TeamStreaks Privacy Policy

This Privacy Policy explains how TeamStreaks Inc. (“TeamStreaks”, “we”, “us”, or “our”) collects, uses, stores, discloses, and protects personal information through its website, platform, applications, dashboards, features, and related services (collectively, the “Services”).

TeamStreaks Inc. is a corporation incorporated under the laws of Canada, with its registered office located at 855 Dunlop Avenue, Montréal, Québec H2V 2W6, Canada.

At TeamStreaks, protecting personal information is a priority. We are committed to handling personal information responsibly, transparently, and in accordance with applicable laws, while implementing reasonable measures to ensure its confidentiality, security, and integrity.

This Privacy Policy is available in French and in English. If the two versions differ, the French version prevails.

1. TeamStreaks’ Role

TeamStreaks provides a digital engagement platform that enables organizations to create, manage, and monitor collective engagement experiences such as campaigns, challenges, activities, events, clubs, wellness initiatives, safety programs, ESG initiatives, community initiatives, and team-building activities.

Depending on the context, TeamStreaks may act:

• as a service provider on behalf of a client organization, where that organization determines the purposes for which the platform is used; or
• as the organization responsible for certain processing activities relating to the management of its website, user accounts, communications, security, and the improvement of its Services.

The client organization remains responsible for the initiatives it creates, the participants it invites, the settings it chooses, and the use it makes of the information or data to which it has access through the platform.

2. Personal Information We May Collect

In connection with the Services, TeamStreaks may collect the following categories of personal information:

• identity information, such as first name, last name, the username you choose, business email address, preferred language, organization, role, or team;
• account information, including login credentials, account settings, preferences, access status, and login history;
• participation information, including the activities you log, the campaigns, challenges, events, and clubs you join, points, rankings, medals, progress, and results;
• user-generated content voluntarily submitted, such as posts, comments, photos, messages, or other content you publish;
• technical information, including IP address, device type, browser, operating system, when you were last connected, activity logs, security information, and usage data;
• information provided by the client organization, including teams, clubs, campaigns, or other information required to configure the Services;
• work information, such as job title, company, division and department, when you or the client organization add them;
• location information, such as the city, region, and country you enter in your profile, when you or the client organization add them;
• fitness information, such as the workouts recorded by a tracker you choose to connect and, from Apple Health or Health Connect, the number of steps you take each day;
• communication information, including contact requests, communication preferences, and messages exchanged with TeamStreaks.
• safety information, including flags you make or that are made about you and the copy of the content they preserve, participants you block, and any measure applied to your account;

TeamStreaks does not intentionally collect sensitive personal information unless it is required for a specific feature, voluntarily provided, or required in a particular context authorized by the client organization.

3. Purposes of Processing

We use personal information to:

• create, manage, and secure user accounts;
• provide and operate the Services;
• enable participation in activities, campaigns, challenges, events, and clubs;
• award points, rankings, medals, and progress indicators;
• send notifications, messages, and communications related to the Services;
• provide dashboards and participation data to the client organization, in accordance with the selected configuration;
• respond to support requests and inquiries;
• ensure security, prevent fraud, detect incidents, and protect the platform;
• improve the Services, develop new features, and enhance the user experience;
• comply with our legal, regulatory, and contractual obligations.

4. What Other Participants Can See

Other participants in an organization you belong to see what identifies you there: your name, the username you choose, your profile picture and banner, your motto, your location and work information when they are filled in, when you were last connected, what you post or comment, and your points and rankings.

Your email address is never shown to other participants. It is visible only to you, to the people the client organization appoints to manage TeamStreaks, who use it to manage memberships and invitations, and to TeamStreaks’ own administrators.

A message in a conversation is seen only by the participants of that conversation, and by moderators when it is flagged, as described in the section on content moderation.

5. Information Accessible to the Client Organization

When you use TeamStreaks as part of a client organization, that organization may have access to certain information relating to your participation, depending on the features enabled and the settings selected.

This may include, for example:

• your participation status;
• your points, rankings, medals, or results;
• your membership in a team or a club;
• your posts, comments, and other interactions within the organization;
• aggregated views of participation, such as a campaign’s leaderboards.
• flags made within the organization, including who made them and the content they preserve;

TeamStreaks is not responsible for decisions made by the client organization based on the information or data available to it through the Services.

6. Fitness Data from Connected Trackers

If you choose to connect a tracker, such as Apple Health on your iPhone, Health Connect on Android, or a supported fitness account, TeamStreaks reads your workouts so that they can count as activities. From Apple Health and Health Connect, it also reads the number of steps you take each day. Connecting a tracker is optional, and you can pause or disconnect it at any time from the Trackers settings.

