Effective date: March 1, 2026
Last updated: February 25, 2026
Health Disclaimer
CleanStreak is a habit tracking tool designed for motivational support. It is not a medical device, does not provide medical advice, and is not a substitute for professional addiction treatment. If you are struggling with addiction, please consult a qualified healthcare professional or contact a support helpline in your country.
CleanStreak is a habit-tracking and sobriety-support mobile application developed and operated by
Getizy ("we," "us," or "our"). We are committed to protecting your
privacy and handling your personal data responsibly.
This Privacy Policy explains what information we collect when you use CleanStreak, why we collect it,
how we use it, and what choices you have. It applies to the CleanStreak iOS app, Android app, and any
related website or service.
By using CleanStreak, you agree to the practices described in this policy. If you do not agree,
please stop using the app and contact us to delete your data.
2. Data We Collect
We only collect data that is necessary to provide and improve the CleanStreak service.
Here is everything we collect, organized by category:
Account Data
Collected only if you create an account or sign in:
Email address
Display name (optional — you can leave this blank)
Profile photo URL (only if you sign in with Google or Apple)
Firebase Authentication UID (a unique identifier generated by Firebase)
Habit and Recovery Data
This is the core data CleanStreak stores on your behalf. It exists solely to power your personal
experience and is never shared with other users or third parties (except as needed to operate the service).
Habit name (e.g., "Smoking," "Alcohol" — whatever you choose to type)
Your quit date and daily cost of the habit
Craving log entries: timestamp, intensity rating, and optional personal notes
Relapse events: date, optional trigger category, and optional private note
Important: Relapse notes and craving notes are private. CleanStreak staff do not
read, review, or analyze the content of your personal notes.
Analytics Data
We collect anonymous usage data to understand how the app is being used and to improve it:
Craving patterns by hour and day of week (aggregated, not personally identifiable)
App session frequency and duration
Which features are used (e.g., whether users open the analytics screen)
This analytics data is not linked to your name, email, or any personally identifiable information.
Device Data
Firebase Cloud Messaging (FCM) token — used to send push notifications
Device locale and language — used to display the app in your language
App version — used for debugging and support
Payment Data
If you subscribe to CleanStreak Premium, we receive the following from RevenueCat (our payment processor):
Subscription status (active, expired, trial)
Purchase dates and product identifiers
We never see or store your credit card number, bank account details, or any financial payment information.
All payment processing is handled by Apple (App Store) or Google (Play Store) and is subject to their
respective privacy policies.
3. How We Use Your Data
Purpose
Data Used
Why It's Necessary
Providing the core app experience
Habit data, streak data, craving logs, milestones
Without this, the app cannot function
Account management and authentication
Email, display name, Firebase UID
To identify your account and keep it secure
AI coaching insights (Premium only)
Anonymized habit patterns and craving patterns
To generate personalized weekly insights via Anthropic's API
Push notifications
FCM token, notification preferences
To send streak reminders and milestone alerts you have opted into
Subscription management
Subscription status, purchase dates
To unlock and manage Premium features
App improvement
Anonymous analytics data
To understand how features are used and identify bugs
Customer support
Email, app version, account data (on request)
To respond to your support requests
Legal compliance
Minimum necessary data
To comply with applicable laws and regulations
We do not use your data for advertising, profiling, or any purpose not listed above.
We do not sell your data. Ever.
4. Third-Party Services
CleanStreak uses the following third-party services to operate. Each service receives only
the data it needs to do its job. We have selected these providers based on their strong privacy
practices and compliance with applicable data protection laws.
Firebase (Google)
We use Firebase Authentication for sign-in, Cloud Firestore to store your habit and craving data,
Firebase Cloud Messaging to send push notifications, and Firebase Cloud Functions as a secure
proxy for AI requests. Firebase processes data on servers that may be located in the United States
and other countries.
RevenueCat manages in-app subscriptions and validates purchases made through Apple and Google.
It receives your subscription status and purchase identifiers. RevenueCat does not receive your
credit card information.
For Premium subscribers, we generate AI coaching insights using Anthropic's API. Requests are
routed through our Firebase Cloud Functions proxy. We send only anonymized habit pattern data
(e.g., "7 cravings logged this week, peak at 9pm") — never your name, email, account ID,
or personally identifiable information.
If you choose to sign in with Google, Google authenticates your identity and shares your
email address, display name, and profile photo URL with us. We do not receive your Google
password or any other Google account data.
If you choose to sign in with Apple, Apple authenticates your identity. Apple may provide your
name and email address (or a private relay email address). We do not receive your Apple ID
password or payment information.
We do not sell your personal data. We do not share your data with advertisers or data brokers.
We share your data only in these limited circumstances:
With service providers listed above — to operate the app, as described in Section 4.
Each provider is bound by data processing agreements and may only use your data to perform services for us.
When required by law — if we are required to disclose data by a valid legal process
(such as a court order or subpoena), we will notify you to the extent permitted by law.
To protect rights and safety — if we reasonably believe disclosure is necessary to
prevent fraud, harm, or illegal activity.
In a business transfer — if CleanStreak is acquired by or merges with another company,
your data may be transferred. We will notify you in advance and you will have the option to delete your
account before any transfer occurs.
6. Data Retention
We keep your data for as long as your account is active, plus a short period afterward to allow for recovery if you change your mind.
Active account data — retained while your account exists so the app works correctly.
After account deletion — all personal data is permanently deleted within 30 days.
Backups containing your data are purged within that same window.
Anonymous analytics data — retained indefinitely, as it cannot be linked back to you.
Legal obligations — in rare cases, applicable law may require us to retain certain
records (such as financial transaction logs) for longer periods. We retain only the minimum required
by law and delete the rest.
