Privacy Policy

How Peekaflix handles your information

Effective and last updated: 22 September 2026.

This policy applies to the Peekaflix website, iOS app, Android app, and related services (together, the “Service”). “Peekaflix”, “we”, and “us” mean the operator of the Service. For privacy questions or requests, use our public Contact Us form and select the privacy category.

Information we collect

• Account and profile information: username, name, email address, password hash, age or date-of-birth information, profile photo, biography, preferences, and other details you choose to provide.
• Content and communications: videos, clips, thumbnails, captions, comments, messages, support requests, copyright notices, safety reports, blocks, and moderation appeals. Published content and profile details are visible to other users according to your settings.
• Activity and technical information: searches, viewing and engagement activity, follows, likes, history, approximate location inferred from IP address, IP address, device and browser type, app version, cookie or session identifiers, crash information, logs, and security events.
• Notifications: if you enable notifications, a push subscription or device token and notification interactions. The iOS app uses the system permission prompt before enabling notifications.
• Camera, microphone, and media: only when you choose an upload or capture feature and grant the relevant system permission. We receive only the media you select, record, or submit. The iOS app does not request precise or background location.
• Payments and payouts: payment providers may collect billing, payment, identity, tax, or bank details where web or creator-payout features are available. We receive transaction status and identifiers, but not complete card numbers. Buyer payment, tipping, and marketplace features are not offered inside the iOS app.

Why we use information

We use information to create and secure accounts; authenticate users; upload, process, deliver, and recommend content; remember settings and history; provide messages and notifications; respond to support requests; process permitted transactions; detect fraud, spam, and security incidents; investigate reports and copyright complaints; enforce our Community Guidelines; comply with law; and measure and improve reliability and performance.

When you report a private message, the reported message, its sender and recipient identifiers, and its original timestamp are copied into the safety report so moderators can investigate even if the conversation is later cleared. This evidence is available only to authorised moderation staff and is retained under the safety and legal rules below.

Where data-protection law requires a legal basis, we rely on performance of our contract with you, our legitimate interests in operating and protecting the Service, consent where requested, and compliance with legal obligations. You may withdraw consent at any time, but this does not affect processing already carried out.

Service providers and disclosure

We disclose only the information reasonably needed to providers that help us operate the Service, such as hosting, cloud storage, content delivery, media processing, email, authentication, customer support, security and anti-abuse services, analytics, payment processors, OneSignal, Apple Push Notification service, and Firebase Cloud Messaging. A provider processes information under its own policy as well as its agreement with us.

Google reCAPTCHA or similar security checks may be used on forms to prevent automated abuse. The website may use optional analytics, advertising, social-login, or payment services where those features are enabled. The iOS app does not enable third-party advertising, cross-app tracking, social login, or buyer-payment features.

We may also disclose information when required by law; to protect users, rights, safety, and the integrity of the Service; to professional advisers; or as part of a merger, financing, reorganisation, or transfer of the Service, subject to appropriate safeguards. We do not sell personal information for money.

International processing

Our users and providers may be located in different countries. Information may therefore be processed outside your country. Where required, we use recognised safeguards for international transfers and require providers to protect information consistently with applicable law.

Retention and deletion

We keep account information while your account is active and retain other information only as long as reasonably needed for the purposes above. Retention depends on the type of information, safety and fraud risks, legal and tax duties, dispute needs, and backup cycles. Safety reports, enforcement records, transaction records, and evidence of consent or rights may be retained longer where necessary to protect users or meet legal obligations.

You can permanently request account deletion in the app or at Settings > Delete account. After verification, we delete or de-identify the account and content, except information that must be retained for legal, security, fraud-prevention, payment, dispute, or legitimate safety reasons. Residual copies may remain in protected backups until their normal expiry and will not be restored to active use. Content copied or reshared by others may remain outside our control.

Your choices and rights

• Edit your profile and privacy settings, clear or manage history where available, block users, and control notifications in the Service or device settings.
• Request access, correction, deletion, portability, restriction, or objection where applicable law provides those rights.
• Withdraw a consent or complain to your local data-protection authority. UK users may contact the Information Commissioner's Office.

We may verify your identity before completing a request and may decline or limit a request where the law permits, including to protect another person’s rights.

Cookies and local storage

We use cookies and similar local storage for sign-in, security, preferences, upload continuity, media playback, and Service operation. Optional website technologies may also support analytics or advertising where enabled. Browser controls can remove or block storage, but essential features may then stop working. The mobile app's embedded browser uses first-party storage to keep you signed in and operate the Service.

Children

The Service is intended only for people aged 18 or older. We do not knowingly allow children to create accounts. If you believe a child has provided personal information, report it through the safety contact form so we can investigate and take appropriate action.

Security and policy changes

We use administrative, technical, and organisational safeguards designed to protect information. No service can guarantee absolute security, so protect your password and notify us about suspected unauthorised access.

We may update this policy when the Service or law changes. We will post the revised policy and update the date above; material changes may also be communicated in the Service.

Contact

Submit privacy questions and rights requests through our Contact Us form. Include the email or username connected to your account and do not send passwords or complete payment-card details.