Privacy Policy

This Privacy Policy explains what personal data Ace Streak ("we", "us") collects when you use our app at acestreak.xyz (the "App"), how we use it, and the choices you have. We built Ace Streak to be a trustworthy daily companion for your CFA studies, and we take the responsibility of handling your data seriously.

1. Information We Collect

When you create an account, we collect:

• Email address — used to identify your account and for sign-in
• Password — stored in encrypted, hashed form; we never see or store your plain-text password
• Name (optional) — if you choose to provide it during onboarding, used to personalise your experience
• Study data — your streak count, quiz scores, session history, earned stickers, topic-level accuracy, and selected CFA level/certification
• Subscription status — whether you're on a free trial or active subscription, managed via our payment processor
• Push notification subscription (optional) — if you enable daily reminders, we store a device push token so we can send you a notification; no message content is stored beyond what's needed to deliver the reminder

2. How We Use Your Information

• To create and maintain your account, and sync your progress across devices
• To track your streak, scores, and study history so you can review your progress over time
• To send you optional daily study reminders, if you've enabled notifications
• To process your subscription and trial status via our payment processor (Paddle)
• To respond to support requests sent to hello@acestreak.xyz
• To improve the App's content and features based on aggregate, anonymised usage patterns

3. Where Your Data Is Stored

Your account and study data are stored securely using Supabase, a managed database provider, with industry-standard encryption in transit and at rest. Access to your data is restricted so that only you can view your own study history and progress — enforced at the database level via row-level security policies.

4. Third-Party Services We Use

• Supabase — account authentication and data storage
• Paddle — payment processing and subscription billing; Paddle handles your payment details directly, we never see or store your full card number
• Google Sign-In (where available) — an optional alternative sign-in method; if used, Google shares your email and basic profile information with us per their own privacy terms

We do not sell your personal data to third parties, and we do not use your data for targeted advertising.

5. Data Retention

We retain your account and study data for as long as your account remains active. If you delete your account, we will delete your personal data within a reasonable period, except where we are required to retain certain records (e.g. billing history) for legal or accounting purposes.

6. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Withdraw consent for optional features such as push notifications, at any time via Settings

To exercise any of these rights, contact us at hello@acestreak.xyz.

7. Children's Privacy

Ace Streak is intended for users preparing for a professional finance qualification and is not directed at children. We do not knowingly collect personal data from anyone under the age of 16.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated to active users with reasonable notice. The "Last updated" date at the top of this page reflects the most recent revision.