Streakbound Privacy Policy
This Privacy Policy explains how Streakbound (the “App” or “we”) collects, uses, stores, shares, and protects information when you use the App. Our design principle is local-first and data minimization: your health and check-in data stay on your device by default. We send information to our servers or a specified third party only when you sign in, purchase a subscription, or enable AI Coach.
Please read this Policy before using the App. By tapping Agree, or by continuing from the sign-in screen, you understand and agree to this Policy. If you do not agree, do not use the App.
1. Who we are (data controller)
The App is operated by Li Zhuang. Registered address: No. 158, Minxing North Second Road, Erxianqiao Street, Chenghua District, Chengdu, Sichuan, People’s Republic of China. For questions, comments, or requests about this Policy or our handling of your personal information, contact us using the details in Section 12.
2. Information we collect
We collect only what is needed to provide core features, as described below by storage location. We do not collect information that is not listed in this Policy.
2.1 Information stored only on your device
| Data type | Source | Purpose | Storage |
|---|---|---|---|
| Check-in photos, body photos, local avatar | You take a photo or pick one from the library | Daily check-in, comparisons, achievement posters, Settings | On-device only (not uploaded by default) |
| Weight, goal weight, cycle length, and check-in records | Manual entry, or on-device OCR of a scale display | Progress, trends, and reports | On-device only |
| Sex, height, date of birth (age) | Onboarding or profile | On-device body-fat estimates | On-device only |
| Fasting timer state | You start a session in Tools | Countdown and a local notification when it ends | On-device only |
| Language and weight-unit preferences | Settings | Display and unit conversion | On-device only (not currently synced to our servers) |
The camera is used to capture check-in photos. The photo library is used to pick existing photos or to save posters you export. Scale OCR runs on the device; captured frames are not uploaded to our servers. Custom avatars stay on the device. We do not currently offer cloud storage for avatars.
2.2 Anonymous device identifier
| Data type | Source | Purpose | Storage |
|---|---|---|---|
| Anonymous device ID (UUID) and first-launch time | Created automatically on first launch | Local data ownership and the 3-day trial window | Device Keychain; sent to our servers and linked to your account only when you sign in with Apple |
This identifier is used for local data ownership and the trial window. It does not directly identify you in the real world. We do not use it for advertising, cross-app tracking, or profiling. Uninstalling the App usually does not remove this Keychain item, so deleting and reinstalling the App generally will not reset the trial window. We do not upload this identifier on first launch alone, before you sign in.
2.3 Information stored on our servers after you sign in
The App currently supports Sign in with Apple. On first authorization, Apple may provide your name and email address (the email may be a Hide My Email address ending in @privaterelay.appleid.com). We use this to create your account, generate a default nickname, and verify your identity when you contact us.
| Data type | Source | Purpose | Storage |
|---|---|---|---|
| Apple user identifier, email, name or nickname | Sign in with Apple | Account identification and default nickname | Our servers |
| Anonymous device ID and first-launch time | Included in the sign-in request | Trial-window calibration and device-to-account binding | Our servers |
| Access token and refresh token | Issued by us after a successful sign-in | Keep you signed in | Device Keychain; refresh token also stored on our servers |
| Session display data (nickname, cached email) | Sign-in result | Settings display | Device UserDefaults |
| Subscription status and transaction identifiers (product ID, original transaction ID, expiry, auto-renew status, and similar) | App Store transactions and our lookup with Apple | Membership checks and subscription ledger | Our servers |
We do not upload your weight, height, sex, date of birth, check-in records, photos, or challenge (cycle) data to our servers. When you sign in, we only reassign ownership of existing on-device data from the anonymous device ID to your account. The data stays on the device. We do not currently offer cloud backup or cross-device sync of historical check-ins or photos. If you sign in on a new device, that device will not automatically show history from the previous device.
2.4 Information sent when you enable AI Coach
| Data type | Source | Purpose | Processing |
|---|---|---|---|
| Structured weight trend: current, starting, and previous weight (if any), current day, cycle length, weight unit, interface language | Assembled by the App after a daily check-in or at cycle completion | Generate the daily encouragement or analysis, or a short completion summary | Forwarded in real time through our proxy to a third-party AI (see Section 6) |
These requests do not include your name, email, photos, free-text questions, or account ID. AI Coach is off by default. Each time you turn it on in Settings, we show an explanation and enable it only after you confirm.
3. How we use information
We collect and use the information above only to:
- Provide, maintain, and improve core features (check-in, cycle comparisons, achievement reports, fasting timer, and similar);
- After you sign in, create and maintain your account, verify subscription status, and reassign existing on-device data to that account (the data stays on the device);
- Process subscription purchases and verify membership so we can grant the matching features;
- When you enable AI Coach, send the structured weight trend described in Section 2 to a third-party AI provider to generate suggestions;
- Respond to support, privacy, or account-deletion requests, and send necessary service notices (currently local device notifications, such as a fasting-end reminder, not remote push).
We do not use your personal information for advertising, profiling, or cross-app tracking. We have not integrated advertising SDKs, attribution SDKs, or third-party crash-analytics SDKs.
4. Local-first storage
- While you are signed out, check-in records, photos, body data, and challenge (cycle) data stay on your device and are tied to the anonymous device ID;
- We do not upload that local business data to our servers while you are signed out;
- After you sign in, on-device ownership is reassigned to your account. This does not upload health or check-in data;
- We do not currently offer cloud backup or cross-device sync. Signing in on a new device will not automatically bring historical check-ins and photos from the previous device.
On-device data is stored locally (including the Keychain, the App sandbox, and items you save to the system photo library). Account details and the subscription ledger after sign-in are stored on the cloud infrastructure we use (see Section 6). We take reasonable physical, technical, and organizational measures to protect your information.