TeamStreaks reads Apple Health and Health Connect even when the app is closed, so that a workout counts without you having to open TeamStreaks: on iPhone whenever Apple Health reports new data, and on Android about once an hour, if you allow it in Health Connect.

TeamStreaks reads only the following information about your workouts and your steps:

• the type of workout;
• its start and end time;
• its duration and the time spent moving;
• the distance covered and the energy burned, when they are recorded;
• the total number of steps you took each day, when the tracker is Apple Health or Health Connect;
• the name of the app or device that recorded it.

TeamStreaks does not read your heart rate, your routes or locations, the times of your individual steps, or any other information recorded by Apple Health, Health Connect or your fitness accounts.

Each workout, and each day’s steps, becomes an activity and points in the same way as an activity you log yourself. Your activities and points may be visible to the other participants in your campaigns and to the people who run them, as described in the previous section. When you connect a fitness account, TeamStreaks keeps the access it grants in encrypted form and revokes it when you disconnect.

Information read from your trackers is never used for advertising or marketing and is never sold. It is shared with no one other than the service providers that host the Services, keep their backups and monitor their operation, which may see it in logs and technical records.

When you disconnect a tracker, the workouts it recorded are deleted. The activities created from them, and the points those activities earned, remain, as if you had logged them yourself. When your account is deleted, everything a tracker recorded is deleted with it.

7. Aggregated, Anonymized, and Statistical Data

TeamStreaks may create and use aggregated, anonymized, or statistical data that does not directly identify any individual.

Such data may be used to measure platform performance, improve features, develop new services, produce analytics, optimize user experiences, and better understand engagement trends.

8. Disclosure of Personal Information

TeamStreaks does not sell users’ personal information.

We may, however, disclose personal information:

• to the client organization, in accordance with the configuration of the Services;
• to our service providers that support hosting, security, authentication, protection against automated abuse, monitoring, messaging, and customer support;
• to professional advisors, where necessary;
• to public authorities, courts, or regulatory bodies where required by law;
• in connection with a merger, acquisition, financing, reorganization, or the sale of all or part of our business, subject to appropriate safeguards.

Our service providers are authorized to process personal information only to the extent necessary to provide services to TeamStreaks, in accordance with our instructions and applicable laws.

9. Hosting and Transfers Outside Québec or Canada

The Services are hosted outside Québec, in Toronto, Canada. This includes the information the platform holds, such as your account, your participation, the pictures you add and the workouts your trackers record, as well as its backups.

The service providers that deliver our emails (Mailgun), monitor the operation of the Services (Datadog), and check that a sign-up, a request for a new verification code or a password reset is made by a person rather than an automated program (Cloudflare) process personal information outside Canada, including in the United States.

10. Retention of Personal Information

TeamStreaks retains personal information for as long as necessary to provide the Services, comply with its legal or contractual obligations, ensure platform security, resolve disputes, and enforce its rights.

Once information is deleted from the platform, copies of it may remain for a limited time, after which they are deleted:

• in server logs and monitoring records, for up to thirty (30) days;
• in the records of the provider that delivers our emails, for up to ninety (90) days;
• in backups of the platform, for up to three hundred sixty-five (365) days.

Backups are used only to restore the Services after an incident. If the Services are restored from a backup, any account deleted since that backup was made is deleted again.

11. Deleting Your Account

You can delete your account at any time from the Settings, under Account. We ask for your password to confirm that the request comes from you.

You can also ask for your account to be deleted without signing in, from teamstreaks.net/account-deletion. We write to the address on the account to confirm the request before anything is deleted.

You are signed out on every device as soon as you confirm. Within minutes, your account is deleted permanently, together with your profile, pictures, posts, comments, messages, friends, connected trackers, the workouts they recorded, and your activities. Once it is done, we send one last email to the address on the account to confirm it.

Your points are removed from every campaign you took part in, including campaigns that have already ended.

Nothing is kept that would allow your account to be restored, so the deletion cannot be undone.

Some copies may remain for a limited time in our logs and monitoring records, our backups and the records of our email provider, as described in the section on retention.

12. Content Moderation, Flags and Blocks

The Services let you flag content or a person you believe breaks the rules, and let you block another participant. This section explains what happens when you do, and what we may do in response.

When you flag something, we record what you flagged, the reason you chose, any note you add, who wrote the content, and a copy of what you saw at that moment. The copy is kept so that a later edit or deletion cannot change what a moderator judges. Flagging identifies you to the moderators who review the flag.

