Streak – Privacy Policy

Effective date: April 19, 2026 • Last updated: April 19, 2026

Plain-language summary: Streak keeps all your financial data on your device only. Ikustaka does not operate servers, does not create user accounts, and cannot access your data. The only external services are Google AdMob (advertising) and Google Play Billing (subscriptions) — governed by their own policies.

1. Who We Are

Streak is developed and published by Ikustaka ("we", "our", "us"), a sole proprietorship based in Poland (European Union). Ikustaka is the data controller for the purposes of this policy and the General Data Protection Regulation (GDPR). Our contact details are provided in Section 13.

2. Information Streak Processes

Information you enter — stored locally on your device only:

Financial accounts, transaction records, and balances
Budget categories, spending goals, and saved items
Investment portfolio holdings and imported brokerage data
App settings and preferences

This information is stored exclusively in an AES-256 encrypted database on your device. Ikustaka has no servers to receive this data and no technical means to access it.

Information collected by integrated third-party services:

Google AdMob (advertising) AdMob is provided by Google Ireland Limited (or its affiliates) and acts as an independent data controller. It may collect device identifiers (such as the Android Advertising ID), IP address, and interaction data to serve and measure ads. For users in the EEA, UK, or Switzerland, Streak displays a consent dialog via Google's User Messaging Platform (UMP) before any personalised advertising data is collected. You may withdraw or change your ad consent at any time in Settings → Privacy → Ad Preferences. AdMob's data practices are governed by Google's Privacy Policy.

Google Play Billing (subscriptions & purchases) In-app purchases and subscriptions are processed by Google Ireland Limited (or its affiliates) as an independent data controller. Ikustaka never receives or stores your payment information. Google Play's data practices are governed by Google's Privacy Policy.

3. How We Use Network Access

Streak requires internet access only for the following purposes:

Purpose	Service	Data sent
Live cryptocurrency prices	CoinGecko (public API)	Ticker symbols only (e.g. "BTC")
Live stock / ETF prices & dividend history	Yahoo Finance (public API)	Ticker symbols only (e.g. "AAPL")
Displaying advertisements	Google AdMob	See Section 2
Subscription purchases	Google Play Billing	See Section 2

No personal or financial information is included in price-lookup requests.

4. Legal Basis for Processing (EEA / UK Users)

Where data protection law requires a legal basis:

Contract performance — processing information you enter is necessary to provide the app's core functionality.
Consent — personalised advertising through AdMob is based on your explicit consent, which you may withdraw at any time without affecting the lawfulness of any processing carried out before withdrawal.
Legitimate interests — fetching anonymous market price data to keep portfolio valuations current. We have carried out a Legitimate Interests Assessment (LIA) and concluded that this processing is necessary, minimal, does not involve personal data, and does not override your rights.

5. International Data Transfers

Ikustaka does not transfer your personal data internationally, as no data is sent to our servers. However, some integrated third-party services — including Google AdMob and Google Play — may process data outside the European Economic Area (EEA), including in the United States.

These transfers are subject to appropriate safeguards, including Standard Contractual Clauses (SCCs) approved by the European Commission and additional protections implemented by Google. For details, refer to Google's Privacy Policy.

6. Automated Decision-Making

Ikustaka does not use automated decision-making or profiling that produces legal or similarly significant effects on you. All financial calculations within Streak are performed locally on your device and are transparent to you at all times.

7. Data Security

Your locally stored data is protected by:

AES-256-GCM encryption via SQLCipher
Encryption keys managed by the Android Keystore (hardware-backed on supported devices)
Optional biometric authentication before the app is unlocked

If you have enabled Android's automatic backup feature, the encrypted database may be included in a backup to your Google Account. The database remains encrypted with your device credentials — Ikustaka has no access to any backups.

8. Data Sharing

Ikustaka does not sell, rent, or share your personal data with any third parties for their own purposes. Data flows to AdMob and Google Play only as described in Section 2, under those services' own terms and policies.

9. Your Rights (EEA / UK Users)

Under GDPR and applicable data protection law, you have the following rights:

Access — request a copy of personal data we hold about you.
Rectification — correct inaccurate or incomplete data.
Erasure — request deletion of your personal data.
Restriction — ask us to limit how your data is processed.
Portability — receive your data in a structured, machine-readable format.
Objection — object to processing based on legitimate interests.
Withdraw consent — where processing is based on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
Lodge a complaint — you have the right to lodge a complaint with your national data protection supervisory authority (e.g. the President of the Personal Data Protection Office in Poland or your relevant EEA authority).

Because your financial data is stored locally on your device, you can exercise most rights directly:

Export — use Settings → Data → Export to download a copy of your data.
Deletion — uninstalling the app removes all locally stored data permanently.
Ad consent — modify or withdraw ad personalisation consent in Settings → Privacy → Ad Preferences.
To exercise rights relating to data held by AdMob or Google Play, please refer to Google's Data & Privacy controls. For all other requests, contact us at streakappcontact@gmail.com.

10. Data Retention

Locally stored data is retained until you delete it or uninstall the app. Ikustaka holds no copies. For data retained by AdMob or Google Play, please refer to their respective retention policies.

11. Children's Privacy

Streak is not directed at children under 13 years of age (or the applicable minimum age in your jurisdiction). We do not knowingly collect personal information from children. Advertising within the app is configured to comply with Google's policies for child-directed services; personalised ads are not served to users identified as children. If you believe a child has used the app, please contact us at streakappcontact@gmail.com and we will respond promptly.

12. Changes to This Policy

We may revise this policy as the app or applicable law changes. Material changes will be reflected in an updated "Last updated" date. We encourage you to review this page periodically. Continued use of the app after a revision constitutes acknowledgement of the updated policy.

13. Contact

For questions, concerns, or rights requests regarding this Privacy Policy, please contact Ikustaka at:

streakappcontact@gmail.com

We aim to respond within 7 working days.