“Clear Cache” in Settings deletes local thumbnails only. It does not delete original check-in photos or your account.
5. Subscriptions and payments
The App offers auto-renewable subscriptions. The subscription group is Streakbound Premium, with monthly and yearly plans:
- All purchases go through Apple App Store In-App Purchase (StoreKit). Apple processes payment. We do not collect your card details;
- Subscription status is managed on our servers to determine feature access. We store transaction identifiers and subscription status. We do not operate points, tokens, or a balance account;
- The first 3 days after download are a trial managed by the App using the on-device first-launch time. This is not an App Store Introductory Offer. Uninstalling and reinstalling usually will not reset that window (see Section 2 on the Keychain);
- Auto-renewal, cancellation, and refunds follow Apple’s subscription rules and your Apple ID settings.
Subscriptions are not used to sell or transfer your health data. Purchase information is used only for feature access and the ledger. Prices, taxes, and available plans are those shown in the App Store storefront in the App.
6. AI Coach and third parties
AI Coach is generated by forwarding requests through our proxy to Alibaba Cloud DashScope (Qwen, model qwen-flash, processed in Virginia, United States). When the feature is on and you complete a relevant check-in or cycle, the structured weight trend in Section 2 is sent to that provider. Our proxy does not write prompts or replies to a business database; it only forwards them in real time and applies a short-lived in-memory rate limit. The provider still processes the request under its own policies. Please also read Alibaba Cloud / DashScope’s privacy policy.
AI Coach content is general health and behavior guidance only. It is not a medical diagnosis, treatment, or professional medical advice. Consult a qualified clinician if you have health questions.
To run the App we also use the third parties below. We do not otherwise share your personal data with other third parties except as needed for these features:
| Third party | Purpose | Typical data | Location (summary) |
|---|---|---|---|
| Apple (Sign in with Apple, StoreKit, App Store Server API) | Sign-in, subscription payment, and status checks | Name, email, transaction identifiers | Per Apple’s privacy policy |
| Cloudflare (Workers, D1, KV) | Hosting accounts, subscriptions, and sign-in sessions | Account details, device binding, subscription ledger, refresh tokens | Cloudflare’s global network |
| Alibaba Cloud DashScope (Qwen qwen-flash) | AI Coach inference | Structured weight trend, interface language | Virginia, United States |
7. Sharing and disclosure
We do not sell your personal information. We may share information only:
- With your clear consent or at your direction (for example when you sign in, enable AI Coach, or share posters or photos to another app or save them to the library);
- With third parties needed for core features (Apple, Cloudflare, and DashScope in Section 6);
- To comply with applicable law, regulation, legal process, or a competent regulator;
- To the extent reasonably necessary to protect our rights, property, or safety, or those of our users or the public.
8. Your rights
Depending on where you live, you may have rights in your personal information. We aim to support the following:
- Access and correction: you can view and edit your nickname, on-device avatar, and body data in the App.
- Data export: you may contact us and request a copy of server-side data linked to your account (account details and subscription status) in a commonly used electronic format. Check-in records and photos on the device must be backed up or exported by you (system share or save to Photos).
- Account deletion (email request): signed-in users may email the address in Section 12 to request deletion. Include information we can use to verify you (for example the email used with Sign in with Apple, or your in-app nickname). Within 30 days after we receive a verifiable request, we will delete the server-side account, third-party sign-in bindings, and the link between the subscription and that account. Auto-renewal on Apple’s side must be cancelled by you in Apple ID subscription settings. We cannot cancel auto-renewal for you. Email deletion does not erase on-device check-ins, photos, or body data. Uninstall the App to remove sandbox data. The anonymous device ID and trial anchor in the Keychain may remain after uninstall. This Policy does not provide, and does not imply, an in-app “Delete Account” button.
- Withdrawal of consent: for processing based on consent (such as AI Coach), you can turn the feature off in the App at any time. After you turn it off, we will not send new requests to the third-party AI. Withdrawal does not affect processing that was lawful before you withdrew.
9. Children’s privacy
The App is not directed to children under 13 (or a higher age required where you live). We do not knowingly collect children’s personal information, and we do not market to children. If you are a parent or guardian and believe your child provided personal information, contact us using Section 12. We will delete related server-side information promptly.
10. Security, retention, and international transfers
We take reasonable technical and organizational measures to protect your information. Internet transmission and electronic storage are not guaranteed to be fully secure. Please also keep your device and account credentials safe.
We keep information only as long as needed for the purposes in this Policy:
- On-device business data: kept while you use the App. Uninstalling deletes sandbox data, but the anonymous device identifier and trial anchor in the Keychain usually remain (see Section 2);
- Server-side account data: deleted or anonymized within 30 days after a verified deletion request, unless law requires longer retention;
- Subscription transaction records: may be kept for 5–7 years where tax or accounting rules require;
- AI requests: our proxy does not write them to a business database; the third-party AI provider processes them under its own policy.
Your account and subscription data may be processed on Cloudflare’s infrastructure. AI Coach requests may be sent to DashScope in the United States. This means information may be transferred outside the country or region where you live. We take reasonable steps required by applicable law.
11. Changes to this Policy
We may update this Privacy Policy from time to time. If a change is material, we will notify you in the App (notice or dialog). The updated Policy applies from the Effective date or Last updated date at the top. Please review this Policy periodically.
12. Contact us
For questions, comments, or requests about this Policy, our handling of your information, or your rights (including data export and account deletion), contact:
Email: [email protected]
Disclaimer: The App is for general health and fitness tracking. It is not a medical device and does not provide medical diagnosis or treatment. Consult your doctor before starting any diet or exercise program.