Privacy Policy

Effective 5 May 2026 · Last updated 20 May 2026 (rev. 6)

1. Who we are

Pecki ("we", "us") makes the Pecki app. Email us at support@peekingowl.com for anything privacy-related — a real person will reply.

2. What we collect

Account info

When you sign in with Apple, we get a unique Apple ID and the email you choose to share (your real one or Apple's private relay), plus your name if you share it.

When you sign in with Google, we get a unique Google ID, your Google email, and your name. We never see your password.

Your items

The items you create — name, price, colour, emoji — are saved to our servers for everyone who's signed in, so they survive a phone reset.

Your sales

Where the day's sales go depends on your plan:

• Free. Sales counts and settled days live on your phone only. After you settle, that day's record is deleted from your device 3 days later. Nothing about your sales reaches our servers.
• Pecki Pro. Settled days are saved to our servers so you can see them on any device and keep them as long as you're subscribed.
• Free → Pro within 3 days. If you upgrade before that 3-day window expires, the settled day is moved to our servers and kept like any other Pro record.

Subscription status

We know whether you have an active Pecki Pro subscription, the tier, and the renewal date. Apple or Google handles the actual payment — we never see your card details.

Server logs

When the app talks to our servers we record standard logs (IP address, timestamp, which endpoint). We use these to spot abuse and debug issues. They're kept for up to 30 days.

What we don't collect

• No advertising IDs (IDFA, IDFV, AAID)
• No third-party analytics or behavioural tracking
• No location, contacts, photos, microphone, or camera
• No browsing history or activity outside Pecki
• No third-party crash analytics
• No payment card details — Apple and Google handle all of that

3. How we use it

Only to:

• Sign you in and keep you signed in
• Show your items, sales, and history inside the app
• Sync Pro users' data across devices
• Verify your subscription with Apple or Google
• Reply to your support emails
• Keep the app running and stop abuse
• Comply with the law where required

We don't use your data to advertise, profile, or train AI models. We don't sell or share your data with anyone for marketing.

4. Legal basis (for EU and UK users)

Under the GDPR we rely on:

• Contract — to run the service you signed up for (your account, your synced Pro data).
• Legitimate interests — to keep server logs that stop abuse and keep the app stable.
• Legal obligation — to keep the records the law says we have to (for example, tax-related transaction records).
• Consent — where consent applies, you can withdraw it any time from the app or by emailing us.

5. Who else sees your data

We use a small set of trusted service providers to run Pecki, each under a written data processing agreement and only handling what they need for their job. The named ones we have to mention:

• Apple — Sign in with Apple, App Store, in-app purchases on iOS. Apple's privacy policy.
• Google — Sign in with Google, Google Play, and in-app purchases on Android. Google's privacy policy.

Our hosting, subscription verification, and edge compute providers are kept off this page. We're happy to share the current list on request — email support@peekingowl.com.

We don't sell your data. We don't share it with advertisers or data brokers.

We may share data if a law, court order, or valid legal process requires it, or if we need to protect Pecki, our users, or the public.

6. Where your data lives

Synced data is stored on servers in the region our hosting provider has chosen. If you use Pecki from somewhere else, your data crosses borders to make the app work. For data leaving the EEA or the UK we rely on Standard Contractual Clauses (or the UK equivalent) to keep it protected.

7. How long we keep it

• Account and items: as long as your account exists. When you delete your account in the app, your items, sales, and history are erased. Your sign-in email is kept so you can reactivate by signing back in with the same account. For full erasure including the email, see Your rights below.
• Free settled days: kept on your device for 3 days after settle. Never on our servers.
• Pro settled days: kept while your subscription is active. If your subscription lapses, we keep them for another 30 days as a grace window. Re-subscribe in that window to restore access; otherwise they're deleted by an automatic cleanup.
• Server logs: up to 30 days, then deleted.
• Support emails: up to 12 months.
• Apple/Google transaction records: kept as long as Apple, Google, and tax law require. We can't delete these.

8. Your rights

Wherever you are, you can:

• See what we have about you — email us for an export.
• Correct anything wrong (most things are editable inside the app).
• Delete your account from Settings → Delete account in the app. Your items, sales, and history are erased immediately. Your sign-in email is kept so you can reactivate by signing in again — if you want full erasure including the email, email support@peekingowl.com and we'll remove it within 30 days.
• Export your records as CSV (Pro users from inside the app; everyone else by email request).
• Restrict or object to certain kinds of processing.
• Withdraw consent by signing out, deleting the app, or deleting your account.
• Complain to your local data protection authority if you think we've messed up.

To exercise any of these, email support@peekingowl.com. We reply within 30 days. To stop someone else pretending to be you, we may ask you to send the request from the email on your account or confirm a few details.

EU and UK

You have the rights in Articles 15–22 of the GDPR (and the UK version). You can also complain to your national data protection authority.

California

You have the right to know, delete, correct, opt out of any sale/sharing of your data, and limit how we use sensitive personal information. We don't sell or share personal information as those terms are defined under the CCPA/CPRA. We won't treat you any differently for exercising any of these rights.

Philippines

You have the rights in the Data Privacy Act (RA 10173), including access, correction, erasure, and data portability. You can file a complaint with the National Privacy Commission if you believe your rights have been violated.

9. Cookies and tracking

The app uses no cookies or tracking SDKs. This marketing site uses no analytics, ads, or behavioural trackers either.

10. Automated decisions

We don't use your data to make automated decisions that affect you legally or significantly (no credit checks, no eligibility algorithms, no advertising profiles). Pecki shows you your sales — that's it.

11. Security

We protect your data with TLS in transit, encryption at rest, OAuth via Apple and Google (so we never handle your password), and access controls that limit who on our team can see what. No system is perfect.

If we ever suffer a data breach affecting EU/UK users, we'll notify the relevant authority within 72 hours as the GDPR requires, and we'll tell affected users directly if the breach is likely to put them at high risk. Equivalent notifications happen under any other breach-notification law that applies.

12. Children

Pecki isn't aimed at children under 13 (or under 16 in parts of the EU). We don't knowingly collect data from children. If you believe a child has signed up, email us and we'll delete the account.

13. Changes

If we change this policy in a meaningful way, we'll bump the "Last updated" date at the top and tell you in the app or by email before the change takes effect. Continuing to use Pecki after a change means you accept the new policy.

14. Contact

Privacy questions, data requests, anything that feels off — email support@peekingowl.com.

This policy is offered in good faith and reflects what Pecki actually does as of the date above. If anything here clashes with a law that protects you locally, the law wins.