This is the full list. Each item says what we hold and what it is for.
- Account and sign-in
- Your email address. You sign in with Apple or with a one-time code sent to your email, so there is no password to store. If you use Sign in with Apple, or another sign-in provider we offer later, we receive the identity it passes on. Apple may give us a private relay address instead of your real one, and that works fine. Your phone number, only if you ask us to add one: the app never asks for it and works without it. Settings > Phone number says how (you write to us and a person adds it with you). We keep it with your sign-in details, as one more way to keep one account per person, and it is never shown to another member.
- Profile
- Your first name, birthday, gender, who you want to meet, photos, prompt answers, a short bio, job title, school, height, what you are looking for, whether you have kids, whether you drink or smoke, interests, the languages you speak, your city and country, and the language you use the app in. Everything except your first name, birthday and gender is optional. Other members see your age, not your birthday. We keep the birthday to make sure everyone is 18 or older.
- Photos
- The place, the camera and the date your phone writes inside a picture are stripped on our server before anyone can open it. Then, before a new profile photo is shown to anyone else, software on our own servers gives it a score for nudity. A photo that scores high waits for a person on the team to look at it, a machine never turns a photo down, and if the check cannot run the photo is shown and a person looks at it afterwards. No outside company sees your photos for this. What we keep is the result: the score, how many faces are in the picture and what was decided, for as long as we hold the photo.
- Religion, politics and orientation
- Two optional questions during sign-up ask your religion and your politics, and your gender together with who you want to meet can say something about your sexual orientation. European law calls these special category data and holds them to a higher bar, so: we only have them because you typed them in, they sit on your profile the way you wrote them, they are never used to target advertising (there is none) and they are never sold or shared. Leave the two questions blank and we hold nothing. To change or clear them afterwards, write to hello@peatchy.app and a person does it, and deleting your account removes them with everything else.
- Location
- Your precise location while the app is open, so we can show you people nearby and how far away they are. Other members see a distance or a city, never your exact position. Gold members can also pick a city with Passport.
- Verification
- A selfie in a pose we pick that day. Before you take it, you choose how it is checked, and nothing is chosen for you. If you choose Check it automatically, our own servers compare it with your profile photos using automated face matching. No outside company does the matching: the software runs on the same servers as the rest of Peatchy. A clear match is approved in about a minute, and anything unclear goes to a person on the team, so a machine never turns anyone down on its own. We keep only the result and the match scores, never a face template or any other description of your face, and the selfie is deleted as soon as the check is done. If you would rather not have your face matched by a machine, choose Have a person check it: no face matching runs, and a member of the team compares the selfie with your photos by eye. Face matching is biometric processing, so it only happens with your explicit consent, which you give on the selfie screen by choosing Check it automatically (see Legal bases).
- Messages and calls
- Text messages between matches are stored on our servers so the conversation shows on every device you sign in on. Voice calls, video calls and Talk audio are live streams through our media server and are never recorded.
- What you write
- A word filter on our own servers reads what you write on your profile (first name, bio, job title, city, interests and prompt answers) and each message as you send it, and compares it with a list of terms the team keeps. The reading is automatic, and so is what follows from it. Profile text containing a listed term, such as a contact handle, a scam pitch or an offer of paid sex, is refused: it is not saved, the app says so, and you can write it another way. A message with a scam pitch or an offer of paid sex in it is refused the same way. A message containing a worrying term, such as a request for money or a stated age under 18, is delivered as usual and shown to a moderator, who sees who wrote it and its first 200 characters, and can open the conversation to judge it. The filter never warns, suspends or bans anyone, so nothing is decided about a person by a machine alone: a moderator reads what was flagged and decides whether anything follows. No outside company sees your text for this, and the note made for the moderator stays with your account’s moderation records until the account itself is gone.
- Purchases
- Apple or Google take the payment; we never see your card number. We receive the status of your purchase through RevenueCat so we can unlock what you bought.
- Notifications
- A device token, issued through Firebase Cloud Messaging, so we can send push notifications, and the notification preferences you choose.
- Analytics and crash reports
- None today. The app runs no analytics service and no crash reporting service: it sends nobody a record of which screens you open, and nobody a crash report. Our own servers do note when you were last active: it is part of how the deck is ordered, a member who is shown your profile sees a mark on it if you were active in the last day, and someone you matched with sees whether you are online or how long ago you were. If we switch either kind of service on, this page will name the company and say what it receives before we do. There are no advertising SDKs, no cross-app tracking and no data sales.
- Safety and moderation
- Reports, blocks, moderation decisions, bans and appeals. We also keep a register of requests from law enforcement.
- Support
- What you write to us from Settings > Write to us, so we can answer you.
- Waitlist
- Your email and your country, before we open in your country, so we can tell you when we do.
- This website
- peatchy.app sets no cookies and runs no analytics. If you leave your email address on it, it reaches us as an email from you, and we use it only for what the form said: a short progress note every couple of months and one email the day the app is in the App Store, or the newsletter. The pages load their typeface from Google Fonts, so Google receives your IP address when a page opens.