Deleting AI data or your pet leaving also clears this chat and its memories. Editing or deleting an individual memory clears dialogue that could bring its old details back. Local deletion cannot retract previously sent provider requests. Account deletion and uninstalling do not cancel store subscriptions.

Depending on where you live, you may also have rights to request access, correction, deletion, restriction, or objection for information processed by third party providers. Contact us if you need help identifying the relevant provider or control.

Where applicable, we rely on your consent for optional AI context sharing and consent based advertising; providing requested services and purchases for necessary service processing; and legitimate interests in proportionate fraud prevention, reliability and security, subject to your rights. Legal obligations may require some billing records to be retained. You may withdraw consent for future processing without affecting processing already carried out, and may complain to your local data protection authority. Contact us to exercise applicable rights concerning information we control, not only information held by providers.

Children's Privacy

The habit tracker is intended for users aged 13 and older. Optional AI chat is restricted to adults 18 and older. We do not knowingly ask children under 13 to provide personal information. If you believe a child under 13 has provided personal information through the App, contact us so we can review the situation.

International Processing

Ordinary habit tracking stays on this device. Optional AI chat sends the selected context described above to StreakUp, Supabase and the selected available AI provider, which may process it outside your country. If your device settings allow operating system backups, Apple or Google may store or process a backup containing local app data under your account settings and their privacy policies. Google, Apple, RevenueCat, Resend, Stripe and PayPal may also process the technical, analytics, advertising, or purchase information described above in countries outside your place of residence, including the United States, under their respective legal safeguards and privacy policies.

Changes to This Policy

We may update this policy to reflect changes to the App, third party services, or legal requirements. The current version and its effective date will remain available through the App and the public policy page.

Contact

Questions or privacy requests can be sent to app.inquiries2026@gmail.com.