Privacy Policy

Peek is built to know as little about you as possible. This policy explains what little we do process, why, and what your rights are. It covers the Peek website, the trial and licensing backend, and the Peek macOS app.

1. The short version

• No accounts. You can try and use Peek without creating an account, and we never ask you to.
• The trial is anonymous. It works with a one-way hashed device identifier — no name, no email, no serial numbers.
• We learn your email only if you buy — because we have to deliver your license and receipt somewhere.
• Analytics and crash reports are off by default. They run only if you switch them on, and they never include what you play, write, or ask.
• Your AI key is yours. Prompts go straight from your Mac to your chosen AI provider. They never touch our servers.
• Our backend lives in the EU (Google Cloud, EU regions).
• We do not sell or rent personal data. There is no advertising and no tracking for advertising anywhere in Peek.

2. Who is responsible

The data controller is:

Innovai Labs s.r.o.
Plzeňská 3352/156, Smíchov, 150 00 Praha 5, Czech Republic
Company ID (IČO): 23603194
support@peeknotch.com

3. What we process, and why

3.1 When you visit the website

The website sets no analytics, advertising, or tracking cookies. Like practically every website, the hosting infrastructure keeps short-lived technical server logs (IP address, request time, user agent) needed to serve pages, keep the service secure, and diagnose faults.

Purpose: operating and securing the website. Legal basis: our legitimate interest in running a working, secure website (GDPR Art. 6(1)(f)).

3.2 When you use the free trial

To make the 24-hour trial work without an account, the app sends our server an anonymous device identifier — a salted SHA-256 hash derived from a hardware identifier of your Mac. The raw hardware identifier never leaves your Mac, and the hash cannot be reversed into it. We store this hash with trial timestamps (started, expires) so the trial survives reinstalls without resetting.

Purpose: providing the trial you asked for and preventing trial abuse. Legal basis: performance of a contract (GDPR Art. 6(1)(b)) and our legitimate interest in preventing abuse (Art. 6(1)(f)).

3.3 When you buy Peek

Checkout is handled by Stripe, which acts as the merchant of record for the payment through its Link service. Stripe collects your payment details (card number, billing information) directly — they never reach our systems — and sends you the receipt and tax invoice. Stripe processes this data as described in Stripe’s own privacy policy, including for payment processing and fraud prevention.

From the purchase we receive and store: your email address, what you bought, when, the amounts and tax details, and the license we issued (linked to the device hashes it is activated on). We use Resend to send transactional email — your license delivery and, if a purchase is refunded, a note that the license was deactivated. We do not send marketing email.

Purpose: completing your purchase, delivering and managing your license, meeting tax and accounting obligations. Legal bases: performance of a contract (Art. 6(1)(b)) and compliance with legal obligations (Art. 6(1)(c)).

3.4 When you contact support

If you email support@peeknotch.com, we process your email address and whatever you include in the message. Our backend also keeps an append-only log of licensing events (for example: trial started, license activated, refund processed) tied to the device hash and license — this log is our support tool: it is how we can see what went wrong and fix it for you.

Purpose: helping you. Legal basis: performance of a contract (Art. 6(1)(b)) and our legitimate interest in providing support and keeping records of licensing operations (Art. 6(1)(f)).

3.5 When you use the app

Peek’s content — your timer settings, reminders, now-playing information, preferences — lives on your Mac (in system preferences storage and the macOS Keychain) and is not sent to us.

• Update checks. Peek periodically fetches an update feed to see whether a newer version exists. This is an anonymous version check; it is not used to identify you.
• License checks. Licensed copies periodically confirm the license state with our server using the device hash and license identifier.
• Diagnostics (off by default). Peek includes optional analytics and crash reporting (Google Firebase Analytics and Crashlytics). Both are disabled unless you explicitly turn them on in Peek’s settings. If enabled, they send a fixed, minimal set of technical events (for example: feature opened, crash stack trace, app version, macOS version) — never the content of what you do: no track names, no reminder text, no prompts. You can turn them off again at any time.

Purpose: keeping Peek up to date, enforcing licenses, and — only with your consent — improving stability. Legal bases: performance of a contract (Art. 6(1)(b)) for updates and licensing; your consent (Art. 6(1)(a)) for diagnostics.

3.6 The AI quick prompt

The AI feature uses your own API key for the AI provider you choose. The key is stored in the macOS Keychain on your Mac. Prompts and responses travel directly between your Mac and the provider — they never pass through our servers, and we cannot see them. The provider’s own privacy policy governs that traffic.

4. What we deliberately do not do

We do not build profiles of you. We do not use advertising or cross-site tracking technologies. We do not sell or rent personal data. We do not collect the content of your music, reminders, or AI conversations. We do not store raw hardware identifiers. We do not run analytics you have not agreed to.

5. Where data is stored, and transfers

Our backend runs on Google Cloud / Firebase in EU regions (database in the EU multi-region eur3, functions in europe-west3).

Some of our providers process data outside the EEA — notably Stripe (payments) and Resend (email delivery), which are US companies. Where that happens, transfers are protected by recognised safeguards: an adequacy decision such as the EU–US Data Privacy Framework, or the European Commission’s Standard Contractual Clauses.

Our processors and recipients: Google (Firebase / Google Cloud — hosting, database, and, only with your consent, diagnostics), Stripe (payments), Resend (transactional email). We share data with authorities only where the law requires it.

6. How long we keep things

• Technical website/server logs: short-lived, kept only as long as needed for operations and security.
• Trial records (device hash + timestamps): kept so that trials cannot be reset by reinstalling. [To confirm: concrete retention period]
• License and purchase records: for as long as your license is active, and afterwards for as long as legal claims are possible.
• Accounting and tax records: for the statutory retention periods under Czech law (up to 10 years).
• Support email and the licensing event log: for as long as needed to support you and keep a coherent history of the license. [To confirm: concrete retention period]
• Diagnostics data (only if you opted in): kept per Firebase’s standard retention settings. [To confirm: configured retention]

7. Your rights

Under the GDPR you can ask us for access to your data, correction, deletion, restriction of processing, a portable copy, and you can object to processing based on legitimate interest. Where processing is based on consent (diagnostics), you can withdraw it at any time — in Peek’s settings or by writing to us — without affecting past processing.

To exercise any right, email support@peeknotch.com. One honest caveat: trial data is keyed only to an anonymous device hash — to find it we may need information from your Mac (Peek shows its device identifier in the About window), because we genuinely cannot look you up by name.

You also have the right to complain to a supervisory authority — in the Czech Republic that is the Office for Personal Data Protection (Úřad pro ochranu osobních údajů, ÚOOÚ), Pplk. Sochora 27, 170 00 Praha 7, uoou.gov.cz — or to the authority where you live.

8. Children

Peek is a productivity tool for general audiences and is not directed at children. We do not knowingly process children’s personal data.

9. Changes to this policy

When Peek gains features that change what we process, this policy will change with it. We will post updates here with a new “Last updated” date, and for significant changes we will say so prominently (on the website, and in the app where relevant).

10. Contact

Questions about privacy: support@peeknotch.com
Innovai Labs s.r.o. · Plzeňská 3352/156, Smíchov, 150 00 Praha 5, Czech Republic