Legal

Privacy Policy

Last updated: 12 August 2026

This policy explains how Streekly collects and processes personal data across the mobile app, this website and the partner portal. We act as the data controller and process personal data in line with the EU General Data Protection Regulation (GDPR) and Slovak data-protection law.

Venue operators should also read the Partner Privacy Policy, which covers company and venue data.

1. What we collect

Account data — email, username, display name, password (stored only as a hash), and two-factor settings if you enable them.
Profile data — avatar configuration, home city, sports you follow and your privacy preferences.
Check-in data — the venue, date and time of each visit, and your device's location and its accuracy at the moment you check in.
Progress data — streaks, XP, levels, badges, groups, friends and rewards you earn.
Technical data — log data, device and app version, push notification token, and security events needed to run and protect the Service.

2. Location

Location is central to how Streekly works: it is how we confirm you were actually at a venue. We record your coordinates and their accuracy at the moment of a check-in, and while a check-in session is running so we can tell when you leave.

We do not track your location in the background for any other purpose, and we do not build a movement profile or sell location data. You can revoke location permission in your device settings at any time — check-ins at partner venues will then rely on scanning the venue QR code.

3. How we use it & legal bases

To provide the Service — record visits, streaks, XP and rewards — performance of a contract.
To verify check-ins are genuine — automated scoring of location accuracy and travel speed to detect spoofing — legitimate interest in fair play.
To send service emails — verification codes, password resets, security alerts — contract / legitimate interest.
To send notifications and summaries — push notifications and weekly or monthly recaps — based on your preference, adjustable in Settings.
To keep the Service secure — two-factor authentication, rate limiting, abuse prevention — legitimate interest.

4. What other people can see

Streekly has social features: friends, groups and leaderboards. What others see depends on your privacy settings, which you control in Settings → Privacy. By default other users may see your display name, avatar, level and streak. Venues you visit see aggregated visit statistics and, when you redeem a reward, that you earned it.

5. Service providers

We use providers who process data on our behalf under appropriate agreements:

Hosting & database — Hetzner Online GmbH, Finland (EU).
Email delivery — Google Workspace.
Push notifications — Expo, together with Apple (APNs) and Google (FCM).
Map tiles — OpenFreeMap.

We do not sell your personal data to anyone.

6. International transfers

We keep processing within the EU/EEA where we can. Where a provider processes data outside the EEA, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

7. How long we keep it

We keep your account and progress data for as long as your account exists. When you delete your account we remove or anonymise your personal data within a reasonable period, except where we must keep certain records to meet legal obligations.

8. Your rights

Under the GDPR you have the right to:

access the data we hold about you and receive a copy;
correct inaccurate or incomplete data;
erase your data (“right to be forgotten”);
restrict or object to certain processing;
data portability;
withdraw consent at any time, without affecting processing already carried out.

You can do most of this yourself: edit your profile, adjust privacy and notification settings, export your data or delete your account, all from Settings. For anything else, email support@streekly.com. You may also lodge a complaint with the Slovak data-protection authority (Úrad na ochranu osobných údajov SR) or your local supervisory authority.

9. Security

We protect your data with encrypted transport (HTTPS), hashed passwords, encrypted two-factor secrets, access controls and audit logging. No system is perfectly secure, but we work to protect your data and to respond promptly to incidents.

10. Children

Streekly is not intended for children under 16. We do not knowingly collect data from them. If you believe a child has created an account, contact us and we will remove it.

11. Cookies

See our Cookie Policy. In short: this website sets no cookies, the partner portal uses one strictly necessary sign-in cookie, and the mobile app uses none.

12. Changes

We may update this policy. If a change is material we will notify you in the app or by email.

13. Contact

For any privacy question or request, email support@streekly.com.