This policy explains what StreakPlan ("we") collects when you use StreakPlan, why, and your choices. We collect as little as we need to run the Service, and we never sell personal data.
What we collect
- Account: your email address and, if you sign in with Google, your name, profile picture and Google account id.
- What you put into the Service: the content you create or upload, stored so we can provide the Service.
- Billing: your plan and subscription status. Payment details go to Polar, our Merchant of Record, and never reach our servers.
- Security records: sign-in codes (stored only in hashed form, deleted within a day), sessions, and hashed IP addresses used to limit abuse.
- Where you came from: on your first visit, the site that sent you (or the campaign named in the link) and the page you landed on, kept with your account if you sign up.
- Usage records: how much of your plan you use, and a record of each AI request (which model answered, its size and cost) to run the Service and keep its costs in check.
Why we use it
To provide the Service and your account (performance of our contract with you), to keep it secure and prevent abuse (our legitimate interest), to take payment through Polar, and to send emails the Service needs, such as sign-in codes, payment notices and important account notices. We may also send warnings when you near your plan's limit, and product news only if you asked for it (the optional box at sign-up, or Settings); you can turn each off in Settings or from the link in the email. We keep a record of when and where you said yes or no to product news, and delete it with your account.
Cookies
We set one cookie to keep you signed in, a short-lived one during Google sign-in, and one on your first visit that remembers where you came from for 30 days (so we know which links bring people). Cloudflare Turnstile, which protects the sign-in form from bots, may use its own cookies for that purpose only. We use no advertising or cross-site tracking cookies.
Partner links
If you arrive through a partner's link, we keep the partner's code in a cookie for 90 days (with a random number, nothing about you) to credit them if you sign up. The partner can then see your email, when you signed up, your plan and what you have paid, so they can help you; never your content or card details.
Who processes it for us
- Cloudflare: hosting, database, file storage, email delivery and bot protection.
- Polar: checkout, payments, invoices and tax, as Merchant of Record.
- Google: sign-in, if you choose it.
- OpenRouter: what you ask the AI features, passed on to the AI model that answers it.
- Resend: your email address and first name, to send product news, only if you asked for it.
- Your browser's push service (Apple, Google, Mozilla or Microsoft, depending on your browser): the text of each notification, encrypted so only your device can read it, only if you turned notifications on.
Each processes data only to provide its service to us. Some are outside your country; we rely on their standard safeguards for transfers.
How long we keep it
Your account and content are kept while your account exists and deleted when you delete it. Sessions end 30 days after your last visit. Records of AI requests are deleted after 90 days (the text of a request kept to check the Service's quality, after 30). Billing records are kept by Polar and by us as long as tax law requires.
Your rights
You can see and correct your details in Settings, and delete your account and its data there at any time. You can also ask us for a copy of your data, or to restrict or object to its use, by emailing hello@streakplan.com. Where data protection law gives you the right, you can complain to your local data protection authority.
Contact
StreakPlan. hello@streakplan.com. We will email you before a material change to this policy takes effect.