SafeStreak privacy policy

Last updated 28 September 2026

In one line

Everything you put into SafeStreak stays on your phone. We never see it, and it is never sent anywhere.

What the app stores

Your PrEP and DoxyPEP doses, the meets you log (names or nicknames, dates, positions, condom use, tags, notes), your last STI test date, imported notes, and your settings. All of it is stored only on your device, encrypted with a key held by your phone. There is no account and no server.

What leaves your phone

• Nothing automatically. The app sends none of your data anywhere and has no analytics or crash reporting. Google Play Billing talks to Google only to confirm a purchase.
• Backups and exports go only where you send them, through your phone's share sheet. Backups are locked with a password you choose. Spreadsheet (CSV) exports are not encrypted, and the app says so before making one.
• Clinic summary is shared only when you tap Share, to the app you pick.
• SafeStreak+ purchases are handled by Google Play under Google's privacy policy. Play tells the app whether you have bought it, nothing more.

Reminders

Notifications are scheduled on your device. By default their text says only that you have a reminder. You can choose to show what each one is for.

Deleting your data

Settings → Erase everything, or uninstall the app. Either removes all of it. There is nothing to delete on our side because we hold nothing.

The website

If you join the waiting list on safestreak.co.uk we store your email address, your consent and the date, nothing else, in a database hosted by Supabase (our processor). No cookies, no trackers. We send one email when the app launches, then delete your address; email us to be removed sooner. Our hosts, Cloudflare and Supabase, keep standard technical logs (such as IP addresses) under their own policies.

Who we are

SafeStreak is made by Small Hours Software, United Kingdom. Contact: safestreak@proton.me