Privacy Policy
Last updated 27 October 2026
Introduction
Welcome to Peakful (the "App"), an iOS application with short illustrated lessons, laid out as a path on a map, about how social media shapes the way you see your own life. The lessons draw on published research and cite the studies they rely on. The App is operated by Friendo Apps Technologies - FZCO, a free zone company registered in Dubai, United Arab Emirates (full provider details in the Legal Information section below).
Peakful is built to work on your device. This Privacy Policy explains what information is processed when you use the App, which third parties are involved, and your rights regarding it. By using the App, you acknowledge that you have read and understood this policy.
The Short Version
Peakful has no user accounts and no sign-in, and no server of ours holds your progress. The App downloads its lessons and artwork from our content delivery network, which sees the request and the device IP and nothing else. Your progress on the path and your settings stay in the App's storage on your phone. When analytics is on, Firebase receives usage events and onboarding answers, including your selected gender, age bracket, how you heard about us, your guesses and taps on the study links below the guess reveals. Answers to questions marked sensitive stay on your phone, as explained below. We use the answers on your phone to personalize the onboarding questions and path, and analytics to measure which parts help. Subscriptions are handled by Apple and RevenueCat. To measure our own advertising, Meta and TikTok receive standard app events such as an install or a purchase. On first launch iOS asks whether Peakful may track you. If you allow it, Meta, TikTok and AppsFlyer also receive your device's advertising identifier, so that an install can be matched to the ad that led to it. If you do not, they never receive it, and the App works exactly the same. None of this is tied to your name, but analytics events are linked to your installation through identifiers. We do not show ads inside the App and we do not sell data.
Information We Process
The App processes the following categories. Progress and local reminders stay on the phone. The answer and usage data shared with providers are described below.
| Category | Details |
|---|---|
| Your progress and answers | Your path, the lessons you have done, your streak, the cards you have collected, your answers in the first-run flow, including gender, age bracket and how you heard about us, and your settings are written to storage on your device. Uninstalling the App removes them, and so does Profile, then Delete my data. When analytics is on, answers other than those marked sensitive are also reported to Firebase Analytics, see Answers About You below. |
| Reminders | The lesson reminder you can switch on in Profile, and the reminder before a free trial ends, are scheduled locally by your device. Their text is composed on the phone and never passes through a server of ours. |
| Subscription status | If you subscribe, your purchase is processed by Apple. RevenueCat, our subscription management provider, receives an anonymous app-generated identifier and your purchase history in order to validate and restore your subscription. It also receives the identifiers that Firebase, Meta and, when active, AppsFlyer assign to your installation, along with your device's vendor identifier and IP address, so that purchases, renewals and cancellations can be reported to those services against the same installation. If you allowed tracking, it receives the advertising identifier too. We never receive your name, Apple Account, or payment details. |
| Usage analytics | The App includes Firebase Analytics, a Google service, to help us understand how the App is used: which screens are viewed and for how long, how far people get through the first-run flow, the guess picked on each guessing question, taps on the study link below each guess reveal, whether reminders were switched on, how many topics a path was built from, when the subscription offer was shown, bought or closed, whether a subscription is active, and the app and system version. It also receives your selected gender, age bracket and how you heard about Peakful. The referral question is offered during onboarding before purchase, whether or not you subscribe. Guess and study link events include the question identifier, its position and the female or male question set shown. We count repeat taps to understand whether people open the supporting study and which parts of onboarding help. These events are keyed to a random identifier generated by the App (see Device identifier below). Other onboarding answers and the exceptions are described in Answers About You below. Firebase also derives approximate location from your IP address for analytics. The App does not request access to Location Services. Analytics collection is switched on and off by us remotely and may be off in the version you are using. The App also downloads its remote settings from Firebase Remote Config. |
| Advertising measurement | The App includes the Meta (Facebook) SDK and the TikTok App Events SDK so that each network can confirm that an install or a purchase came from an ad we ran there. They receive standard app events, namely app install, app open and purchase, the purchase with the product, its price, its currency and the transaction id, together with basic device information such as the device model, system version, vendor identifier and IP address. The TikTok SDK also sends its own diagnostics: session timings, its start-up timings and reports of its own crashes. The TikTok SDK is switched on by us remotely and may be off in the version you are using. AppsFlyer, an attribution service, is built in as a reserve, off unless we switch it on, and, if you allowed tracking, receives the advertising identifier. |
