Yonga Streak privacy policy

Everything you create in the app is saved on your phone first: your habits and their targets, the entries you write, the results counted from them, your streaks and history, and your settings.

This data sits in the app’s private storage, which other apps cannot read. It is left out of Android’s cloud backup. When you set up a new phone with Android’s phone-to-phone transfer, that transfer can copy it across; nothing else moves it.

The reminder is scheduled by the phone itself. No push service is involved, and nothing is sent anywhere to deliver it.

The app uses these permissions:

• Network access, to have entries read when you have turned that on, and to check a purchase.
• Notifications, asked for only if you turn the reminder on.
• Running after a restart, so the reminder is booked again when the phone restarts.
• Google Play billing, so that Streak Plus can be bought through Google Play.
• Background work: three permissions Android’s job scheduler uses to finish a reading or a purchase check in the background, by seeing whether the phone is online, keeping it awake for a moment and running a short background task.

It does not ask for your location, contacts, camera, microphone, photos or files, and it does not read your advertising ID.

Nothing leaves the phone unless reading is on or you buy Streak Plus. The app asks about reading the first time you open it, and the choice stays in Settings as “Read my entries” or “Keep on this phone”.

With reading on, each entry you save is sent to our server to be read. The request contains:

• the text of the entry, and the date, time and time zone it was written in;
• the names of your habits, their targets and any “what counts” note you gave them;
• short summaries of what was logged for those habits in the past week, such as “15 pages, done”, so that a correction can be matched to the right record;
• an access key that identifies this installation of the app.

The access key is created at random when the app registers. It is not your name, email address, phone number or advertising ID, and we have no way of telling who it belongs to.

Registering. The first time an entry is read, or when you buy Streak Plus, the app registers this installation with our server, once. Google Play checks that the app is the genuine copy it distributes, installed through your Google Play account, on a phone that passes Google’s integrity checks; our server receives that verdict and nothing about you or the phone beyond it. The app also sends a code made from the identifier Android gives this app on this phone. It is not the phone’s serial number or advertising ID, it is different for every app, and it changes when the phone is reset. Our server keeps a one-way fingerprint of that code with the installation, so that the free trial counts once per phone.

An entry is free text, so it holds whatever you write in it. Please keep passwords, payment details and other people’s private information out of your entries.

Entries written while reading is off stay on the phone. One of them is sent only if you later open it and choose to have it read. A reply typed into the reminder notification is an entry like any other.

Reading entries is free during a free trial, which starts with the first entry that is read. To know when it ends, our server keeps the date it started, filed under the phone fingerprint described above.

After the trial, reading needs Streak Plus, a subscription sold through Google Play. Google Play takes the payment and keeps your payment details. We never receive them, nor your name or email address.

When you buy, the app hands our server the purchase token Google Play gives it. The purchase also carries a one-way fingerprint of your installation’s identifier, which the app adds so that the purchase can be matched to it. Our server checks the token with Google Play and keeps it with what Google Play says about the subscription: the plan, when it renews or ends, whether it was cancelled and whether it was a test purchase. It links the purchase to your installation, and to at most two more phones that use the same Google Play account.

Three kinds of service handle your data.

Our server. It checks the access key, applies the fair-use limits and passes the entry on to be read. It does not store the text of your entries and does not write it to its logs. It keeps a record of the installation with its phone fingerprint, a count of its requests per day, the start of its free trial, any purchase records and, for two days, the result of each reading (which habit, which day, the outcome and any amount), so that a request repeated after a lost connection is not read twice.

AI service providers. The reading itself is done by third-party AI services. They receive the entry’s text with the date, time and time zone it was written in, your habits’ names, targets and notes, and the recent summaries. They do not receive the access key, and because the request reaches them from our server, they do not see your IP address or anything about your phone.

These providers process a request in order to answer it. Under the terms that apply to us, they do not use your entries to train their models. We also ask them not to keep a request wherever a service offers that choice; they may still retain it for a limited time under their own terms, for example to detect abuse.

We treat which providers we use as business information, but we will name the current ones if you ask: write to [email protected].

Google Play. It sells and bills Streak Plus, checks the app and the phone when the app registers, and answers our server’s questions about a purchase. Google handles what it learns in doing so under its own privacy policy.

Traffic between your phone, our server and these providers also passes through the hosting and network providers that carry it. Our server and the services described here may process data in countries other than the one you live in.

• No advertising, and no advertising identifiers.
• No analytics or tracking software in the app.
• We do not sell or rent your data, and we share it with no one except the service providers described above.
• We do not build a profile of you from your entries, and we do not use them to train AI models.
• We do not receive or keep your payment details.
• We do not send marketing email. The app never asks for your address.

On your phone, your data stays until you delete it. You can delete a single entry from its own screen, archive a habit and then delete it for good, or erase everything with “Delete all data” in Settings. Uninstalling the app also removes everything it stored on the phone.

You can stop entries leaving the phone at any time by choosing “Keep on this phone” in Settings. Entries still waiting to be read at that moment stay on the phone.

Our server holds no copy of your entries, so there is nothing of that kind to delete there. The result of a reading can be fetched again for two days, and an hourly cleanup removes it after that. The same cleanup removes daily request counts after 30 days. The installation record with its phone fingerprint, the start of its free trial and any purchase records are kept while the service runs, because the free trial and the subscription depend on them. Backups of the server’s database are kept for up to two weeks.

To have Yonga Streak’s data on our server deleted:

1. In Streak, open Settings and note the installation number shown at the bottom. If no number is shown, the app never registered and our server holds nothing about it.
2. Write to [email protected] with the subject “Delete my Yonga Streak data” and that number.
3. Within 30 days we delete the installation record, its phone fingerprint, the start of its free trial, its request counts and the purchase records linked to it, and tell you when it is done. Copies in the server’s backups disappear as those backups are replaced, within two weeks.

Deleting this data does not cancel Streak Plus; cancel it in Google Play’s subscription settings. Google Play keeps its own records of your purchases under Google’s policies, and requests held by the AI service providers are removed under their own retention rules.

Everything the app sends travels over an encrypted connection. On the phone, the access key is stored encrypted with the phone’s own keystore, and our server keeps only a one-way fingerprint of it. Purchase tokens are checked only with Google Play, and the server’s backups can be read only by its operator. No system is perfectly secure; holding very little is the main protection we rely on.

Depending on where you live, for example under the GDPR in Europe or the KVKK in Türkiye, you can ask what data we hold about you, have it corrected or deleted, object to its processing or have it restricted, receive a copy of it, and complain to your data protection authority.

Most of your data is on your phone and under your control. For anything else, write to [email protected]. You will get an answer within 30 days, usually much sooner.

Where the law asks for a legal basis: entries are sent for reading on the basis of your consent, which you give by turning reading on and withdraw by turning it off. The request counts and the phone fingerprint are kept on the basis of our legitimate interest in keeping the service available, fair and free of abuse. Purchase records are kept to provide the subscription you bought.

Yonga Streak is a general-audience app. It is not directed at children under 13, or under the higher age your country sets for agreeing to data processing, and we do not knowingly process their data.

Yonga Streak is made by Yonga Works, an independent software developer based in Türkiye and the controller of the data described on this page. The same person writes the code, answers support mail and handles any request about data.

Contact: [email protected].

If this policy changes, the date at the top changes with it. There is no archive; the page you are reading is the current one.

We will not widen what leaves your phone without asking you in the app first.