Privacy Policy · Peatchy

Who we are

Peatchy is made by Think Elevated LLC, a Delaware limited liability company at 254 Chapman Rd, Ste 208 #18259, Newark, DE 19702-5422, USA. It is the company responsible for your data when you use the app. Anything on this page you want to ask about, ask at hello@peatchy.app or from Settings > Write to us inside the app.

What we collect and why

This is the full list. Each item says what we hold and what it is for.

Account and sign-in: Your email address. You sign in with a one-time code sent to it, so there is no password to store. If you use Sign in with Apple or Sign in with Google, we receive the identity they pass on. Apple may give us a private relay address instead of your real one, and that works fine.
Profile: Your first name, birthday, gender, who you want to meet, photos, prompt answers, a short bio, job title, school, height, what you are looking for, whether you have kids, whether you drink or smoke, interests, the languages you speak, your city and country, and the language you use the app in. Everything except your first name, birthday and gender is optional. Other members see your age, not your birthday. We keep the birthday to make sure everyone is 18 or older.
Religion, politics and orientation: Two optional questions during sign-up ask your religion and your politics, and your gender together with who you want to meet can say something about your sexual orientation. European law calls these special category data and holds them to a higher bar, so: we only have them because you typed them in, they sit on your profile the way you wrote them, they are never used to target advertising (there is none) and they are never sold or shared. Leave the two questions blank and we hold nothing. To change or clear them afterwards, write to hello@peatchy.app and a person does it, and deleting your account removes them with everything else.
Location: Your precise location while the app is open, so we can show you people nearby and how far away they are. Other members see a distance or a city, never your exact position. Gold members can also pick a city with Passport.
Verification: A selfie, which a person on the team compares with your profile photos. The selfie is deleted the moment the check finishes. Only the result is kept.
Messages and calls: Text messages between matches are stored on our servers so the conversation shows on every device you sign in on. Voice calls, video calls and Talk audio are live streams through our media server and are never recorded.
Purchases: Apple or Google take the payment; we never see your card number. We receive the status of your purchase through RevenueCat so we can unlock what you bought.
Notifications: A device token, issued through Firebase Cloud Messaging, so we can send push notifications, and the notification preferences you choose.
Analytics and crash reports: Product analytics with PostHog, on EU servers, such as which screens get used. Crash reports with Sentry. There are no advertising SDKs, no cross-app tracking and no data sales.
Safety and moderation: Reports, blocks, moderation decisions, bans and appeals. We also keep a register of requests from law enforcement.
Support: What you write to us from Settings > Write to us, so we can answer you.
Waitlist: Your email and your country, before we open in your country, so we can tell you when we do.

Legal bases

Under the GDPR we need a legal basis for each thing above. Ours are four.

1Contract: what we need to run the service you signed up for.
2Legitimate interest: safety and security, such as moderation and keeping banned people out.
3Consent: your location and your notifications. Your phone asks you for both, and you can turn either off in its settings.
4Explicit consent, under Article 9, for the special category data: religion, politics, and what your gender and who you want to meet say about your orientation. You give it by answering those questions and you take it back by asking us to clear them.

Who sees your data

Other members: Your profile, the way it is designed to be shown: your first name, age, photos, prompts and the rest of what you chose to put on it, plus a distance or a city. Never your email, your birthday or your exact position.
The team: What moderation and support need to do their job, and nothing more.
Processors: Companies that handle one part of the work for us: Apple and Google for sign-in and payments, RevenueCat for purchase status, Firebase for notifications, PostHog for analytics, Sentry for crash reports, our hosting provider and our email delivery provider. Each works to our instructions only, and a deletion is passed on to them (see How long we keep it).

We never sell personal data and never share it for advertising.

Where it is processed

Our servers may be in the United States and in the European Union. When your data moves between countries, we use the standard contractual safeguards where the law requires them.

How long we keep it

While your account is open, we keep what is on this page. When you close it, most of it goes at once and the rest is on a clock. A job on our servers runs this every night, on its own, and the team can see whether it ran.

You delete your account and nothing is open against it: Your profile, photos, prompt answers, likes, matches, messages and your sign-in are removed straight away, and the files are wiped from storage within the hour. The technical trail goes with them: the devices you signed in from, when calls happened, who you blocked. Nothing about you is left except the few things below.
You delete your account while a report about you is open, or while you are suspended: The same personal things go straight away, and your account stops working. We keep the report, the suspension and the messages the report points at until the case is decided. If it is dismissed, the rest of your account goes 90 days later. If it ends in a ban, the paragraph below applies.
Your account was banned: We close it rather than delete it, and we keep enough to recognise you if you try to come back: the ban and why it was issued, the reports and the messages behind it, any appeal you made, a one-way fingerprint of your email address rather than the address itself, and the identifiers of the phones you used. We keep those for three years from the ban, then they go and you are free to sign up again. If we lift the ban, they go the same day. We do this because letting someone we removed for hurting people walk back in is a risk to the people still here.
Purchases: What was bought, when, for how much and in which store, for seven years, because tax law says so. After three years we take your name and your account off those records, so what is left is an accounting entry and not a record of you.
Moderation and legal: The team’s log of what it did on your account, for two years. Anything covered by a legal hold or a request from law enforcement, for as long as the law requires and three years after it closes. Our record that you asked us to delete or export your data, for three years, so we can show we did it.
Emails we sent you: Two years: which email, when, and whether it arrived. Your address comes off those records after 90 days.
Sign-in records: While your account is open, the devices and network addresses you signed in from are kept for two years. Our sign-in log, which holds your address and your IP each time you sign in, is kept for 90 days.
Backups: We take a backup of the whole database every night, and keep backups for 30 days. So for up to 30 days after something is deleted, a copy of it still exists in a backup nobody reads unless we have to restore the service. After that the backup holding it is gone too.
The companies that help us run Peatchy: Apple and Google for sign-in and payments, RevenueCat for purchase status, Firebase for notifications, PostHog for analytics, Sentry for crash reports, our hosting provider and our email delivery provider. When you delete your account we ask each of them to delete what they hold about you as well, and each keeps its own backups for its own short period.

If you want to know exactly what we still hold about you, ask at hello@peatchy.app and we will tell you within 30 days.

Your rights

Wherever you live, you can ask us to:

1Show you what we hold about you, and export it.
2Correct anything that is wrong.
3Delete it.
4Stop using it, where you object to how it is used.

If you live in California: we do not sell or share personal information.

To ask, use Settings > Write to us in the app or email hello@peatchy.app. We answer within 30 days.

18+ only

Peatchy is for adults. You must be 18 or older to have an account, and we keep your birthday so we can enforce that. If you think someone under 18 is on Peatchy, tell us at hello@peatchy.app and we will look into it.

Security

Everything travels encrypted between your phone and our servers. Access to your data is limited to the people who need it for their work. Verification selfies are deleted as soon as the check is done.

Changes to this policy

If this policy changes, the date at the top changes with it. For anything that matters to how your data is handled, we tell you in the app or by email before the change takes effect.

Contact

Think Elevated LLC makes Peatchy. For anything about your data, write to hello@peatchy.app or use Settings > Write to us in the app.

By post: Think Elevated LLC, 254 Chapman Rd, Ste 208 #18259, Newark, DE 19702-5422, USA. By phone: +1 (302) 889-1344. Email is the fastest, a person reads it every day.

Everything we keep about you, and why.