Privacy Policy

Streakhouse is a family daily-games app. This policy explains what information the app and its backend collect, why we collect it, who it is disclosed to, how long we keep it, and the control you have over it. It is written to be read, not to be survived.

1. The short version

The rest of this policy is the detail behind those five statements. Every claim in it reflects what the app's code actually does.

2. Who we are

Streakhouse is operated by Smart Apps Lab, LLC ("Smart Apps Lab," "we," "us"), the controller responsible for the personal information described in this policy. You can reach us about anything in it at support@streakhouse.app.

This policy covers the Streakhouse mobile apps and the Streakhouse website at streakhouse.app.

3. Information we collect

3.1 Account and sign-in

When you first open Streakhouse, we create an anonymous account automatically — no sign-up screen, no email address, no password. You can play from that account for as long as you like.

Later, you can optionally link it to Sign in with Apple, Sign in with Google, or an email sign-in link, so your streak and circle survive a reinstall or a new device. There is still no password — the email option sends a one-time link instead. What we receive depends on which method you choose:

• Apple — your name, and on Android your email address. If you choose Hide My Email, Apple gives us a private relay address instead of your real one.
• Google — your email address, your Google account name, and a link to your Google profile picture. The app never displays that name or picture: the display name and avatar your circle sees are the ones you chose in the app.
• Email link — the address you type, so we can send the link to it.

An email address received this way is held in your sign-in record, which is what proves the account is yours. It is never written into game data, never shown to other members of your circle, and never used for marketing — we send no promotional email of any kind. It is deleted when you delete your account. While a sign-in link is outstanding, the address you typed is also held on your own device — in the browser on the web, in the app's local settings on a phone — so the link can be completed there. It is erased once the link is used.

3.2 Profile and gameplay

• A display name you choose during setup, and an emoji/colour avatar. These are visible to the members of any circle (private group) you join — never public.
• Your circle memberships, the games you've played, your scores and your streak, so they can be shown to you and to your circle.
• Your time zone, so a "day" starts and ends when it does where you are.

3.3 Gameplay content

Some games ask you to type a short answer to a daily prompt (for example, the family-match game, Table Talk). That answer is stored and shown only to the members of your own private circle, next to your display name, so everyone can see who matched. It is never shown outside your circle, never indexed, and never made public. On the web, it can also appear in a screen recording of a circle member's session (§3.5) — including the display names and answers of members who play on the iOS or Android apps, since the reveal screen shows everyone's answer together.

3.4 Device and push notifications

If you turn on notifications, your device registers a push token with your platform's notification service so we can deliver streak reminders. That token is a per-device delivery address — it isn't linked to your display name, gameplay, or any other data we collect, and it's deleted if you turn notifications off or delete your account.

3.5 Analytics, performance and diagnostics

We collect usage, performance and crash data so we can see which parts of the app are used, catch crashes, and find slow screens. This includes product-usage analytics (which games get played and completed), performance timings (how long screens take to load) and crash diagnostics. Here is exactly what that does and does not involve:

Every value sent to an analytics event is sanitized before it leaves your device: it's truncated, it's rejected outright if it looks like an email address, and an analytics event has no field capable of carrying a name, an invite code, or a puzzle answer. Identifiers sent with an event (like your account id) are one-way hashed first, so event data cannot be turned back into your account id.

That sanitization is specific to analytics events, and does not apply to the web screen recordings in the table above: a recording captures whatever is on screen and whatever you type, unmasked. It is made and stored by our analytics processor, Amplitude (§5), tied to your hashed account id — see §9 for how long it's kept.

You can turn this off. In the iOS and Android apps, open your profile and switch off Share anonymous usage data. On the web, open your profile and switch off Share usage data — this stops both analytics and the screen recording described above, on that browser. You can also block either kind of collection with your browser's own privacy controls.

We do not collect advertising identifiers on either platform, so neither iOS's App Tracking Transparency prompt nor any cross-app ad tracking applies to Streakhouse. We don't run ads and we don't buy installs.

3.6 What we never collect

Precise location, contacts, photos, microphone or camera audio, health data, biometric data, financial or payment data, government identifiers, or your device's advertising identifier. Compass (the geography game) only ever compares your map guess to the answer and shows you a distance — Streakhouse's own scoring and backend never transmit your guess as a raw coordinate.

