Privacy Policy

We collect only the data needed to build and deliver your plan:

• Account data - email, name, and an encrypted password or OAuth identity.
• Fitness profile - age, sex, height, weight, target weight, activity level, training history, goals, injuries, equipment, dietary preferences, and similar inputs you enter during onboarding.
• Plan activity - workouts, meals, check-ins, progress photos (optional), and adherence data you log.
• Calendar data - if you connect Google Calendar or Outlook, we access only what's needed to create, read, update, and delete events that Streaq itself creates on your calendar. See section 5.
• Usage telemetry - standard device, browser, and error logs used to debug and improve the product.

• Generate your personalized workout and nutrition plan.
• Sync workouts, meals, and reminders to your calendar (if connected).
• Adjust your plan weekly based on your check-ins and progress.
• Provide customer support and respond to your requests.
• Improve reliability and fix bugs via diagnostic logs.
• Communicate service updates you've opted into.

Streaq uses Anthropic's Claude API to generate parts of your plan (workouts, meals, coaching explanations). Your fitness profile and goal inputs may be sent to Anthropic as part of this processing under their enterprise privacy terms. Anthropic does not train models on inputs sent via their API. Calendar event contents are not sent to third-party AI providers.

Streaq's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

When you connect Google Calendar, Streaq requests the https://www.googleapis.com/auth/calendar scope to:

• Create workout, meal, grocery, and check-in events on your calendar.
• Read, update, and delete events that Streaq itself created.
• Check a user-selected calendar for conflicts with scheduled workouts.

We do not use your Google user data to serve advertising, sell it, transfer it for unrelated purposes, or use it to train generalized AI or ML models. Humans do not read your calendar events except as explicitly required for support you request, for security investigations, or where legally required.

You can revoke Streaq's access to your Google account at any time via Google Account Permissions.

When you connect Outlook, Streaq requests read/write access to your calendar for the same purposes described in section 5. We handle Microsoft data under the same standards and do not sell, transfer, or use it for advertising or AI training.

• Supabase - hosts our database and authentication. All data is stored in Supabase's encrypted infrastructure.
• Vercel - hosts the Streaq web application.
• Anthropic - AI model provider for plan generation (see section 4).
• Google and Microsoft - only for the calendar integrations you explicitly connect.
• Klaviyo - transactional and marketing email, if you subscribe.

We do not sell your personal information. We do not share it with advertisers or data brokers.

We retain your account data for as long as your account is active. If you delete your account, we delete your personal data within 30 days, except where longer retention is required by law or to resolve disputes. Calendar events Streaq created remain in your calendar until you delete them.

You can request access, correction, export, or deletion of your data by emailing chase@startstreaq.com. If you're in the EU, UK, or California, you have additional rights under GDPR/UK GDPR/CCPA, which we honor.

Data in transit is encrypted using TLS. Data at rest is encrypted by our infrastructure providers. Access to production data is limited to the minimum staff needed for support and operations.

Streaq is not directed to children under 16. If you believe a minor has created an account, contact us and we will delete it.

We'll update the "Effective" date above when this policy changes. Material changes will be communicated via email or in-app notice.

Questions, data requests, or privacy concerns: chase@startstreaq.com.