PEEK Privacy Policy

1. Personal Information We Process

The Operator processes the following personal information to provide the Service.

• Account information: Email address, Google or Apple login identifier, name and profile photo (if received). If you use Google or Apple login, we receive this information from that company.
• Saved content: Links, text you enter, body text, subtitles, descriptions, images, video and audio retrieved from links, metadata (titles and thumbnails), AI analysis results, categories
• If you save with the Chrome extension: The URL and title of the tab on which you pressed the save button, and the category you chose. The use of information received from the Chrome extension will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements. We use this information only to provide the save feature, and we do not sell it or use it for advertising.
• Usage information: Search terms, recently viewed records, app language
• Consent records: Your choices on the Terms, the Privacy Policy, receiving marketing information and usage record collection (including the date and time, the version of the document and the language version), whether the usage record collection box was already checked when shown, and the App Store country used to decide that
• If you turn on the daily reminder: Notification token, device time zone
• Payment information: Subscription status, credit balance and usage history, raw payment notifications (received from the app store through the payment vendor), and the original account ID passed to the payment vendor
• Records for preventing fraudulent use: Device installation number, records linking it to accounts (first and last use date and time), sign-up and account deletion date and time, an identifier made from the login account that cannot be reversed
• Information generated automatically: Server access logs (IP address, request time, account identifier), records of unexpected logouts, job processing records
• Usage records (optional; if you agreed to usage record collection): Feature usage events and information derived from them, tied together by a pseudonymous identifier; the IP address you connect from and your approximate location; and the acquisition channel (iOS app; whether you installed the app through an App Store ad)
• Error information (required): Error type, call trace, device model, OS and app version, the IP address you connect from, and the pseudonymous identifier (if you agreed to usage record collection)

2. Purposes and Legal Bases of Processing

The Operator processes, without consent, personal information necessary to perform the service contract, to comply with legal obligations, or for the Operator’s legitimate interests, and processes optional items with your consent.

Items processed without consent

Items processed with consent

3. Retention Periods and Destruction

When you delete your account through [Settings → Delete account] in the app, we immediately erase the personal information in the Service’s database. However, records we keep under law, the device link records of deleted accounts that we keep to prevent fraudulent use, the identifier needed while we ask outside vendors to delete their records, and information that outside vendors keep under their own rules remain until the periods below.

Destruction procedure and method

Personal information whose retention period has ended or whose purpose has been achieved is deleted without delay by a method that makes it unrecoverable. The minimum payment records we keep under law are kept separately from other personal information and are not used for anything other than that purpose.

4. Entrustment of Processing and Transfers Abroad

Domestic processors

Transfers abroad

The legal basis for transfers to the vendors below is Article 28-8(1)(3) of the Personal Information Protection Act (entrusted processing and storage necessary to perform the service contract, disclosed in this Policy). Because this is necessary to provide the Service, there is no separate way to refuse it; to refuse, delete your account, in which case you will not be able to use the Service. Vendors for which this differs are noted in their own rows.

Protection provided by vendors that receive personal information

Every third party with whom the Operator shares user data (the processors and vendors abroad above — including analytics tools, error reporting tools and SDK providers) will provide the same or equal protection of user data as stated in this Privacy Policy. The Operator uses only vendors that commit to that protection in their published terms of service, privacy policies or data processing terms. We do not send personal information to advertising networks, and the Operator, as a sole proprietor, has no parent company or affiliate with access to user data.

5. Your Rights and How to Exercise Them

1. (a) You may at any time request access to, correction of, deletion of, or suspension of processing of your personal information, and withdraw your consent.
2. (b) You can exercise these rights yourself in the app as follows:
   1. (1) View, edit and delete your saved content
   2. (2) Change the “Personal usage data collection”, “Marketing updates” and “Daily reminder” settings in [Settings]
   3. (3) Delete all of your personal information with [Settings → Delete account]
3. (c) For access, correction or suspension requests other than those in (b), write to the privacy email address (peekapp.support@gmail.com).
4. (d) You may also exercise your rights through a legal representative or a person you have authorized.

6. Security Measures

The Operator takes the following measures to keep personal information secure.

1. (a) All communication takes place over encrypted connections (HTTPS), and the website enforces encrypted connections and applies security headers.
2. (b) The database has per-account access restrictions (row-level policies) so that each user can read and write only their own data, and the server verifies the login token on every request.
3. (c) The database administrator key and secrets are kept only on the server, and before each deployment of the server code, it is checked automatically for leaked secrets and known vulnerabilities. The analysis processing server accepts only key-based access and does not open service ports to outside access.
4. (d) Before sending, error reports and usage records are stripped of saved content, search terms, URL query strings, email addresses and authentication tokens.
5. (e) The app’s login information is kept in the phone’s secure storage (iOS Keychain) and erased when you log out.

7. Automatic Collection Tools: Use and Refusal

1. (a) Website: We use a cookie to keep you logged in and browser storage to remember your choice on usage record collection. The usage record tool stores values only if the website comes to send usage records (it does not send them now).
2. (b) Mobile app and Chrome extension: We store on the device your login information, an offline copy of your content, categories, and records of settings and of notices you have confirmed; the SDKs for payments, error reports and usage records also store their own values.
3. (c) Installation number: To prevent fraudulent use, the app stores an installation number in the device’s Keychain (iOS). The installation number remains on the device even if you delete the app, and is erased when you reset the device. Because it is needed to use the Service, there is no separate way to turn it off.
4. (d) How to refuse: On the web, you can delete or block cookies and site data in your browser settings (if you block them, you will not stay logged in). In the app, logging out erases your login information and the offline copy, and other values, except the installation number in (c), are erased when you delete the app (if you delete the app without logging out, the login information in the iOS Keychain may remain). Usage record collection can be turned off in [Settings].

8. Chief Privacy Officer

The Operator is a sole proprietor (small business owner), and the representative is the Chief Privacy Officer (Article 31(2) of the Korean Personal Information Protection Act). For inquiries, complaints, remedies for damage, and exercising your rights, please contact us below.

• Chief Privacy Officer: 김창희 (Representative) · peekapp.support@gmail.com