This Privacy Policy explains how Peaches ("Peaches", "we", "us"), the iOS app "Peaches: AI To-Do List" and this website, collects, uses and protects your information. Peaches is published by Badih Merheg, who is the data controller. Questions: piramostudio@gmail.com.
The short version: your tasks, goals and journal belong to you and are private to your account. We never sell your data. AI features send only the text you ask us to process. You can delete your account and all your data from inside the app at any time.
1. Information we collect
| Data | Why | Linked to you |
|---|---|---|
| Account: email, name, and Sign in with Apple identifier | Create and secure your account, sync across devices | Yes |
| Your content: tasks, subtasks, notes, goals, journal entries and moods, focus sessions, preferences | Provide the app's features | Yes |
| AI requests: the text you dictate or type in the Magic Generator; journal entries when you request a recap; aggregated statistics (numbers only) when you request an insight | Generate tasks, recaps and insights | Processed per request, not used for advertising |
| Purchases: subscription status and transaction identifiers from Apple | Unlock Premium and prevent fraud | Yes |
| Usage analytics: screens viewed, features used, onboarding and paywall events, app version, device model, language, approximate country | Understand and improve Peaches | Pseudonymous user ID |
| Diagnostics: crash logs and performance data | Fix bugs | No |
| Advertising identifier (IDFA), only if you allow tracking | Measure which ads bring people to Peaches | Used for attribution only |
Voice: dictation uses Apple's Speech framework, which runs on your device whenever possible. We never record or store audio. Only the resulting text is sent to our AI service when you tap "Done, organize".
2. How we use information
- To provide, sync and back up your tasks, goals, journal and settings.
- To generate tasks, summaries and insights with AI when you ask for them.
- To schedule the reminders you enable (created on your device).
- To process subscriptions and restore purchases.
- To understand how Peaches is used, measure marketing campaigns and improve the product.
- To keep Peaches secure, prevent abuse and comply with the law.
Legal bases (EEA/UK): performance of our contract with you (account, content, AI features, purchases), legitimate interests (security, analytics, product improvement), and consent (App Tracking Transparency, AI processing, notifications), which you can withdraw at any time.
3. AI processing
Before you use AI for the first time, Peaches asks for your permission. AI requests are sent over an encrypted connection to our server, which forwards only the necessary text through OpenRouter to a language model provider (currently Google Gemini, with OpenAI as a fallback) to generate a response. We route requests only to providers that do not store or train on your data. You can turn AI processing off anytime in Settings › AI processing and keep using every non-AI feature.
4. Service providers
We share data only with providers that process it on our behalf under contracts that protect it:
- Google Firebase (Authentication, Cloud Firestore, Analytics, Crashlytics, Remote Config): account, content storage, analytics and crash reports.
- OpenRouter and the model providers it routes to (Google, OpenAI): AI text processing, as described above.
- Vercel: hosts our website and the server that relays AI requests and verifies purchases.
- Apple: Sign in with Apple and App Store payments.
- Meta (Facebook SDK, App Events): measuring ad campaign performance. When you deny tracking, Meta receives no advertising identifier and data is used only in aggregated, privacy-preserving form.
We do not sell or rent your personal information, and we do not share your tasks, goals or journal with advertisers.
5. Tracking and your choices
Peaches asks for permission through Apple's App Tracking Transparency before accessing the advertising identifier. You can change this anytime in iOS Settings › Privacy & Security › Tracking. You can also disable notifications in Settings › Notifications and AI processing in the app's Settings.
6. Retention and deletion
We keep your data while your account is active. You can permanently delete your account and all associated content in the app under Settings › Delete account, or by emailing us. Deletion removes your data from our active systems immediately and from backups within 30 days. Aggregated, de-identified analytics may be kept. Deleting your account does not cancel an App Store subscription; cancel it in iOS Settings › Apple ID › Subscriptions.
7. Security
Data is encrypted in transit (TLS) and at rest. Access is restricted per user by security rules, so only you can read your content. API keys and secrets are kept on the server and never shipped inside the app.
8. Your rights
Depending on where you live (including the EEA, UK, California and Brazil), you may have the right to access, correct, export or delete your data, object to or restrict processing, and withdraw consent. Email piramostudio@gmail.com and we'll respond within 30 days. You may also lodge a complaint with your local data protection authority. California residents: we do not sell or share personal information for cross-context behavioral advertising without your consent.
9. Children
Peaches is not directed to children under 13 (or the minimum age in your country), and we do not knowingly collect their data. If you believe a child has provided us data, contact us and we'll delete it.
10. International transfers
Our providers may process data in the United States and other countries. Where required, transfers rely on appropriate safeguards such as the EU Standard Contractual Clauses.
11. Changes
We'll update this policy as Peaches evolves and change the date above. Material changes will be announced in the app.
12. Contact
Badih Merheg · piramostudio@gmail.com