Privacy Policy

This Privacy Policy explains how OneStreak (“OneStreak,” “we,” “us,” or “our”) handles personal information when you use the OneStreak iOS app, website, support services, and related features (together, the “Service”).

OneStreak is a private accountability service designed for one person and one invited partner. It is not a public social network.

Depending on how you use OneStreak, we collect:

• Account information: your Sign in with Apple user identifier, email address or Apple private relay address, OneStreak user ID, and the display name you choose.
• Content you create: proof and Spark photos, captions, Spark messages, calorie amounts you enter, and timestamps.
• Pact activity: invite-code status, weekly goals, rewards and consequences, votes, streak and session activity, and relationship state within the app.
• Subscription information: product and entitlement status, transaction identifiers, purchase and expiration dates, and related billing events. Apple processes your payment details; we do not receive your full payment-card information.
• Device and technical information: push-notification token, platform, app environment and bundle identifier, along with limited request and security logs produced by our infrastructure.
• Communications: information you include when you contact support or otherwise communicate with us.

OneStreak requests camera access only when you use a photo feature and notification permission when you choose to receive partner activity. We do not access your contacts, precise location, microphone, or HealthKit data.

We use personal information to:

• create and secure your account;
• connect exactly two people through a private invite;
• store, sync and display proofs, Sparks, pacts and streaks;
• send notifications about your partner’s activity;
• process and restore subscriptions and unlock shared access;
• respond to support requests and troubleshoot problems;
• protect the Service from misuse, fraud and security threats; and
• comply with legal obligations and enforce our Terms.

We do not sell personal information. OneStreak contains no advertising SDK and does not track you across other companies’ apps or websites.

Shared proofs, Sparks and pact information are visible only to you and the one partner currently connected to your pact. Private practice proofs remain visible only to you. OneStreak does not provide a public profile, follower system, discovery feature or public feed.

Your partner may save information they can see—for example, by taking a screenshot. Only share content you are comfortable sharing with that person.

We disclose information only as needed to operate the Service:

• Supabase provides authentication, database, private file storage, realtime sync and server functions.
• RevenueCat manages subscription status and purchase entitlements using your OneStreak user ID.
• Apple provides Sign in with Apple, App Store billing and push notifications.
• Hosting and support providers process limited data needed to operate the website and answer messages.

These providers may process information only to provide services to us and must protect it consistently with their obligations and this policy. We may also disclose information if required by law, to protect rights or safety, or as part of a business transfer subject to appropriate safeguards.

We retain account and content information while your account is active and for as long as needed to provide the Service. Invite codes expire after seven days, and invalid push tokens are removed when reported by Apple.

If a pact ends, each person keeps their own proofs and loses access to the other person’s proofs. Shared Sparks, pact proposals and votes are removed for both people.

You can delete your account directly in OneStreak from Profile → Delete account. Deletion removes your account and associated active records, including your profile, proofs, Sparks, votes and device tokens. Your former partner keeps their own proofs. Deletion can take a reasonable period to propagate through restricted storage and backups. We may retain limited transaction, security or legal records when required by law, to prevent fraud, or to resolve disputes.

Deleting OneStreak does not automatically cancel an Apple subscription. Manage subscriptions through your Apple ID settings.

We use technical and organizational safeguards intended to protect personal information. Photos are stored in a private bucket, and database and storage access rules restrict content to the appropriate account and current pact partner.

No method of transmission or storage is completely secure. Please use a protected device and tell us promptly if you believe your account or invite code has been compromised.

Our primary application database is hosted in the European Union. Some providers may process information in other countries where they operate. Where required, we use appropriate safeguards for international data transfers.

You can edit your display name, control camera and notification permissions in iOS Settings, leave a pact, remove a partner where available, delete individual proofs, or delete your entire account in the app.

Depending on where you live, you may also have rights to request access, correction, deletion, restriction, portability or an objection to certain processing. To exercise a right or ask a privacy question, email contact@onestreak.fit. We may need to verify your identity before completing a request.

OneStreak is not directed to children under 13. You must also meet the minimum age required to consent to online services in your country. If we learn that we collected a child’s information without valid consent, we will take steps to delete it.

We may update this policy as the Service or legal requirements change. We will post the new date here and provide additional notice when a change materially affects your rights.

Questions or requests can be sent to contact@onestreak.fit.