Booky Streak — Privacy Policy

Last updated: 2026-05-14.

This policy describes how Booky Streak ("the App") handles user data. The App is published as a verification companion for an Apple App Transfer; the user-facing functionality is a real reading streak tracker, and data collection is configured to support that scenario.

What we collect

Data	Purpose	Where it's stored	Third parties
Sign in with Apple identifier (`sub`, `transfer_sub` if present)	Account sign-in and Apple App Transfer migration handling	On device (`UserDefaults.standard`); transmitted to Supabase Auth backend	Apple, Supabase
Book list + reading sessions (title, author, emoji, session start/end, current page, total pages)	Core feature — display today's reading time and streaks; sync across devices	On device (App Group container) + mirrored to Supabase (`public.books`, `public.reading_sessions`)	Supabase
Daily reading minimum setting	Cross-device sync of user preference	On device + mirrored to Supabase (`public.users.streak_threshold_minutes`)	Supabase
Authentication tokens (access + refresh)	Keep the user signed in	On device only (App Group `.widget` UserDefaults + standard UserDefaults)	None
Push notification token (APNs / FCM)	Deliver daily reading reminders	On device + relayed to Firebase Cloud Messaging	Firebase
App usage events (sign-in, book creation, session start/end, deep link opens)	Product analytics	Aggregated by analytics vendor	Firebase Analytics
Crash reports	Reliability monitoring	Aggregated by Firebase Crashlytics	Firebase

What we do NOT collect

Precise or background location
Contacts, photos, microphone, or camera
Health, fitness, or biometric data
Payment or financial information
Advertising / attribution identifiers (no third-party tracking SDKs are integrated)

Children

The App is not directed at children under 13. We do not knowingly collect data from children under 13. If you believe we have collected such data, please contact us so it can be deleted.

Data retention and deletion

On-device data (book list, reading sessions, tokens) is removed when you sign out or delete the app.
Server-side data held by Supabase and analytics vendors follows each vendor's standard retention.
Account deletion: contact us with the email associated with your sign-in.

Vendors and links to their policies

Apple — https://www.apple.com/legal/privacy/
Firebase / Google — https://firebase.google.com/support/privacy
Supabase — https://supabase.com/privacy

Contact

For privacy questions, account deletion requests, or any other concerns about how your data is handled, please contact: skkimeo+works@gmail.com.