7. Your Rights
You have meaningful control over your data. Most rights can be exercised directly inside the app
at any time from Settings → Account → Manage My Data.
Access
Request a copy of all personal data we hold about you.
Correction
Update or correct inaccurate data in your profile at any time.
Deletion
Delete your account and all associated data. Permanent within 30 days.
Export
Download your habit, craving, and streak data in a portable format.
Restriction
Ask us to pause processing your data while a dispute is resolved.
Objection
Object to processing based on legitimate interest, including analytics.
Portability
Receive your data in a machine-readable format to transfer elsewhere.
Withdraw Consent
Withdraw any consent you have given at any time without penalty.
To exercise any right not available in-app, or if you need assistance, email us at
getizy.app@gmail.com. We will respond within 30 days.
We will never discriminate against you for exercising your privacy rights.
8. GDPR — European Users
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland,
the General Data Protection Regulation (GDPR) gives you specific rights regarding your personal data.
Legal Bases for Processing
We process your personal data under the following legal bases:
Consent (Article 6(1)(a)): When you create an account, you consent to us
processing your account data and health-adjacent habit data to provide the service.
You can withdraw this consent at any time by deleting your account.
Contract performance (Article 6(1)(b)): Processing necessary to fulfill
our agreement with you to provide CleanStreak's features.
Legitimate interest (Article 6(1)(f)): Anonymous analytics used to improve
the app, and fraud prevention. We have assessed that these interests do not override your rights.
Legal obligation (Article 6(1)(c)): Where processing is required to comply
with applicable law.
Special Category Data
Habit and craving data may constitute health-adjacent data under Article 9 GDPR. We process this
data solely on the basis of your explicit consent, provided when you first set up a habit in the app.
You may withdraw consent at any time by deleting your habit data or your account.
International Data Transfers
Some of our service providers (including Google/Firebase) process data in the United States.
Where data is transferred outside the EEA, we ensure appropriate safeguards are in place,
including Standard Contractual Clauses (SCCs) as approved by the European Commission.
Your GDPR Rights
In addition to the rights in Section 7, EU users have the right to:
Lodge a complaint with your national data protection authority (e.g., the ICO in the UK,
the CNIL in France, the BfDI in Germany)
Not be subject to solely automated decision-making that significantly affects you.
CleanStreak does not make any such automated decisions.
Data Protection Officer
For GDPR-related inquiries, you may contact our data protection contact at:
getizy.app@gmail.com
9. CCPA — California Users
If you are a California resident, the California Consumer Privacy Act (CCPA) as amended by
the California Privacy Rights Act (CPRA) gives you specific rights regarding your personal information.
Categories of Personal Information Collected
In the past 12 months we have collected the following categories of personal information:
Commercial information (subscription status, purchase history)
Your CCPA Rights
Right to Know: You may request details about what personal information we collect,
use, disclose, and sell (we do not sell).
Right to Delete: You may request deletion of your personal information, subject
to certain exceptions required by law.
Right to Correct: You may request correction of inaccurate personal information.
Right to Opt-Out of Sale or Sharing: We do not sell or share your personal
information for cross-context behavioral advertising. No opt-out is required, but you are always free
to contact us with concerns.
Right to Non-Discrimination: We will never deny you services, charge you a
different price, or provide a different level of quality because you exercised your CCPA rights.
Right to Limit Use of Sensitive Personal Information: We only use sensitive
personal information (health-adjacent data) to provide the service you requested.
To exercise your CCPA rights, email us at getizy.app@gmail.com
with the subject line "CCPA Request." We will respond within 45 days.
10. Children's Privacy
CleanStreak is not directed at children under the age of 13, and we do not knowingly collect
personal information from children under 13.
Although CleanStreak carries a 4+ age rating on the App Store and Google Play (required for apps
that do not contain objectionable content), the app is designed for adult users managing personal
recovery journeys. Parents and guardians should be aware of and supervise their children's app usage.
If we become aware that we have collected personal information from a child under 13 without
verifiable parental consent, we will immediately delete that information. If you believe we may
have data from or about a child under 13, please contact us at getizy.app@gmail.com.
For users between 13 and 18, we encourage parental involvement. We do not target advertising
at any user, regardless of age.
11. Security
We take the security of your data seriously, especially given its sensitive nature. The measures we
have in place include:
Encryption in transit: All data transmitted between the app and our servers
uses TLS (HTTPS) encryption.
Encryption at rest: Data stored in Firebase Firestore is encrypted at rest
by Google's infrastructure.
Access controls: Firebase Security Rules are configured so that only authenticated
users can access their own data. No user can read another user's data.
API security: AI requests to Anthropic are proxied through Firebase Cloud
Functions, ensuring your account credentials and personal identity are never sent to Anthropic.
No staff access to notes: Personal craving notes and relapse notes are not
accessible to CleanStreak staff through any administrative tool.
No system is 100% secure. In the event of a data breach that affects your rights, we will notify
you as required by applicable law.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology,
legal requirements, or other factors.
When we make changes, we will:
Update the "Last updated" date at the top of this page
Notify you via an in-app notification for material changes
For significant changes that affect your rights, send an email notification (if we have your email)
and require fresh consent where legally required
Your continued use of CleanStreak after a change takes effect means you accept the updated policy.
If you do not agree with any update, you may delete your account at any time.
13. Contact Us
If you have any questions, concerns, or requests about this Privacy Policy or your personal data,
please reach out. We aim to respond to all privacy inquiries within 30 days.
For users in the EU exercising GDPR rights, you also have the right to contact your local
data protection authority if you are unsatisfied with our response.