Privacy

Streck is a daily drawing practice app. This page describes what we collect, why we collect it, and the rights you have over your data. We aim to keep this short and honest. If anything here is unclear, contact the operator listed on the landing page.

What we collect

• Account: your email, display name, and timezone. The email is used to identify you in passkey sign-in flows; the display name appears in the UI; the timezone keeps streak boundaries on your local calendar day.
• Passkey credentials: the public key and metadata of each passkey you register, plus a counter used to detect cloned authenticators. We do not see biometric data or private key material — those stay on your device.
• Practice data: your projects, generated practice plans, completed sessions, sketches you upload, and AI feedback Streck generates from those sketches.
• Operational logs: structured logs covering API requests, auth events, and failures, kept for a short window for debugging. They include user IDs but not session contents.

How we use it

• Your sketches are uploaded to S3-compatible object storage. The compressed copy is sent to Google Gemini to generate feedback; the original stays in storage so you can see it later in your history.
• We do not run analytics or marketing pixels. No tracking cookies. The only cookies we set are session cookies (sign-in, WebAuthn ceremony, theme preference).
• We do not sell, rent, or share your data with third parties beyond what is required to run the app (the object storage provider, the AI provider, the hosting platform).

Your rights

• Export:from Settings → “Export my data” you can download a zip containing every record Streck holds for you.
• Delete:from Settings → “Delete account” you can permanently remove your account, all related records, and all uploaded sketches. Deletion confirms with your passkey.
• Correct:display name and timezone are editable in Settings. Email changes aren't self-service yet — contact the operator.

Retention

Data persists for as long as your account exists. Hard-deleting your account removes DB records immediately and queues a best-effort wipe of your object-storage prefix. Operational logs roll off based on the hosting platform's default retention.

Reports + moderation

You can report any submission from History. Reports are reviewed by an admin and may result in a submission being hidden or, for repeated or severe violations, an account being suspended. The report reason you submit is visible to admins reviewing the queue.