Privacy Policy

1. Overview

Streavio ("we", "our", "the app") is a browser-based progressive web app (PWA) for building and tracking daily habits. We are committed to protecting your privacy. This page explains what information is collected, how it is used, and your rights regarding that data.

The short version: Streavio is local-first and can be used without an account. If you choose Google Sign-In and explicitly enable cloud sync, the identity and app data described below are processed by Google and Supabase so your data can be backed up and synchronized across your devices.

2. Data We Access and Process

• Google Sign-In is optional. When you use it, we receive your Google account identifier, email address, display name, profile photo, and email-verification status through the openid, email, and profile scopes. We do not request access to Gmail, Google Drive, Calendar, Contacts, or other Google product data.
• Habit names, goals, schedules, streaks, check-ins, counters, skipped days, statistics, app settings, theme, and device/sync metadata remain on your device unless you sign in and explicitly confirm the cloud transfer. After confirmation, a copy is stored in Supabase for backup and synchronization.
• Authentication and refresh-session information is stored in your browser under the streavio-auth local-storage key and is processed by Supabase Auth to keep you signed in. Streavio does not use Google access tokens to call other Google APIs.
• We do not sell personal data or use or share Google user data for advertising, profiling, credit, or marketing purposes.

3. Analytics & Performance Monitoring

Yandex Metrika

Both the Streavio landing page (streavio.com) and the web app (app-streavio.com) use Yandex Metrika to understand how many people visit, where they come from and what devices they use. Each site has its own separate counter.

Landing page (streavio.com) — counter 109321442

On the landing page, the following features are enabled:

• Webvisor — records anonymised session replays (mouse movements, clicks, scroll) to help improve UX. No keyboard input is recorded.
• Clickmap — aggregated click heatmaps across page elements.
• Accurate bounce tracking — measures time-on-page more precisely.
• Link tracking — records clicks on outbound links (e.g. app-streavio.com).

Web app (app-streavio.com) — counter 109319262

In the web app, session replay (Webvisor) is not enabled. The app counter collects visit counts, device and browser type, referring URL, click maps and outbound link clicks. Analytics does not receive your Google identity, habit names, check-ins, notes, or statistics. Cloud data is sent only to Supabase after you enable cloud sync.

Yandex Metrika may use cookies and collect standard browser data such as IP address (anonymised), browser type, device type, OS, referring URL, and pages visited. This data is processed by Yandex LLC in accordance with their Privacy Policy . You can opt out of Yandex Metrika tracking by installing the Yandex opt-out browser add-on .

Vercel Speed Insights

The web app (app-streavio.com) uses Vercel Speed Insights to measure how fast pages actually load for real users. It reports standard web performance metrics (such as loading time, layout stability and input responsiveness) along with the page address, device type, browser and connection type.

Speed Insights does not set cookies and does not store a persistent identifier for you. It never receives any of your habit data.

4. Cookies & Local Storage

Both streavio.com and app-streavio.com may set cookies used by Yandex Metrika for analytics purposes (see Section 3). No other first-party cookies are set by us.

On the landing page (streavio.com), Yandex Metrika is loaded only after you accept analytics cookies in the banner shown on your first visit. If you decline, the analytics script is never loaded and no analytics cookies are set. You can change your choice at any time:

Alterar escolha de cookies

The Streavio web app uses localStorage and/or IndexedDB for local app data and stores the Supabase authentication session under the streavio-auth key when you sign in. You can clear local data in Streavio or your browser settings. If cloud sync is enabled, clearing local storage does not delete the copy held in Supabase.

5. Third-party Services

The following third-party services are used on the landing page and in the web app:

• Yandex Metrika (mc.yandex.ru) — analytics. See Yandex Privacy Policy. yandex.com/legal/confidential
• Fontsource / Google Fonts — the landing page and the app interface use self-hosted fonts (bundled at build time) and make no external font requests. One exception: when you export a PDF report in Chinese or Japanese, the app loads a CJK font from Google Fonts at that moment, which shares your IP address with Google. Exports in all other languages are fully local.
• Vercel Speed Insights — performance measurement for the web app. Data is processed by Vercel Inc. vercel.com/legal/privacy-policy
• Vercel — hosting provider for both streavio.com and app-streavio.com. Like any web host, Vercel processes standard server request logs, including IP addresses, to deliver the sites and protect them from abuse.
• Google Sign-In — provides optional authentication. Google shares only the basic identity data covered by the openid, email, and profile scopes. Google processes the sign-in flow under its own privacy policy. policies.google.com/privacy
• Supabase — provides authentication, a PostgreSQL database, and real-time synchronization. It stores account identity, cloud habit data, settings, device metadata, and session/security records on our behalf. supabase.com/privacy

Streavio's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google API Services User Data Policy

6. Retention, Export, and Deletion

Local app data remains on your device until you reset Streavio, clear the site data in your browser, or remove the app. Cloud data remains in Supabase while your Streavio account is active or as needed to provide synchronization, maintain security, resolve disputes, and meet legal obligations.

You can export your habit data from the Data section of the app. Reset removes the local copy on the current device only. Signing out removes the active local session but does not delete your cloud data or Google Account.

To request deletion of your Streavio cloud data and authentication account, email khiryanov.nikita@gmail.com from the Google email address connected to Streavio. We will verify the request and delete or anonymize the account data unless retention is legally required. You may separately revoke Streavio access in your Google Account settings.

7. Children's Privacy

Streavio is not directed at children under the age of 13 (or the equivalent minimum age in the relevant jurisdiction). We do not knowingly collect personal information from children.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with a revised "Last updated" date. Continued use of Streavio after changes are posted constitutes your acceptance of the updated policy.

9. Contact

If you have any questions or requests regarding this Privacy Policy, please contact us at: khiryanov.nikita@gmail.com