Privacy policy

1. Who we are

WowStreak is a service for families, run from the United Arab Emirates. In this policy, “we” means WowStreak, the business that runs it.

This policy explains how we handle personal data when you use the WowStreak website and app. For anything about your data, write to support@wowstreak.com.

2. Who the app is for

WowStreak is for parents and guardians. A parent creates the family account and adds their kids to it. Kids do not sign up on their own: a parent creates each kid's account and gives them a sign-in code and a simple password.

By adding a kid, you confirm that you are their parent or legal guardian and that you agree to this policy on their behalf. The app is designed for kids aged 10 and up.

3. What we collect

• Parents: your name, your email address and your password. The password is stored in a scrambled form that we cannot read. If you sign in with Google or Facebook instead, we receive your name, email address and profile picture from them, and never your password for that account.
• Your family: its name, time zone, language and the day your week starts.
• Kids: the name you give them, an avatar, a sign-in code and a password (also scrambled), and, only if you choose to add them, their birthday, their gender and a profile picture. The profile picture is seen only inside your family. We do not ask for a kid's email, phone number or location.
• What happens in the app: tasks and their deadlines, points and penalties, rewards, reward requests, savings goals, birthday wishes, and the history of all of these.
• Proof photos and videos: when a task asks for proof, the file your kid attaches.
• Payments: your plan, your invoices, and the brand and last four digits of your card. Card numbers are entered on our payment provider's page and never reach our servers.
• Messages: what you send us through the contact form, with your name and email.
• Notifications: if you turn them on, the technical address your browser gives us so we can deliver them.
• Technical data: your sign-in sessions with the IP address and browser type, and short-lived records used to stop abuse such as password guessing.

4. How we use it

• To run the app: show tasks, count points and handle rewards.
• To sign you in and keep your account secure.
• To take payments and keep invoices.
• To email you: password resets, the weekly report (which you can turn off), and messages about your free trial and your payments.
• To answer the messages you send us.

We do not sell personal data. We do not show ads. We do not use kids' data for marketing or to build profiles of them.

5. Who can see what

• Parents in a family see everything in that family, including each kid's tasks, points and proof files.
• Kids see their own tasks, points and rewards, and the family's weekly ranking.
• Other families see nothing of yours, unless a parent joins a competition. Then the families in that competition, parents and the kids taking part, see your family's name and, for each kid the parent chose: name, emoji character (never a profile picture), the tasks finished and points gained that week, level and badges. They do not see task names, proof files, birthdays or anything else. This stops when the kid is unticked or the family leaves the competition.
• Our team can see a family's name, the parents' names and emails, how many kids it has, and its plan and payments. The screens our team works with do not show kids' names, tasks or proof files.

Access to the database itself is limited to the people who maintain the service.

6. Companies that help us run the app

We use a small number of service providers. They handle data only to provide their service to us.

• Vercel: runs the website and the app.
• Neon: the database.
• Cloudflare: stores proof photos and videos.
• Stripe: payments.
• Resend: sends our emails.
• Google and Meta (Facebook): only if you choose to sign in with your Google or Facebook account. They learn that you signed in to WowStreak; we do not send them anything about your family.

The app and its database run in data centres in Frankfurt, Germany, and these providers may handle data in other countries too. This means your data is processed outside the United Arab Emirates.

7. How long we keep it

• Proof photos and videos are deleted 90 days after they are uploaded.
• When you remove a kid, their account, points, history and proof files are deleted.
• Everything else is kept for as long as your family account exists. To delete the whole family account, write to support@wowstreak.com and we will delete it within 30 days.
• Invoices and payment records are kept for as long as the law requires.
• Messages sent through the contact form are kept until you ask us to delete them.

8. Cookies and data on your device

We use only what the app needs to work: a cookie that keeps you signed in and a cookie that remembers your language. The app also saves a few settings on your device, such as whether sounds are on, and holds a task marked done while offline until it can be sent.

We use no advertising cookies and no tracking or analytics cookies.

9. Keeping it safe

Data travels over an encrypted connection. Passwords are stored scrambled. Proof files are private and are opened through links that stop working after a few minutes.

No system is perfectly secure. If something happens that affects your data, we will tell you.

10. Your choices and rights

You can see and change most of your data in the app: rename or remove a kid, change your family's settings, and turn off the weekly email.

You can also ask us for a copy of your data, to correct it, to delete it, or to stop using it. Write to support@wowstreak.com and we will answer within 30 days.

You also have the rights given by the data protection law of the United Arab Emirates, including the right to complain to the data protection authority.

11. Changes to this policy

If we change this policy in a way that matters, we will tell parents by email or in the app before the change takes effect. The date at the top shows the latest version.