PeePal Privacy Policy

Last updated October 15, 2026

PeePal is a private social app for sharing dual-camera check-in photos with friends. This page explains what information we collect, how it's used, and how you can control or delete it.

Information we collect

• Account information: your Apple ID or email address (used only to sign you in), your chosen username, display name, and optional profile photo.
• Content you create: the dual-camera photos you post, captions, comments, reactions, private replies, chat messages, and circle updates.
• Friend graph: who you're friends with, friend requests you send or receive, and invite links you generate or use.
• Usage data: post timestamps and counts, used to power your profile calendar and the leaderboard.
• Optional post locations: in PeePal 1.3 and later, you may search for a place or choose your approximate area for an individual post. Approximate coordinates are rounded to a grid of about two kilometers before storage. A public venue you deliberately select includes that venue’s coordinates. Choose Friends or Only me before posting. Only me locations are stored in private account records, separate from friend-readable posts. You may post without a location or decline location permission. There is no background or live location tracking.
• Anonymous world map: contributing is off by default. If you opt in for a friends-shared post, its location may contribute to a broad regional count only after at least five different people contribute in that area. The world map does not show names, photos, exact venues, individual post times or individual pins.
• Push notification token: a device token from Apple, stored so we can notify you about friend requests, comments, reactions, and unread messages.

How we use it

• To operate the core app: your feed, friend connections, profile calendar, and leaderboard.
• Automated content moderation: before any photo or piece of text (captions, comments) is published, it is automatically scanned by Google Cloud Vision and Natural Language, and OpenAI’s image safety classifier to detect explicit or abusive content. Content that fails this check is rejected and never becomes visible to anyone. This scanning happens on our backend, not by a human reviewer, unless you or someone else files a report.
• Direct messages and private replies: PeePal stores chat text and checks it for abusive content using Google Cloud Natural Language before delivery. Both participants must be confirmed friends to read or send messages. A message report includes a copy of that message for PeePal to review.
• Circles: We store the circle name, invitations, memberships, chat messages and feed updates. Only accepted members can see the chat and feed. Circle names and text are checked for abusive content. Reports may include copies of chat or feed text.
• Discover People: You can choose to share a city you enter and up to five interests with signed-in people who search for them. Discover is off by default. It does not use device location or display distances. Turn it off in Discovery Settings to remove your listing.
• Message alerts: Alerts use generic wording by default. If you enable message previews in Settings, message text may appear in notifications, including on your lock screen, depending on your device settings.
• To suggest mutual friends and resolve invite links.

Who can see your content

Your posts are visible only to you and your confirmed friends — never publicly. The leaderboard shows usernames and counts, not photos, to whichever scope (friends or global) you choose to view.

Reporting and blocking

You can report a post or a user, and you can block anyone at any time from their post or from your friends list. Blocking removes the friendship, hides their content from you and yours from them, and cancels any pending friend request between you. Reports are reviewed internally and are not visible to other users.

Third-party services

PeePal is built on Firebase (Google), which provides authentication, our database, file storage, and this hosting page. Google Cloud and OpenAI perform the automated moderation described above. Apple provides Maps place search and subscription processing.

Private color scan: in PeePal 1.3 and later, Color scan samples the area you select on your device. This feature does not send the photo or sample to a model. If you choose Save privately, we keep the color, date and whether it was manually selected in encrypted account-specific storage on that device. You can view saved colors in Settings. A photo color estimate cannot measure hydration or diagnose a medical condition. Older app versions may offer Hydration scan, which sends a selected photo to Google Gemini through Vertex AI and returns an estimate without storing the result on our backend.

Recaps: your selected memories are rendered into a video on your device. They remain private until you choose to save to Photos or share through the system share sheet. Sharing sends that video to the destination you choose, which has its own privacy practices.

Supporter subscriptions: Apple processes payments. We use Apple-verified subscription information and an account-specific purchase token to unlock Supporter benefits. PeePal does not receive your payment card details. Manage or cancel the subscription in your Apple Account settings; deleting PeePal does not automatically cancel Apple billing.

We do not use advertising or tracking SDKs, and we do not sell your data.

Data retention and deletion

You can permanently delete your account at any time from Settings → Delete Account. This removes your profile, your posts and their images, your friend connections, your invite code, and any comments or reactions you left on other people's posts. It also deletes private post locations and this device’s saved color history. It cannot be undone. Videos and photos you exported or shared are controlled separately in Photos or the destination service.

Account deletion also removes your discovery listing, friend conversations, circles you own, and messages and updates you left in other circles. Copies of messages attached to safety reports are stored separately for review.

Age requirement

PeePal is rated 17+ and is intended for users 17 years of age or older. See our Community Guidelines for the rules that apply to everything you post.

Contact

Questions about this policy or your data can be sent to romirj@gmail.com.