Privacy Policy

01The short version

• We collect what we need to run your habit tracker: your account, your habits and check-ins, your profile, and basic technical data.
• We do not sell your personal information and we do not share it for advertising. There are no ad networks in the app.
• Health data from Apple Health or Health Connect is only read on your device, with your permission, to update your habits. It is never used for advertising or sold.
• You can see, export and delete your data in the app, and you can delete your whole account yourself at any time.

02Who is responsible for your data

GOGOGO LLC, a limited liability company organized under the laws of the State of Delaware, United States, is the controller of the personal information described here (112 Capitol Trail Suite A, Newark, DE 19711, USA). You can reach us at info@gogogollc.com.

03Information we collect

Information you give us:

• Account details: email address and password (stored only in hashed form), or the details you share through Sign in with Apple or Google (name and email; Apple may give us a private relay address).
• Profile: display name, avatar picture, optional bio and birthday, language and time zone.
• Habit data: habits you create, check-ins with their dates and times, streaks, experience points, companion evolutions, subtasks, water, meditation and reading logs, scheduled days and reminder preferences.
• Social data: friend connections, invitation codes and links, shared habits and their members, reactions and activity shown to friends.
• Purchase information: your subscription status (see "Payments" below).
• Messages you send to support and any feedback you give us.

Information collected automatically:

• Device and app data: device type, operating system and version, app version and build, language, time zone and a notification (push) token if you allow notifications.
• Usage data: which screens you open, which features you use, session length and similar events, linked to your account or to a random identifier, and an approximate country derived by our network provider from your connection. We do not store your IP address in our analytics records.
• On the website: page views, button clicks and referrer, using a random per-tab identifier that disappears when you close the tab. We honour Do Not Track and Global Privacy Control and do not use advertising cookies.

Information from other sources, only if you allow it:

• Apple Health (steps, water, sleep) and Android Health Connect (steps, hydration): read on your device after you grant permission, only to update the matching habits; GoStreak can also write water entries you log. We do not receive your raw health records, only the resulting habit progress such as "goal reached", which is stored like any other check-in. You can withdraw permission in your device settings.

04How we use information

• To provide the Service: create your account, run your habits and streaks, grow companions, sync across devices and power friends, shared habits, widgets and leaderboards.
• To send notifications you ask for, such as habit reminders and streak warnings.
• To process purchases and unlock the features of your plan.
• To keep the Service safe, prevent abuse and cheating, enforce our Terms and meet legal duties.
• To understand how the app is used and improve it, fix bugs and develop new features.
• To answer your questions and support requests.

05Legal bases (EEA, UK and similar laws)

• Contract: to provide the Service you signed up for.
• Legitimate interests: to keep the Service secure, prevent fraud, measure and improve the app in ways that are not intrusive. You can object at any time.
• Consent: for optional things such as notifications and health data access. You can withdraw consent at any time without affecting earlier processing.
• Legal obligation: where the law requires us to keep or disclose information.

06Who we share information with

We do not sell personal information. We share it only as follows:

• Other users, as you choose: friends and shared-habit members see the profile and habit information described above; other users can see your display name, avatar and points on leaderboards and in friend search.
• Service providers that process data for us under contract: Supabase (database, sign-in, file storage and server functions), RevenueCat (subscription management), Expo (push notification delivery), Cloudflare (website hosting and network protection) and Google Fonts (typefaces on our website, which receives your IP address when the page loads).
• Apple and Google, which process payments and provide sign-in, notifications and health frameworks under their own policies.
• Authorities and advisers when the law requires it or to protect rights, safety and security.
• A buyer or partner if we are involved in a merger, acquisition or asset sale; we will tell you and any new owner must honour this policy.

07Payments

Purchases are made through the Apple App Store or Google Play. We never see or store your card or payment details. RevenueCat receives purchase receipts and an app user identifier so it can tell us which plan is active for your account.

08Your choices and controls

• Notifications: change in the app or in your device settings.
• Health data: revoke access in your device settings.
• Profile information: edit or remove your bio, birthday and avatar in the app.
• Export: download your data from the app (a paid-plan feature) or ask us by email.
• Delete: delete your account in the app under Profile, Account & privacy, Delete Account. You can also ask by email or on our Delete your account page.

09How long we keep information

We keep your account data while your account is active. When you delete your account we permanently delete your profile, habits, check-ins, streaks, friend connections, avatar and related data from our systems; copies in encrypted backups are overwritten within about 35 days. Usage events that were linked to you are de-identified and kept in aggregate form, and we may keep limited records as required by law (for example purchase records at Apple, Google and RevenueCat under their own policies) or to resolve disputes and prevent abuse.

10Security

We use encryption in transit, access controls, row-level security in our database and separation of administrator roles. Passwords are hashed. No system is perfectly secure, so we cannot guarantee absolute security; please use a strong, unique password. If a breach affects you we will notify you as the law requires.

11International transfers

We and our providers operate in the United States and other countries, so your information may be processed outside the country where you live. When we transfer information from the EEA, UK or Switzerland we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

12Children

GoStreak is not directed to children under 13 and we do not knowingly collect personal information from them. If you believe a child under 13 has given us information, contact info@gogogollc.com and we will delete it. In places where the minimum age is higher than 13, the higher age applies.

13Your rights

Depending on where you live, you may have the right to access, correct, delete, export or restrict the use of your personal information, to object to certain processing, to withdraw consent, and not to be discriminated against for using your rights. To use a right, use the controls above or email info@gogogollc.com. We may need to verify your identity, and we will reply within the time the law requires (generally 30 to 45 days). If you are in the EEA or UK you can also complain to your local data protection authority.

California residents: in the past 12 months we collected the categories of personal information listed above (identifiers, account and profile information, commercial information such as subscription status, internet and app activity, approximate location such as country, and, with your permission, health-related data on your device) for the purposes listed above and disclosed them to the service providers listed above. We do not sell or "share" personal information as those terms are defined in California law, and we do not knowingly sell or share the personal information of people under 16. You may use an authorised agent to make a request.

14Do Not Track

Our website respects Do Not Track and Global Privacy Control signals by turning off its analytics script.

15Changes to this policy

We may update this policy. If a change is significant we will notify you in the app or by email before it takes effect. The date at the top shows when it was last updated.

16Contact

GOGOGO LLC, 112 Capitol Trail Suite A, Newark, DE 19711, USA. Email: info@gogogollc.com (support: gostreakapp.com/contact).