Privacy Policy

Overview

Daily Steak ("we", "our", "the app") is a social debate application. This policy explains how we collect, use, and protect your information.

Information We Collect

Account Information

• Email address (if you sign up with email)
• Display name (chosen by you)
• Profile information from Google or Apple (if you use social sign-in)

Usage Data

• Votes and comments you submit
• Debates you participate in
• Communities (BBQs) you join or create
• App interactions and preferences

Optional Demographics

• Age range
• Gender
• Location (country/region)
• Language preferences

You can choose not to provide demographic information.

Automatically Collected

• Device information (model, OS version)
• Crash reports and performance data
• Anonymous usage analytics

How We Use Your Information

• To provide and improve the app
• To display your comments and votes
• To personalize your experience
• To send notifications (if enabled)
• To moderate content and enforce community guidelines
• To analyze usage and fix bugs

Third-Party Services

We have Data Processing Agreements (DPAs) in place with all third-party service providers that process personal data on our behalf, as required by GDPR Article 28.

We use the following services to operate the app:

Firebase (Google)

We use Firebase services for core app functionality. Data is processed in the EU (europe-west1 region). Firebase services include:

• Firebase Authentication - Manages your account and login sessions
• Cloud Firestore - Stores your profile, votes, comments, and app data
• Firebase Analytics - Collects anonymous usage statistics to improve the app
• Firebase Crashlytics - Collects crash reports to help us fix bugs

Firebase is GDPR-compliant. See Firebase Privacy for details.

Google AdMob (Advertising)

We display ads to free users through Google AdMob. AdMob may collect:

• Device advertising ID
• IP address (for geographic targeting)
• Device information and app usage data
• Ad interaction data (views, clicks)

You can opt out of personalized ads in your device settings. Premium subscribers do not see ads. See Google Privacy Policy.

RevenueCat (Subscriptions)

We use RevenueCat to manage premium subscriptions. RevenueCat processes:

• Anonymous user ID
• Purchase and subscription status
• App Store/Play Store transaction IDs

Payment details are handled by Apple/Google, not by us. See RevenueCat Privacy.

SendGrid (Email)

We use SendGrid to send transactional emails (password reset, notifications). SendGrid processes:

• Email address
• Email delivery status
• Email open/click data (anonymized)

See Twilio/SendGrid Privacy Policy.

Stripe (Payments)

We use Stripe to process payments for web purchases. Stripe processes:

• Payment card information (card number, expiry, CVC)
• Billing address
• Transaction details and purchase history

Payment card details are handled directly by Stripe and are never stored on our servers. See Stripe Privacy Policy.

Meta Platform APIs (Social Media)

We use Meta's Graph API to automatically post daily debate announcements to our Instagram and Facebook pages. This is server-to-server communication and does not collect any user data. No user accounts are connected to Meta through our app. See Meta Privacy Policy.

TikTok Content Posting API (Social Media)

We use TikTok's Content Posting API to automatically post daily debate announcements to our TikTok account. This is server-to-server communication and does not collect any user data. No user accounts are connected to TikTok through our app. See TikTok Privacy Policy.

Google Analytics 4 (Website)

Our website (dailysteak.app) uses Google Analytics 4 (ID: G-Q5LRTW48VG) to understand how visitors use the site. This is separate from Firebase Analytics used in the mobile app. GA4 collects:

• Page views and navigation paths
• Device and browser information
• Approximate geographic location (country/city level)
• Referral sources

GA4 operates in GDPR consent mode: analytics data is only collected after you accept cookies via our consent banner. IP addresses are anonymized. See Google Privacy Policy.

Data Retention

• Account data - Retained while your account is active, deleted within 30 days of account deletion
• Votes and comments - Retained while the associated debate exists
• Analytics data - Aggregated data retained for up to 14 months
• Crash reports - Retained for 90 days
• Virtual currency (embers) - Retained while your account is active, never expires

Legal Basis for Processing (GDPR Article 6)

• Contract performance - Account creation, voting, virtual currency transactions, and core app features
• Legitimate interest - Analytics, push notification optimization, fraud prevention, and app improvement
• Consent - Analytics cookies, marketing emails, and push notifications
• Legal obligation - Tax records for purchases, responding to lawful data requests

Your Rights (GDPR)

If you are in the EU/EEA, you have the following rights:

• Access - Request a copy of your personal data
• Rectification - Update or correct your information
• Erasure - Delete your account and associated data
• Portability - Request your data in a machine-readable format
• Restriction - Limit how we process your data
• Objection - Object to certain processing activities
• Withdraw consent - Revoke consent for optional data collection

To exercise these rights, contact us at privacy@dailysteak.app. We will respond within 30 days.

You also have the right to lodge a complaint with a supervisory authority. In Finland, the relevant authority is the Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto).

How to Delete Your Data

You can delete your account directly in the app: Profile → Settings → Delete Account. This permanently removes your profile, votes, comments, and all associated data within 30 days.

International Data Transfers

Your data is primarily stored in the EU (Firebase europe-west1). Some data may be processed in the US by our service providers (Google, RevenueCat). These transfers are protected by Standard Contractual Clauses approved by the European Commission.

Children's Privacy

The app is not intended for users under 18. Users confirm their age during account creation. We do not knowingly collect data from users under 18. If we discover such data has been collected, we will delete it promptly.

Cookies (Website)

Our website uses cookies for:

• Essential - Language preference, theme mode
• Analytics - Google Analytics (only with your consent)

You can accept or reject non-essential cookies via the banner. Your choice is stored locally.

Push Notifications

If you enable push notifications, we collect and process:

• Device token - Your FCM/APNs push token, stored in your user profile for message delivery
• Notification interaction data - Whether notifications are opened, used for delivery optimization
• Activity hours - Aggregated hourly vote patterns (no individual timestamps) to send notifications at your preferred time
• Quiet hours preference - Your configured quiet hours (start/end times), stored in your user profile

You can manage notification preferences in the app (Settings → Notifications). Some notifications (content moderation, account warnings) cannot be disabled. Push tokens are refreshed automatically; old tokens are not retained.

Home Screen Widgets & Live Activities

If you add a home screen widget or use iOS Live Activities:

• Shared storage - Current steak data (question, options, vote counts, time remaining) is stored in device-local shared storage (iOS UserDefaults via App Group, Android SharedPreferences) for the widget to display
• Interactive voting - If you vote via the widget, your vote choice is temporarily stored in shared storage until the app processes it — then cleared
• No additional data collection - Widgets and Live Activities only display data already available in the app. No separate analytics or tracking is performed through widgets

Widget data is stored only on your device and is not transmitted to any server beyond the normal vote submission when you interact with the widget.

Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes through the app or by email.

Contact

For privacy questions or to exercise your rights:

• Email: privacy@dailysteak.app
• Response time: Within 30 days