Peeka Privacy Policy
Version: peeka-privacy-v0.2.1-beta · Last updated 2026-07-04
What Peeka stores and why
- Your email address and account credentials (for login).
- Your child's date of birth, known allergens, and family health history (to personalise results).
- Scan history linked to your account.
We do not store payment card numbers. Subscription billing is handled by RevenueCat; we receive only a subscription status token.
Where your data lives
All your health data and primary records are stored in your encrypted Supabase account, hosted in Sydney, Australia (AWS ap-southeast-2) — your child's details, allergens, family history, and scan history never leave Australian infrastructure. A small number of overseas providers process a pseudonymous account/subscription identifier only, with all health fields scrubbed before transmission. See "Overseas service providers" below.
Who can see your data
Only you. We do not sell your data or share it with advertisers. We send only pseudonymous, health-free usage events to our analytics provider (PostHog) to understand how the app is used. We may disclose data if required by Australian law (e.g. a valid court order), and will tell you unless prohibited.
Overseas service providers
To run subscriptions, understand usage, and fix crashes, we share a pseudonymous identifier (and, for billing, your subscription status) with a small number of providers outside Australia. None of them receive your child's name, date of birth, allergens, family history, scan results, or any other health information — these fields are scrubbed before any data leaves the app.
- RevenueCat (United States) — subscription billing. Receives a pseudonymous account identifier and subscription status. We never see or store your payment card details.
- PostHog (United States) — product analytics. Receives pseudonymous, health-free usage events.
- Sentry (United States) — crash and error reporting. Receives pseudonymous diagnostic data with health fields scrubbed.
Personalised results
Results personalised to your child are computed in memory and stored only in your encrypted account. They are treated as sensitive health information under the Australian Privacy Act 1988 (s.6(1)) and are never included in crash reports, logs, or any third-party service.
We describe results using the terms HIGHLY SUITABLE, GENERALLY OK, USE WITH CAUTION, and AVOID. These are relative assessments against published standards — not medical diagnoses.
Peeka provides regulatory and ingredient information. It does not provide medical advice. For health concerns about your child, consult a healthcare professional.
How we keep your data private
- At-rest encryption: AES-256 (Supabase-managed).
- In-transit encryption: TLS 1.2 or higher. No plain-HTTP endpoints.
- Auth tokens are stored in your device's secure enclave (iOS Keychain / Android Keystore).
- Health data (child profiles, allergen lists, family history) is kept in memory only — never written to unencrypted device storage.
Your rights
You can access, correct, or delete all data we hold about you at any time from the app settings. To exercise these rights, contact privacy@getpeeka.com. We respond within 30 days.
Submitted product reports
If you submit a product Peeka doesn't recognise, or report a disputed result, we collect the details you provide (product name, barcode, your description, and any optional photo of the physical label). Please do not include your child's name or any health details in these submissions — they are reviewed by our team.
When you submit photographed or scanned label text, we automatically screen that text for signs of a dispensed prescription label (which can carry a named patient). If we detect such markers, the label text is excluded from the submission; the rest of your submission still goes through. We disclose this here so you understand how submitted text is handled.
Children
Peeka is used by parents and carers on behalf of infants and children. We do not collect data directly from children. All account holders must be 18 or older.
Changes to this policy
If we materially change this policy, we will ask for your consent again before the change takes effect. Old policy versions remain on record and linked to your consent history.
Contact
Peeka · privacy@getpeeka.com · Australia