Legal

Privacy Policy

Last updated: April 22, 2026

Boring Streak is a calm, quiet tool that helps people quit gambling. We think the best way to earn your trust is to collect as little as possible and never sell anything about you. This policy explains what we do collect, why, and what happens to it.

1. Who we are

Boring Streak is an iOS application published by Taylor Murphy, doing business as Boring Streak ("we," "us"). You can reach us at hello@boringstreak.com.

2. What we collect

When you use Boring Streak, we store:

We do not collect: your contacts, location, browsing history, advertising identifier, health data, photos, or any financial account information. We never see which specific apps or websites you block. The app does not move money and never asks for bank or card details.

3. Screen Time and blocked apps

The gambling blocker feature uses Apple's Screen Time / FamilyControls framework. When you select apps to block, Apple hands the app an opaque FamilyActivitySelection token. We store that token locally on your device and in a shared container so the blocker extension can read it. We never see which specific apps you chose, and that token cannot be read by us on a server.

4. Where your data is stored

Most of your data lives locally on your iPhone in UserDefaults. When you sign in with Apple, a copy of your profile, streak data, and subscription status is synced to Firebase (Google Cloud) so you can restore it if you reinstall the app or get a new phone. Firebase acts as a data processor on our behalf; it does not sell or share your data.

5. What we don't do

6. Subscriptions and payments

Subscriptions are processed entirely by Apple through the App Store. We never see your card, bank details, or Apple ID password. Apple shares a subscription status with the app (active / not active) so we can unlock features. Subscription receipts are verified through StoreKit on your device.

7. Analytics and crash reports

We use Firebase Authentication to sign you in and Firestore to sync your streak across devices. We also use Firebase Analytics, which is part of the Firebase SDK, to understand basic product usage: app opens, screen views, and a small number of custom events such as "first check-in." These events are tied to your Firebase user ID so we can tell one user's activity apart from another's, but we do not use the iOS advertising identifier (IDFA), we have set NSPrivacyTracking=false, and we do not track your activity across other companies' apps or websites. We do not use third-party behavioral analytics SDKs such as Mixpanel, Amplitude, or Segment. We do not run advertising SDKs. We may add crash-reporting (Firebase Crashlytics) in a later version to learn when the app crashes; those reports contain technical diagnostic information and no personal content.

8. Your choices

9. Children

Boring Streak is not directed to children under 13. We don't knowingly collect data from children. If you believe a child has provided us data, email us and we'll delete it.

10. Changes

If we change this policy, we'll update the date at the top and note what changed. Material changes will be surfaced inside the app.

11. Contact

Questions, requests, or complaints: hello@boringstreak.com.

This page is written in plain English because we think privacy policies should be readable. It is not legal advice. If you're another developer shipping an app like this, please do not copy this file verbatim — have a lawyer review your own.