Privacy Policy

Last updated: 2 November 2026

1. Who is responsible

The controller responsible for data processing in the Streakwise app and on this website is:

Julian Schäfer (sole proprietor)
c/o Impressumservice Dein-Impressum
Stettiner Str. 41
35410 Hungen
Germany
Email: support@streakwise.app

2. Data stored on your device

Your habits, check-ins and history, the name and personal goal you enter, your onboarding answers and your settings are stored locally on your iPhone. We have no access to this data. It is deleted when you delete the app or use “Reset app” in the settings. Without an account, none of this is transmitted to us.

3. Account (Sign in with Apple)

An account is optional. If you choose “Sign in with Apple”, Apple confirms your identity and we receive a pseudonymous user identifier from Apple, your email address (or an Apple private relay address, if you choose to hide your email) and, on first sign-in only, your name. We store this data with our hosting provider Supabase (Supabase, Inc.) on servers in Frankfurt, Germany (EU). When you sign in, Supabase also logs technical data such as your IP address and the time of sign-in to keep the service secure. As Supabase, Inc. is based in the USA, access from the USA cannot be ruled out; this is covered by the European Commission’s standard contractual clauses. The same applies to the cloud backup (section 4).

Purpose: to provide your account, to link your subscription to it and to enable the cloud backup. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).

You can delete your account at any time in the app under Settings › Account › Delete account. This permanently deletes your account and your cloud backup and revokes the sign-in with Apple.

4. Cloud backup

While you are signed in, the app automatically uploads a compressed copy of its database to Supabase Storage (Frankfurt, EU) when you open the app and when it changes between foreground and background, provided something has changed. The backup contains your habits, check-ins and history, your name, your personal goal and your settings. Step and distance values from Apple Health are only included if you explicitly agree: after you sign in, the app asks you once, and you can change your decision at any time under Settings › Account › Back up Apple Health values. Without your consent, these values stay on your iPhone only; turning the switch off removes them from the cloud with the next backup. Device-specific settings (such as notification permission and Health access) are not included. Data is encrypted in transit (TLS) and stored encrypted by the provider. Only you can access your backup.

Purpose: to restore your data after reinstalling the app or on a new iPhone. Legal basis: Art. 6(1)(b) GDPR; for the Apple Health values, your explicit consent (Art. 9(2)(a) GDPR), which you can withdraw at any time with the switch mentioned above. Deleting your account deletes the entire backup.

5. Apple Health

If you connect Apple Health, Streakwise reads only your steps and walking and running distance, only after you have granted permission and only to count habits that are linked to Health. Streakwise does not write anything to Apple Health.

• Health data is never used for advertising or marketing and is never sold or shared with third parties.
• Health values are not sent to our usage statistics.
• Daily values are stored as check-ins on your device. They are only included in your cloud backup with your explicit consent (section 4).

Legal basis: your explicit consent (Art. 9(2)(a) GDPR). You can revoke access at any time in iOS under Settings › Health › Data Access & Devices › Streakwise.

6. Reminders

Reminders are scheduled locally on your iPhone. We do not use a push server and do not collect push tokens.

7. Subscriptions

Streakwise requires a subscription. Purchases are processed exclusively by Apple through the App Store; we do not receive any payment details. To manage the status of your subscription, we use RevenueCat (RevenueCat, Inc., USA). RevenueCat processes a random app user ID (or, if you are signed in, the internal ID of your account), your purchase and subscription history, the App Store country, the app version, device and operating system information including the device identifier for vendors (IDFV) and, for technical reasons, your IP address.

Purpose: to unlock the app, to restore purchases and to keep the subscription linked to your account. Legal basis: Art. 6(1)(b) GDPR. RevenueCat processes data in the USA; the transfer is based on the European Commission’s standard contractual clauses and, where applicable, the EU-U.S. Data Privacy Framework.

8. Usage statistics (only with your consent)

Only if you agree, we send pseudonymous usage data to PostHog (PostHog, Inc.), hosted on servers in the EU, to understand which features are used and to improve the app. This includes, for example, screens viewed, app opens, the type of a habit or a chosen template, your answers during setup as fixed keys (such as your goals, preferred time of day and how you feel about your routine), as well as technical data such as device model, operating system and app version, and language. It never includes your name, your email address, your Apple ID, text you entered or exact Health values. PostHog receives your IP address for technical reasons when the data is transmitted, but does not store it.

Without an account, the data only carries a random ID. If you sign in, we link it to your account’s internal ID so that usage stays consistent across reinstalls; when you sign out, the app gets a new random ID again. There is no tracking across apps, no advertising identifier (IDFA) and no screen recording.

Legal basis: your consent (Art. 6(1)(a) GDPR and Section 25(1) TDDDG). We ask for it once during setup; until you decide, nothing is sent. You can withdraw your consent at any time in the app under Settings › Legal › Privacy policy › Anonymous usage statistics. As PostHog, Inc. is based in the USA, access from the USA cannot be ruled out; this is covered by the standard contractual clauses.

Usage data is deleted automatically 12 months after it was collected. If you withdraw your consent, nothing more is sent from that moment on. We will delete data that has already been collected sooner if you ask us; an email to support@streakwise.app is enough. If you were signed in, we can find your data using your account’s ID. Without an account, the data only carries a random ID that we cannot link to you (Art. 11 GDPR); it is then deleted once the 12 months have passed.

9. This website

This website is hosted on GitHub Pages (GitHub, Inc., USA). When you visit it, GitHub processes your IP address and technical access data in server logs to deliver the site and keep it secure. Legal basis: our legitimate interest in a secure and reliable website (Art. 6(1)(f) GDPR). The transfer to the USA is based on the EU-U.S. Data Privacy Framework and standard contractual clauses. The website uses no cookies, no analytics and no externally loaded content.

10. Contacting us

If you write to us by email, we process your email address and the content of your message to answer your request (Art. 6(1)(b) or (f) GDPR). We delete this data once your request has been dealt with, unless statutory retention obligations apply.

11. Overview of recipients

We have concluded data processing agreements with these providers where required. We do not pass on data to anyone else unless we are legally obliged to do so.

12. How long we keep data

• Data on your device: until you delete the app or reset it.
• Account and cloud backup: until you delete your account.
• Subscription data: as long as needed to provide the subscription and as required by law.
• Usage statistics: 12 months from collection, or sooner on request.
• Emails: until your request has been dealt with, subject to statutory retention periods.

13. Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object (Art. 21). You can withdraw any consent at any time with effect for the future (Art. 7(3)). You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU member state of your habitual residence. To exercise your rights, simply email support@streakwise.app.

14. Is providing data required?

You can use Streakwise without an account, without Apple Health and without usage statistics; all of these are voluntary. Buying a subscription requires an Apple ID, and RevenueCat needs the data described in section 7 to unlock the app. If you don’t provide data for a voluntary feature, only that feature is unavailable.

15. No automated decision-making

We do not use automated decision-making, including profiling, within the meaning of Art. 22 GDPR.

16. Users outside the EU

Streakwise is available worldwide. We apply the standards described here to all users, wherever they live. We do not sell or share personal information for cross-context behavioural advertising, as defined for example by the California Consumer Privacy Act (CCPA/CPRA). Regardless of where you live, you can ask us to access, correct or delete your data at any time; we will not treat you differently for doing so.

17. Children

Streakwise is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

18. Changes to this policy

We will update this policy when the app or the legal situation changes. The current version is always available at this address. If a change requires your consent again, the app will ask you.