Privacy policy
Last updated: 9 October 2026
Peephole is made by Dhirav Choudhary, an individual developer in India ("we"). This policy explains what the Peephole Android app collects, why, where it is kept and how you can delete it. Peephole is for people aged 18 and over.
The short version
- How long you spend in apps, your visits and unlocks never leave your phone.
- If you make an account, we store your email and the settings needed to restore Peephole on a new phone.
- Analytics and crash reports carry no email, no account id, no app names and no minutes.
- You can delete your account in the app, or on trypeephole.com/delete.
What stays on your phone
Minutes and visits per app, unlocks, daily history (kept 90 days), and images you add yourself. These are not sent to us and are removed when you uninstall the app or use "Reset all data". Peephole reads which app is on screen through Android's usage access, only on your phone.
What we store if you make an account
| Data | Why | Where | How long |
|---|---|---|---|
| Email address, account id, sign-in method | Sign-in, restore, deletion and export requests | Supabase, Mumbai (India) | Until you delete your account |
| Your picked apps (app names, labels, budgets), groups, style, meme pack, time zone | Restore Peephole on a new phone | Supabase, Mumbai | Until you delete your account |
| Coin history and meme collection | Restore your balance and collection | Supabase, Mumbai | Until you delete your account |
| PRO status and purchase records | Give you PRO on every phone | Supabase, Mumbai; Google Play keeps its own records | Until you delete your account; Google per its own policy |
Sign-in codes are emailed through Brevo (servers in France and Belgium).
Analytics, crash reports and ads
- PostHog (servers in Frankfurt, EU) receives crash reports, device model, Android version and app events, linked to a random id. No email, account id, app names or minutes.
- Google AdMob shows the optional rewarded ads and uses your advertising id and ad events. In the EEA, UK and Switzerland we ask for your consent first, and you can change it any time in Settings → Privacy choices.
- Google Play handles payments; we never see your card details.
Who we share data with
Only the services above, which process data for us: Supabase (account storage), Brevo (sign-in emails), PostHog (analytics and crashes), Google (sign-in, Play, billing, ads, consent) and Cloudflare (this website and email to our addresses). We do not sell your data.
Transfers outside your country
Account data is stored in India. Analytics and email data are processed in the EU. For people in the EEA and UK, transfers rely on the providers' standard contractual clauses.
Deleting your account
In the app: Settings → Delete account. Without the app: see trypeephole.com/delete. Your account data is deleted from our live database at once (web requests within 30 days). Copies in our encrypted backups are gone within 30 days. We keep only a scrambled code made from your email and the deletion date, so a phone that still holds old data learns the account was deleted; it can't be turned back into your email.
Your rights
You can ask for a copy of your account data, correct it, or delete it. We answer within 30 days. Write to hi@trypeephole.com.
Grievance officer
Dhirav Choudhary, hi@trypeephole.com. We reply within 7 days and resolve complaints within 30 days.
Changes
If this policy changes in a way that matters, we will say so in the app before it takes effect.