Compass does draw an interactive map, and rendering that map is handled by your platform's own map service — not by Streakhouse. Showing you the globe means your device contacts that service to fetch map tiles for the area you're viewing, the same way any map-based app works; that exchange is between your device and your platform provider, outside Streakhouse's own collection and outside our control.

Streakhouse is free and contains no purchases. We never ask for and never handle payment card details.

4. How we use information, and our legal bases

We use the information above only for the purposes below. For players in the European Economic Area, the United Kingdom and Switzerland, the table also gives our legal basis under the GDPR.

We do not use your information to build advertising profiles, and we do not make decisions about you by automated means that produce legal or similarly significant effects.

5. How we share information

We do not sell your personal information. We have never sold personal information. We do not share personal information for cross-context behavioural advertising or targeted advertising, as those terms are defined under the California Consumer Privacy Act as amended by the CPRA, and under comparable laws in other US states. We do not disclose personal information to data brokers, and we run no advertising of any kind.

Information is disclosed only in these limited circumstances:

• To other members of your circle — your display name, avatar, scores, streak and the answers you give in circle games. This is the point of the app, it is limited to circles you choose to join, and nothing is public.
• To service providers who process data on our behalf, under contracts that restrict them to our instructions. These fall into a small number of categories: cloud hosting and database infrastructure; authentication; push-notification delivery; and analytics, performance-monitoring and crash-reporting providers — including Amplitude, which also makes and stores the web screen recordings described in §3.5. They are permitted to use the data only to provide those services to us — never for their own purposes, and never to sell it.
• For legal reasons — if we are required to by law, or where we believe in good faith that disclosure is necessary to protect the rights, safety or property of our players or the public. We will object to overbroad requests where we can.
• In a business transfer — if Smart Apps Lab is involved in a merger, acquisition or sale of assets, your information may transfer as part of that transaction. We will give notice on this page before your information becomes subject to a materially different policy.

If you would like the identity of a specific service provider in one of the categories above, ask us at support@streakhouse.app and we will tell you.

6. Children and families

Streakhouse is a family app and expects that children will use it, typically inside a family circle set up by a parent or guardian. Because of that, our default posture is the strict one for everyone, not an opt-in setting:

• No advertising identifiers, no ad personalization, no cross-app tracking, no ads — ever, for anyone, at any age.
• Analytics events have no field capable of collecting a name, email address, or other personal detail. On the web, though, a screen recording shows whatever is on screen, which can include a child's display name and typed answers, as described in §3.5; the Share usage data switch (the web counterpart of the apps' Share anonymous usage data) turns that off.
• We never ask a child for a real name, a home address, a phone number, or a photograph. The display name is free text the family chooses and is visible only inside their own circle — and, on the web, inside a screen recording as described above.
• Analytics events are pseudonymous and minimized to what makes the game work. Web screen recordings are tied to a hashed account id, but because they show the screen they are not otherwise anonymous — see §3.5 and §9.

Parents and guardians. A child's account is created and controlled from the family's own device. If you are a parent or guardian and want to review, correct or remove a child's data, you can do it immediately yourself — delete the account in the app at any time; §9 sets out exactly what that removes. You can also stop analytics collection from that device — and, on the web, screen recording — with the Share anonymous usage data switch (Share usage data on the web). If you would rather we handle it, or you believe a child has provided us information you want removed, email support@streakhouse.app and we will delete it and confirm back to you.

We do not knowingly use children's personal information for any purpose beyond running the games, and we never condition a child's participation on disclosing more information than is reasonably necessary to play.

7. Your privacy rights

Whatever your location, the fastest route to the two rights people actually want is built into the app: delete your account, which erases your data immediately, and turn off analytics. Everything below is in addition to that.

7.1 European Economic Area, United Kingdom and Switzerland

You have the right to:

• access the personal data we hold about you, and receive a copy;
• have inaccurate data corrected;
• have your data erased;
• restrict or object to our processing, including processing based on legitimate interests;
• receive your data in a portable, machine-readable format;
• withdraw consent at any time, without affecting processing already carried out; and
• lodge a complaint with your local supervisory authority. We would appreciate the chance to address your concern first.

7.2 California

Under the CCPA as amended by the CPRA, California residents have the right to know what personal information we collect and how we use and disclose it, to request a copy, to request correction, to request deletion, and not to be discriminated against for exercising any of these rights. We do not offer financial incentives for personal information.

