Overview
PodStreak ("we," "us") operates the PodStreak website and mobile apps. This policy explains what we collect, why we collect it, and the choices you have. By creating an account or using the service, you agree to this policy.
Information we collect
- Account data: email address, display name, and authentication credentials managed by our auth provider (password hashes and optional two-factor settings; we do not store plain-text passwords).
- Listening activity: episode playback position, duration listened, completion progress, daily listening totals, streak status, XP, badges, unlockables, Pioneer status, Listen Later saves, and show follows.
- Preferences: notification settings, referral code usage, and (when provided) your device timezone for streak and daily-goal calculations.
- Push notifications: Expo push tokens when you enable notifications on a supported build.
- Technical data: session tokens, API request metadata, and security/rate-limit signals needed to operate and protect the service.
How we use information
- Authenticate you and keep your session secure.
- Sync listening progress across devices.
- Calculate XP, streaks, achievements, and leaderboard stats.
- Send optional push reminders and new-episode alerts you opt into.
- Prevent abuse, fraud, and unauthorized API access.
- Improve reliability, search, and catalog discovery.
Listening progress and rewards are computed server-side. Clients send raw playback position; the server decides XP, completion, and streak eligibility.
Offline downloads (mobile)
Downloaded episodes are stored on your device for convenience. Offline playback does not sync progress to our servers and does not award XP until you listen online again through the normal player flow.
Service providers
We use trusted processors to run PodStreak, including:
- Supabase (authentication and database)
- Vercel (application hosting)
- Upstash (distributed rate limiting)
- Expo / platform push services (notification delivery)
These providers process data on our behalf under their own terms and security programs. We do not sell your personal information.
Retention
We keep account and listening data while your account is active. When you delete your account, we remove your app profile and associated listening data from our database and delete your authentication record, subject to short-lived backups and logs retained for security and legal compliance.
Your choices
- Update notification preferences in Profile (mobile) or account settings.
- Change your password or enable two-factor authentication.
- Delete your account from Profile → Delete account (mobile) or /auth/delete-account (web). Deletion requires password confirmation.
- Contact support@podstreak.app for privacy questions or data requests.
Children
PodStreak is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us data, contact us and we will delete it.
Changes
We may update this policy as features or legal requirements change. We will post the revised date at the top of this page. Continued use after changes means you accept the updated policy.