Flags made within a client organization are reviewed by the moderators that organization appoints, who can see who made the flag. Flags concerning violence, a risk to someone’s life, or a child’s safety, and flags made in the space TeamStreaks operates itself, are reviewed by the TeamStreaks team instead.

A moderator may leave the content in place, remove it, or remove the participant from the organization. Removed content is hidden from everyone, including the person who wrote it. The TeamStreaks team may also warn an account, suspend it for a period, or close it permanently. These measures apply wherever you use TeamStreaks, and not within a single organization only.

Blocking is yours alone: it applies everywhere you use TeamStreaks and works in both directions. Neither of you sees the other’s posts, comments or messages, and neither can start a conversation with the other. The person you block is not told.

Text you write is checked against a list of prohibited words before it is saved.

Content a moderator removes is hidden immediately and deleted ninety (90) days later. The copy kept with a flag is erased on the same schedule, while the record that a flag was made and how it was resolved is kept. Flags you made, and flags made about you, are deleted when your account is deleted.

Where there appears to be a risk to someone’s life or safety, or where content involves the sexual exploitation of a child, we may preserve that content and report it to the police, to emergency services, or to the Canadian Centre for Child Protection through Cybertip.ca, as Canadian law requires of us.

If you believe a decision about your content or your account was wrong, write to [email protected].

13. Use of Service Providers

TeamStreaks relies on specialized service providers for hosting, authentication, communications, monitoring, protection against automated abuse, and other services necessary for the operation of the platform.

To protect signing up, asking for a new verification code and resetting a password from automated programs, those screens ask Cloudflare to check that a person is using them. The check reads technical information about your device, your browser and your connection, such as your IP address, and gives TeamStreaks only its result, which is used to let the request through or to refuse it.

TeamStreaks selects its service providers carefully. Each of them is bound by contract to use personal information only to provide its service to TeamStreaks, and to protect it at least as well as this Privacy Policy does and as applicable laws require.

14. Security

TeamStreaks implements reasonable administrative, technical, and organizational safeguards to protect personal information against unauthorized access, loss, misuse, disclosure, or alteration.

Depending on the context, these measures may include access controls, authentication mechanisms, encryption, system monitoring, backups, and incident management procedures.

In the event of a privacy incident presenting a risk of serious harm, TeamStreaks will take reasonable measures to reduce its impact and, where required by law, notify the affected individuals and the appropriate regulatory authority.

While TeamStreaks implements reasonable safeguards, no method of electronic transmission or storage is completely secure. Accordingly, TeamStreaks cannot guarantee absolute security.

15. Cookies and Similar Technologies

TeamStreaks uses cookies and similar technologies to ensure the proper operation of its website and Services, enhance security, and improve the user experience.

Where required by applicable law, your consent will be obtained before certain categories of cookies are used.

16. Your Rights

Subject to applicable legal limitations, you may request:

• access to your personal information;
• correction of inaccurate or incomplete personal information;
• deletion of certain personal information;
• withdrawal of your consent where processing is based on consent;
• restriction of or objection to certain processing activities, where permitted by law;
• information regarding the use, disclosure, or retention of your personal information.

You may also delete your account yourself, as described in the section on deleting your account.

Where your personal information is processed on behalf of a client organization, certain requests may need to be submitted directly to that organization.

Subject to applicable laws, TeamStreaks will respond to requests within the time limits prescribed by law, generally within thirty (30) days of receiving the request.

You may also file a complaint with the competent privacy or data protection authority, including the Commission d’accès à l’information du Québec where applicable, if you believe your rights have not been respected.

17. Information Relating to Minors

The Services are for people 16 and older, and an account cannot be created without confirming it. TeamStreaks does not knowingly collect personal information from anyone younger.

If we become aware that personal information has been collected from someone younger than 16, we will take reasonable steps to delete it in accordance with applicable laws.

18. Changes to this Privacy Policy

TeamStreaks may modify this Privacy Policy to reflect changes to its Services, business practices, or applicable legal requirements.

Where significant changes are made, TeamStreaks will make reasonable efforts to notify users or client organizations. The date of the latest update will always appear at the beginning of this Privacy Policy.

19. Privacy Officer

For any questions regarding this Privacy Policy or the exercise of your privacy rights, you may contact TeamStreaks’ Privacy Officer:

• Lucile Baladier
• Privacy Officer
• TeamStreaks Inc.
• 855 Dunlop Avenue, Montréal, Québec H2V 2W6, Canada
• Email: [email protected]
• Website: https://teamstreaks.net/