In the preceding 12 months we collected the categories of personal information described in §3: identifiers (a pseudonymous account id, and an email address only if you chose to sign in), customer records (a display name), internet or other electronic network activity (app usage, crash and performance data), approximate geolocation at region level, your own user-generated game content, and — on the web — audiovisual information in the form of screen recordings of your session (§3.5). We collected them for the purposes in §4, from you and from your device, and disclosed them only as described in §5.

We did not sell or share personal information in the preceding 12 months, including the personal information of consumers under 16. Because we do not sell or share it, there is no "Do Not Sell or Share My Personal Information" action for you to take — but if you would like that confirmed in writing, ask us.

We do not collect or process sensitive personal information for the purpose of inferring characteristics about you.

7.3 Other US states

Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana and other states with comprehensive privacy laws have comparable rights to access, correct, delete and port their personal data, and to opt out of targeted advertising, sale, and profiling with legal or similarly significant effects. We do not engage in any of those three activities. Where your state provides an appeal process for a refused request, we will tell you how to use it when we respond.

7.4 How to exercise your rights

Use the in-app controls, or email support@streakhouse.app from the address linked to your account. We respond within the period your law requires — 30 days under the GDPR, 45 days under US state laws — and will tell you if we need an extension. We may need to verify your request, which for an anonymous account may mean asking you to make it from the device holding the account, since that is the only link we have. An authorized agent may act for you with written permission we can verify. Exercising these rights is free unless a request is manifestly unfounded or excessive.

8. International data transfers

We are based in the United States, and the infrastructure that runs Streakhouse processes data in the United States and other countries where our service providers operate. If you use Streakhouse from outside the United States, your information is transferred there. Where we transfer personal data out of the EEA, the UK or Switzerland, we rely on appropriate safeguards — the European Commission's Standard Contractual Clauses and the UK Addendum, or an adequacy decision where one applies. You can ask us for details of the safeguards used.

9. Data retention and deletion

You can delete your account at any time from inside the app. Doing so:

• Removes you from any circles you belong to (and, if you were the only member, removes the circle itself).
• Permanently deletes your profile, your saved game state, your answers and your scores from our database.
• Deletes your sign-in record, including any email address held in it.
• If you owned a circle, ownership passes to the next-longest-standing member so the circle isn't orphaned; your own data is still fully removed.

This is handled automatically and immediately when your account is deleted — deletion isn't a manual, "email us and wait" process.

While your account exists, we keep your profile and game data so the app can show you your streak; that is the whole reason it is retained. Analytics event data is pseudonymous (tied only to a hashed id, never your name) and is held for a limited retention period configured in our analytics providers' settings, at the end of which it expires. Because it is not linked to your identity, deleting your account does not retroactively remove historical aggregate analytics event data — there is no key left that could connect it back to you.

Web screen recordings are different: because a recording shows the screen, it can show your name and your answers even though it is filed under the same hashed account id. Amplitude, our screen-recording processor, keeps a recording for 30 days from when it was captured and then deletes it automatically. You don't have to wait — email support@streakhouse.app and we'll have your recordings deleted sooner.

10. Data security

Data is encrypted in transit between the app and our backend, and encrypted at rest by our infrastructure provider. Access to the underlying database is governed by server-side security rules that restrict each account to its own data and the data of circles it belongs to, so one player cannot read another's data even with a modified client. Administrative access is limited to those who need it.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we become aware of a breach affecting your personal information, we will notify the relevant authorities as required by law, and affected players wherever we have a means of reaching them — note that for an anonymous account we deliberately hold no contact details, so an in-app notice may be the only route available.

11. Changes to this policy

If we materially change what we collect or how we use it, we'll update this page, change the effective date above, and — where the law requires it — obtain your consent before the change applies to information already collected. We encourage you to check this page when the app tells you it has been updated.

12. Contact us

You can exercise your privacy rights at any time — including deleting your account and all associated data — directly in the app. This immediately and permanently removes your data from our systems, with one exception: a web screen recording already captured before you delete your account survives at Amplitude for up to 30 days per §9, though you can ask us to delete it sooner. See §9 for exactly what account deletion covers.

For any other question about this policy or your data, or to reach us about a child's account, email support@streakhouse.app. We are Smart Apps Lab, LLC, United States.