FineStreak ("we," "us," "our") is operated by Acrevant LLC. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use the FineStreak application and related services at finestreak.com.

By creating an account or using FineStreak, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use our services.

1. Information We Collect

Account Information

When you sign up, we collect your name, email address, phone number, and password (stored as a salted hash, never in plain text). We also collect your timezone and goal preferences from the onboarding quiz.

Accountability Data

As you use FineStreak, we collect:

Call transcripts from your daily AI accountability calls
Photos and screenshots you submit as goal verification
Check-in results (success, failure, timestamps)
SMS messages sent to and from your phone number
Streak data, fines, and points related to your goals

Payment Information

Payment processing is handled entirely by Stripe. We do not store your credit card number, expiration date, or CVC. Stripe's privacy policy governs payment data: stripe.com/privacy.

Technical Data

We collect standard technical information including IP address, browser type, device type, and pages visited. This is used for security (rate limiting, fraud detection) and service improvement.

2. How We Use Your Information

Deliver the service: Make AI calls, send SMS check-ins, analyze photos, track streaks, process fines
Personalize your experience: Tailor call scripts based on your goals, history, and preferences
Process payments: Manage subscriptions and fine billing through Stripe
Send communications: Account updates, weekly reports, streak notifications
Improve the service: Analyze usage patterns to make FineStreak better
Prevent abuse: Rate limiting, fraud detection, and security monitoring

3. Third-Party Services

We share specific data with the following services to operate FineStreak:

Service	Data Shared	Purpose
Retell.ai	First name, goals, call audio	AI phone calls (uses AI model providers to run the voice agent)
AI model providers (including OpenAI)	Photos/screenshots, message text, goal context	Image verification, the SMS accountability agent, and check-in classification
Twilio	Phone number, SMS content	Text messaging
Stripe	Email, payment info	Billing
Resend	Email address, email engagement	Sending account email and the optional newsletter
Google Analytics	Anonymized usage, IP-derived data	Site analytics. Loads only after you accept analytics cookies
Cloudflare R2	Verification photos	Encrypted photo storage with automatic deletion after 30 days

We do not sell your personal information to any third party. We do not run advertising profiles on you. We use Google Analytics for site analytics only, and only after you opt in through our cookie banner. If we later enable advertising measurement tools such as the Meta Pixel, they will also be gated behind that opt-in and disclosed here before they go live.

4. Call Recording Disclosure

Your daily accountability calls are processed by AI and are recorded for quality and accountability purposes. Call transcripts are stored to track your check-in results. When you sign up, you affirmatively consent to recording of all FineStreak calls by checking the recording-consent box, and we record the date and time of that consent. The AI agent also reminds you on your first call. Some states require all parties to a call to consent to recording, so we capture your consent before any call is placed. You can stop calls at any time from your account settings.

5. Data Retention

Data Type	Retention
Account information	Until you delete your account
Call transcripts	90 days, then summarized and raw deleted
Photos/screenshots	Stored on Cloudflare R2 with encryption at rest. Retained 30 days for verification and dispute review, then automatically deleted via storage lifecycle rule.
Check-in results and streaks	Until you delete your account
Technical and IP data (logs)	Up to 90 days for security, rate limiting, and fraud detection, then deleted or anonymized
Payment records	As required by law (typically 7 years)

6. Your Rights

Depending on your location, you may have the following rights:

Access: Request a copy of all personal data we hold about you
Correction: Update or correct inaccurate information
Deletion: Request deletion of your account and all associated data
Export: Receive your data in a portable format
Opt-out: Unsubscribe from non-essential communications

To exercise any of these rights, email [email protected]. We will respond within 30 days.

7. California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act. You may request disclosure of the categories of personal information we collect and the purposes for collection. We do not sell personal information. To make a CCPA request, email [email protected] with "CCPA Request" in the subject line.

Global Privacy Control (GPC): If your browser sends a Global Privacy Control signal, we treat it as a valid request to opt out of analytics and any sharing for advertising. When we detect that signal we keep analytics cookies off and do not show you the opt-in banner.

7a. EEA and UK Residents (GDPR)

If you are in the European Economic Area or the United Kingdom, we process your personal data on these lawful bases: to perform our contract with you (delivering the accountability service you signed up for), with your consent (for example, analytics cookies and recording your calls), and for our legitimate interests (security, fraud prevention, and improving the service). You have the right to access, correct, delete, restrict, or object to the processing of your data, and the right to data portability and to lodge a complaint with your local data protection authority. Some of our providers are in the United States, so your data may be transferred there under appropriate safeguards. To exercise any of these rights, email [email protected].

8. Security

We protect your data using industry-standard security measures including encrypted connections (HTTPS/TLS), hashed passwords (bcrypt), secure session tokens, and access controls. Verification photos are stored on Cloudflare R2 with encryption at rest by default. Your payment information is handled by Stripe, which is PCI DSS Level 1 certified. No system is 100% secure, but we take reasonable steps to protect your information.

9. Cookies and Local Storage

FineStreak keeps your signed-in session token in your browser's local storage on your device, and your app preferences (such as accessibility and notification settings) the same way. The session token is sent with each request to authenticate you.

We use the following cookies:

Cookie	Type	Purpose
fs_consent	Essential	Remembers your cookie choice
fs_attrib	First-party	Records how you first found FineStreak (marketing attribution), kept up to 90 days
fs_ab_variant	First-party	Keeps you on a consistent version of the site during A/B tests, kept up to 90 days
_ga, _ga_*	Analytics	Google Analytics. Set only after you accept analytics cookies in our banner

Analytics cookies stay off until you opt in through the cookie banner. You can change your mind at any time by clearing the FineStreak cookies in your browser. We do not use third-party advertising pixels today. If we add advertising measurement tools later, they will be gated behind the same opt-in and listed here first.

10. Children

FineStreak is not intended for users under 18 years of age. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal data, contact us immediately.

11. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via email or in-app notification. Continued use after changes constitutes acceptance of the updated policy.

12. Contact

For privacy questions, data requests, or concerns:
Email: [email protected]
Company: Acrevant LLC
Address: 30 N Gould St Ste N, Sheridan, WY 82801