Privacy Policy

Last updated: January 2026

1. Introduction

Welcome to BroStreak! We are here to help you build habits and maintain streaks with our app BroStreak (the "App"). Our App is available on Google Play and App Store.

We process personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC ("GDPR").

By this privacy policy, we would like to inform you about how we process your personal data and provide you with all relevant information required by the GDPR.

2. Personal Data Processed

We process personal data mainly during usage of our App. For better clarity, we divided personal data into these categories:

  • Email address and contact info: Your email address, name, and profile picture provided during sign-up via Google, Apple, or Email authentication.
  • User account content: Information you provide when you use the App, including your habit streaks, weekly goals, check-in notes, accountability partner connections, XP/level progress, and other fitness data.
  • Usage data: Launches, taps, clicks, time spent in App, and information about how you interact with features.
  • Diagnostics data: Crash logs, performance data, and technical information about your device.
  • Device tokens: Push notification tokens (e.g., Expo Push Token) to send you reminders and partner updates.
  • Health data: With your explicit permission in Hardcore Mode, we read workout exercise data from Apple Health (iOS) or Health Connect (Android) to verify gym visits. This data stays on your device and is not transmitted to our servers.

Children: The App is not designated for children under the age of 13. We do not knowingly collect personally identifiable information from children under 13.

3. Purposes of the Processing of Personal Data

We process your personal data as a data controller for the following purposes:

3.1 Provision of the App functionalities

We primarily process personal data to provide you with our App's core features: tracking streaks, sharing progress with accountability partners, and sending reminders.

  • Legal basis: Performance of the contract (Terms of Service).
  • Data processed: Email/contact info, User account content, Device tokens.

3.2 Improving our App and analytics

We may process data about how you use our App to understand trends and improve user experience.

  • Legal basis: Legitimate interest.
  • Data processed: Usage data, Diagnostics data.

3.3 App operation and security

To ensure the App works correctly and securely (authentication, database integrity, error tracking).

  • Legal basis: Legitimate interest.
  • Data processed: User account content, Usage data, Diagnostics data.

4. Health Data

We take your health data seriously:

  • Health data is only accessed with your explicit permission when you enable Hardcore Mode
  • We only read workout/exercise data necessary for streak verification (15+ minute workouts)
  • Health data stays on your device and is never transmitted to our servers
  • Health data is never sold to third parties
  • Health data is never used for advertising purposes
  • You can revoke health data access at any time through your device settings

5. Sharing of Personal Data

We may share personal information with third parties who help us provide our App to you ("Data Processors"):

  • Convex (Convex, Inc.): Provides the real-time database and backend functions. They store your user content, streaks, and account data securely.
  • Clerk (Clerk, Inc.): Manages user authentication and identity. They handle your login credentials (Google/Apple/Email) securely.
  • Expo (650 Industries, Inc.): Provides the infrastructure for sending Push Notifications to your device.
  • RevenueCat (RevenueCat, Inc.): Manages in-app subscriptions and premium features.
  • Sentry (Functional Software, Inc.): Provides error tracking and crash reporting to help us identify and fix issues.
  • Google & Apple: Depending on your login method and app store choice, they process data related to app installation and authentication.

We do not sell your personal data to advertisers.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

  • Encryption of data in transit and at rest
  • Secure authentication mechanisms via Clerk
  • Secure token storage on your device
  • Regular security assessments

However, no method of transmission over the Internet is 100% secure.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. You may request deletion of your account and associated data at any time through the App settings or by contacting us.

8. Your Rights

Under the GDPR and similar laws, you have the right to:

  • Access: Request a copy of your data.
  • Deletion: Request deletion of your account and all associated data directly within the App settings.
  • Rectification: Correct inaccurate data.
  • Object/Restrict: Object to processing based on legitimate interest.
  • Data Portability: Request your data in a portable format.

To exercise these rights, please contact us at brostreakapp@gmail.com.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

10. Contact Us

For any questions, rights exercise, or complaints about this Privacy Policy, please contact us at:

support@brostreak.com