Privacy policy

SunStreak · Effective October 4, 2026

SunStreak is provided by Edward Donalds. For privacy questions or requests, email edwardjdonalds@gmail.com. This policy covers the SunStreak Android app and its support and wake-code pages.

Your alarms stay useful without an account

You can use local alarms, wake proofs and streaks without creating an account. Accounts enable online features, including activity sync, leagues and Wake Crew. Online features, purchases and purchase verification need a connection. Cloud restore of your alarms is not available in this release.

Data stored on your phone

SunStreak stores your alarms and settings, wake history, streaks, registered QR or barcode values, pantry item names and proof setup on your phone. Photo proof processes camera images on the device. Up to three reference photos and their matching features are saved in private app storage, excluded from Android backup, until replaced or cleared. Temporary camera frames are used for the current check. SunStreak does not upload these images or reference features.

We do not upload scanned code values, pantry item names, math questions or answers, alarm labels or sound selections. Walk proof uses motion/step sensing; it does not use GPS to track your route. Camera and motion permissions can be changed in Android settings; the corresponding proofs cannot work without their permissions.

Data processed with an account

We use Supabase for authentication and our account database. Data includes:

• Your account identifier, email, profile name/handle and time zone.
• Wake-event identifiers, scheduled/fired/resolved times, outcome categories, proof types, streaks and Personal Best.
• Schedule information used to validate competitive wake-ups: alarm identifiers, times, repeat days, time zones, enabled proof types and travel windows.
• Lifecycle records such as sick-day, vacation, travel, mechanical-miss and personal-day usage, including timing and protection windows. A sick-day marker records that you used the feature, not a diagnosis or medical record.
• League participation choices, consent timestamps, membership, points, ranks and results; Crew memberships and invite codes; and identifiers/revisions used to prevent duplicated or conflicting updates.
• Username-rules version and acceptance time, whether a name is generated, blocked account identifiers and timestamps, and username-editing restrictions.
• Username reports: the reporting and reported account identifiers, the reported name, selected reason, request identifier, submission time and review outcome/time.

These records provide sync, enforce feature limits and keep competitive results consistent. Signing out stops account operations but does not delete already uploaded records. SunStreak may also retain local history on the device after sign-out; use Delete Everything to clear this phone’s app data.

Crew members can see your handle, streak, Personal Best and vacation status. League participants can see handles and standings, including points and rank.

League sharing starts only after you choose Join league. Pro is required to join and earn new league points; only future eligible wakes count. You can leave even after Pro expires. Leaving removes your shared rankings while preserving personal wake history and streaks. Signing out does not automatically leave a league.

Your email and time zone are not shown in these social views. A name you choose may identify you; choose a pseudonym if you prefer. The app has no chat or media sharing feature. People you share an invite code with can use it to request entry.

Reports and block lists are not visible to peers. Authorized operators can review reports to enforce the username rules. Blocking filters shared Crew and league activity in both directions without changing membership, scores or rank. The app keeps an account-scoped local copy of confirmed block settings to filter cached activity when offline. Blocking cannot erase information another person previously saw or saved.

Sign-in and purchases

Email/password authentication uses Supabase Auth. Google Sign-In, when chosen, provides an account identifier and email through Google; SunStreak does not receive your Google password.

We use Resend to deliver account emails, such as email confirmations. It processes recipient email addresses, message content and delivery information to provide this service.

Google Play processes payments. RevenueCat receives purchase history, product and transaction identifiers, purchase/expiry information, subscription status and an app user identifier to validate purchases and provide Pro access. It also receives technical app/device information needed by its SDK. Billing services may operate when you are signed out. We do not receive your payment-card number or Google account password. Google and RevenueCat process billing records under their applicable service and privacy terms.

Diagnostics and service providers

The release configuration currently disables PostHog product analytics and Sentry crash reporting. Enabling these in a future release requires an updated disclosure and any consent required by applicable law.

Google ML Kit performs barcode scanning and image labeling on-device. Its SDK can send installation identifiers, device/app information, performance and error metrics, and feature-usage details to Google. This is separate from uploading camera images; SunStreak’s proof images are processed locally. See Google’s ML Kit data disclosure.

Supabase and other network service providers can process connection information, such as IP addresses and request logs, to operate and secure their services. Cloudflare hosts these website pages and processes requests to deliver them. The QR generator creates a random code in your browser and stores it there when browser storage is available. It does not send that generated code to our server.

Our service providers include Supabase, Resend, RevenueCat, Google and Cloudflare. We do not sell personal data or run advertising SDKs in SunStreak. We may disclose information when legally required or necessary to address abuse or protect users’ rights and security.

Retention and deletion

Local data remains until you remove it, clear the app’s storage or uninstall. Deleting an account remotely cannot erase data on an offline phone; clear that phone separately. Account records remain while the account exists. A successful in-app account deletion removes the account and its associated records from our active database, except for the temporary cleanup record described below. A failed server request is reported in the app and needs follow-up.

Username reports are removed from the active database after 90 days through automatic cleanup. Deleting either the reporting or reported account also removes those reports. Block relationships are removed when you unblock a member or either account is deleted. Rules acceptance and restriction settings remain with your account until deletion. Email correspondence with support is handled separately when we verify and respond to your request.

For requests by email, our target is to complete deletion within 30 days after verifying account ownership. We will explain any lawful delay or retention requirement. Shared Crews can remain for other members with your ownership and membership removed. Service logs and backups follow the providers’ retention settings; deletion from an active database is not a promise that every provider backup is immediately erased. Billing records may be retained for payment, accounting, fraud prevention or legal obligations. Contact us for help identifying and requesting deletion of associated provider records.

For billing-provider cleanup, we may temporarily retain an opaque billing identifier, request status, timestamps and retry information after the account is removed. This helps us complete and verify deletion with the provider. We remove this cleanup record once the provider confirms absence. If the billing record is linked to another account, support must review ownership first to avoid deleting someone else’s data. Provider processing is asynchronous.

Deleting your account does not cancel a Google Play subscription. See our account-deletion page for the request link, what is removed, and cancellation instructions.

Your choices and rights

Contact edwardjdonalds@gmail.com to request access, correction, deletion or a copy of your account data. We verify ownership before releasing or deleting account information. Depending on applicable law, you may also have rights to object to or restrict processing, portability, withdrawal of consent and complaints to a privacy regulator.

Where GDPR or UK GDPR applies, we process information needed to provide requested account and paid features to perform our agreement with you; security and abuse prevention rely on legitimate interests; legally required records rely on legal obligations. We obtain consent where applicable law requires it. Providers may process information outside your country, including in the United States. Applicable provider data-processing terms describe safeguards for international transfers. Contact us for details about a specific request or transfer.

Children, security and changes

SunStreak is not intended for children under 13, or below the applicable minimum age in their country. If you believe a child has provided account information, contact us so we can investigate and remove it where appropriate.

Network requests use encrypted transport. Account access controls restrict private data, while the limited social information described above is visible to peers. No app or service can guarantee perfect security.

We update this page when our practices change and show the effective date above. Material changes will be communicated through the app or another appropriate channel before they apply where required. Contact: Edward Donalds, edwardjdonalds@gmail.com.