Privacy Policy

Last updated: October 19, 2026

Aethon Digital FZCO ("Aethon Digital", "we", "us", or "our") operates the StreakLeague mobile application (the "App"). This Privacy Policy explains how we collect, use, disclose, and protect your information when you use StreakLeague.

By downloading or using the App, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

Information you provide directly

Phone number — collected during account registration to verify your identity via one-time passcode (OTP). Your phone number is your account identifier.
Display name — a name you choose to represent yourself in challenges and leagues.
Habit information — the habits you choose to track in challenges (e.g. "gym session", "morning run"). You control what you share.
Challenge stakes and forfeits — terms agreed between you and your opponent when creating a challenge.
Check-in data — timestamps recording when you check in to confirm your daily habit completion.

Information generated by the App

Match cards — AI-generated summary cards produced at challenge completion. Cards stored in public Supabase Storage are viewable by anyone with the link.
Narrative events — AI-generated commentary by "The Ref", our AI narrator. These are stored against your account for personalisation.
League and rivalry data — win/loss records, streak lengths, head-to-head history with opponents.

Information collected automatically

Device identifiers — push notification tokens (APNs on iOS, FCM on Android) to deliver notifications.
Usage analytics — anonymised event data (e.g. screen views, feature interactions) collected via PostHog analytics. No personally identifiable information is included in analytics events.
App performance data — crash reports and performance metrics to maintain App stability.

2. How We Use Your Information

To create and maintain your account
To verify your identity via SMS OTP during sign-up and sign-in
To operate the challenge and league competition features
To generate personalised AI commentary from The Ref
To send push notifications about your challenges and league activity
To process in-app purchases and subscriptions via RevenueCat
To detect and prevent abuse, fraud, and violations of our Terms of Service
To improve the App using aggregated, anonymised analytics

3. SMS Messaging

    Important: We send SMS messages only to verify your phone number during account registration and sign-in. We do not send marketing SMS messages. Message frequency: OTP messages are sent only when you initiate a login or verification request. Message and data rates may apply. We do not share or sell your phone number to third parties for marketing purposes.
  

To opt out of SMS verification, you may delete your account at any time via Profile → Account settings → Delete Account within the App.

4. AI-Generated Content

StreakLeague uses an AI narrator called "The Ref", powered by the Anthropic Claude API. The Ref generates personalised commentary based on your challenge activity, streak history, and performance. This content is clearly disclosed as AI-generated within the App.

To write commentary for your league, The Ref may use league members' display names, streaks and standings, and its commentary may mention you by display name to other members of your leagues. This information is sent to Anthropic only to generate that commentary.

The Ref's commentary is governed by strict content policies. It will never reference your appearance, body, sexuality, race, religion, mental health, family, or relationships. A minimum dignity standard is enforced on all generated content.

5. Third-Party Services

We use the following third-party services to operate StreakLeague. Each has its own privacy policy governing data handling:

Supabase (database, authentication, storage) — supabase.com/privacy
Twilio (SMS OTP delivery) — twilio.com/legal/privacy
Anthropic (AI content generation) — anthropic.com/privacy
ElevenLabs (AI voice for The Ref — receives The Ref's commentary text, which can include league members' display names, only to generate the spoken version) — elevenlabs.io/privacy-policy
RevenueCat (subscription management) — revenuecat.com/privacy
PostHog (product analytics) — posthog.com/privacy
Expo (Expo Push Service — relays push notifications; receives your device's push token and the notification text) — expo.dev/privacy
Apple (Apple Push Notification service — delivers notifications to iOS devices) — apple.com/legal/privacy
Google (Firebase Cloud Messaging — delivers notifications to Android devices) — policies.google.com/privacy

We do not sell your personal data to any third party.

6. Data Storage and Security

Your data is stored on Supabase infrastructure. We implement row-level security policies so that you can access your own account data and what is shared within the leagues you belong to. Other members of your leagues can see your display name, profile picture, streaks, standings, daily check-in status and check-in mood, and The Ref's commentary about the league. Secrets and API keys are stored in Supabase Vault and are never included in the client application.

Match cards designated as public are stored in public Supabase Storage and may be accessed by anyone with the direct URL. You control whether to share a match card outside the App.

7. Data Retention

We retain your account data for as long as your account is active. If you delete your account, your personal information (phone number, display name) is anonymised within 30 days. Aggregated, anonymised competition data (streak records, challenge outcomes) may be retained for product analytics.

8. Your Rights — Account Deletion

You may delete your account at any time via Profile → Account settings → Delete Account within the App. Upon deletion:

Your display name is replaced with "Former Player"
Your phone number is removed from our authentication system
Your notification preferences and logs are cleared
Your league memberships are withdrawn

If you are in the European Economic Area, United Kingdom, or other jurisdictions with applicable data protection law, you may also have the right to access, correct, or port your data. Contact us at the address below.

9. Children's Privacy

StreakLeague is rated 17+ and is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us immediately.

10. Push Notifications

We send push notifications about your leagues: a heads-up before your streak is at risk, when your crew checks in, and league updates. We avoid sending notifications between 23:00 and 07:00 in your local time zone, and we send no more than 3 a day. You can turn individual notification types off in Profile → Notifications, or turn all notifications off in your device settings.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via push notification or in-app notice. Continued use of the App after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or your personal data, contact us at:

Aethon Digital FZCO
Dubai Multi Commodities Centre, Dubai, UAE
Email: contact@aethondigital.net