Privacy Policy

1. Who We Are

Streak (“we”, “our”, or “us”) is a gamified student engagement and rewards platform that helps universities recognise and showcase student achievements. Our registered address is Guwahati, Assam, India. Questions about this policy can be sent to privacy@streakhub.in.

2. Information We Collect

We collect information in three ways:

Information you provide

• Account details — name, email address, and password
• Profile information — university, course, year of study, and profile photo
• Achievement data — events attended, clubs joined, competitions entered, volunteer hours, and any supporting documents you upload
• Communications — messages you send to us via the contact form or email

Information collected automatically

• Usage data — pages visited, features used, time spent, and click paths
• Device data — browser type, operating system, device identifiers, and IP address
• Cookies and similar technologies — see Section 7 for details

Information from third parties

• University or institution administrators may provide your enrolment details to set up your account
• If you sign in with Google or another OAuth provider, we receive your name, email, and profile picture from that provider

3. How We Use Your Information

• To create and manage your account and provide our core services
• To verify and display your achievements on your profile and leaderboard
• To enable universities to track engagement and recognise students
• To allow recruiters (where you have opted in) to discover your verified profile
• To send you platform notifications, achievement badges, and product updates
• To analyse usage trends and improve the platform's features and performance
• To detect, prevent, and respond to fraud, abuse, or security incidents
• To comply with applicable laws and enforce our Terms of Service

4. Legal Basis for Processing (GDPR)

Where the GDPR applies, we rely on the following legal bases:

• Contract — processing necessary to deliver the services you signed up for
• Legitimate interests — analytics, security, and platform improvement, balanced against your rights
• Consent — marketing emails and optional recruiter visibility (you can withdraw at any time)
• Legal obligation — where we are required to retain or disclose data by law

5. Sharing Your Information

We do not sell your personal data. We share it only in these cases:

• Your university — administrators at your institution can view your achievement data and engagement metrics
• Recruiters — only if you explicitly enable recruiter visibility in your profile settings
• Service providers — trusted vendors who process data on our behalf (hosting, analytics, email delivery) under strict data-processing agreements
• Legal requirements — when required by law, court order, or to protect the rights and safety of Streak or others
• Business transfers — in the event of a merger, acquisition, or asset sale, your data may be transferred; we will notify you before it becomes subject to a different privacy policy

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide our services. If you delete your account, we will delete or anonymise your personal data within 30 days, except where we are required to retain it by law (for example, for tax or fraud-prevention purposes) or where it is necessary to resolve disputes or enforce our agreements.

7. Cookies

We use the following types of cookies:

• Essential cookies — required for authentication and core functionality; cannot be disabled
• Analytics cookies — help us understand how the platform is used so we can improve it (e.g. page views, session duration)
• Preference cookies — remember your settings such as dark/light mode

You can control non-essential cookies through your browser settings. Disabling analytics cookies will not affect your ability to use Streak.

8. Data Security

We use industry-standard security measures including encryption in transit (TLS), encryption at rest, access controls, and regular security reviews. No system is completely secure, so we encourage you to use a strong, unique password and to contact us immediately if you suspect unauthorised access to your account.

9. Children's Privacy

Streak is designed for university students aged 18 and above. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us with personal data, please contact us and we will delete it promptly.

10. Your Rights

Depending on your location, you may have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — ask us to correct inaccurate or incomplete data
• Erasure — request deletion of your personal data (“right to be forgotten”)
• Restriction — ask us to limit how we process your data in certain circumstances
• Portability — receive your data in a structured, machine-readable format
• Objection — object to processing based on legitimate interests or for direct marketing
• Withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting prior processing

To exercise any of these rights, email us at privacy@streakhub.in. We will respond within 30 days.

11. International Transfers

Streak is based in India and our servers are currently located in India. If you access our services from outside India, your data may be transferred to and processed in India. We take appropriate steps to ensure such transfers comply with applicable data protection laws.

12. Changes to This Policy

We may update this policy from time to time. When we make material changes, we will update the “Last updated” date at the top of this page and, where appropriate, notify you by email or via an in-app notice. Continued use of Streak after changes take effect constitutes acceptance of the revised policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, please reach out:

• Email: privacy@streakhub.in
• Phone: +91 9954630700
• Address: Guwahati, Assam, India