| Tracking permission | The first-run flow opens with Apple's App Tracking Transparency question. If you allow tracking, Meta, TikTok and AppsFlyer receive your device's advertising identifier (IDFA) with the events above, which lets them match an install to an ad and show our ads to people like you. If you ask the App not to track, the advertising identifier is never available to them and attribution relies on Apple's privacy preserving SKAdNetwork. The App works the same either way, and you can change your answer at any time in Settings, then Privacy & Security, then Tracking. |
| Device identifier | The App generates a random identifier on first launch and keeps it in the device keychain. It is not derived from your identity, it is not Apple's advertising identifier, and it is used only to keep analytics events from the same installation together. Because it lives in the keychain it can survive a reinstall of the App. A support email written from Profile, then Support, includes it, so that we can find and delete the events tied to it, see Your Rights. |
| Crash data | If you have enabled "Share With App Developers" in iOS settings, Apple may share anonymised crash reports with us. This is controlled by you through the operating system, not by the App. |
Answers About You
The first-run flow asks for gender, female or male, and an age bracket, 18 to 29, 30 to 39, 40 to 49, or 50 and over. We do not ask for your date of birth or exact age. Your selected gender chooses which onboarding guessing questions you see. The flow also asks about you and your feed: how parts of your feed make you feel, for example about money, your body or your love life, when you usually scroll and what you would like to change. Answers are kept in local storage on your phone, where the App uses them to personalize the questions and build your path. The age bracket helps us understand which age groups the App reaches.
Before purchase, everyone going through the new onboarding is offered "How did you hear about us?", once per installation. The choices are "Recommended by a therapist", TikTok, Instagram, Facebook, YouTube, App Store, a friend and other. This asks where you found the App, without asking for a therapist's identity, a diagnosis or treatment details. When analytics is on, the selected source is sent to Firebase as an event and stored as a property of the installation, so we can measure how people find Peakful, including people who do not subscribe.
When analytics is on, the App sends your gender, age bracket, referral source and the other reportable onboarding answers to Firebase Analytics as choice codes or scale values. The topics used to build your path stay on the phone, while analytics records how many were picked. Events use the App's random identifier and Firebase's installation identifier, never your name. They are linked to the same installation even though there is no account. We use these answers to understand who the App helps and to improve the first-run flow. They are never sent to Meta, TikTok, AppsFlyer or any advertising service, and never sold.
Some question bank answers can concern health, origin or beliefs. Questions marked sensitive keep the answer on your phone: analytics records only that the question was answered and its identifier, never the chosen answer. Any reported rank is calculated without those answers. Gender and age bracket are demographic choices, separate from these withheld question bank answers. Daily question answers also stay on your phone.
The guessing questions ask about published research. The guess you pick and taps on the study link below its reveal are reported to Firebase. These events identify the question, its position and the female or male question set shown, so the set can reveal your selected gender. Opening a study also sends a normal web request to the site hosting it, which handles that request under its own privacy policy. The study tap event does not contain your browsing history. There is no account, export feature or backup service of ours for your answers.
What We Do Not Collect
- No account, email address, name, or contact details
- No precise location or access to Location Services. Firebase derives approximate location from your IP address for analytics.
- No contacts, photos, camera, microphone, or data from the Health app
- No advertising identifier unless you allow tracking when iOS asks
- No advertising shown inside the App, and no sale of data to anyone
Third-Party Services
The App relies on the following third parties. Each receives only what is listed here, under its own privacy policy.
- Apple processes the purchase itself and delivers crash reports if you have opted in. Apple's handling of your payment is governed by Apple's own privacy policy.
- RevenueCat validates and restores subscriptions and reports subscription events to the analytics and advertising services below, as described under Subscription status.
- Google (Firebase Analytics and Remote Config) receives the usage events and reportable onboarding answers described above, including gender, age bracket, referral source and study link taps, without the advertising identifier, and serves the App's remote settings. Google signals and ad personalisation are disabled on our Firebase project, and event data is retained for 14 months.
- Cloudflare hosts this site and the content delivery network the App downloads its lessons and artwork from. It sees the request and the device IP, and never an answer.
- Meta Platforms receives the standard app events described above, plus the advertising identifier if you allowed tracking, for measuring and targeting our advertising campaigns.
- TikTok receives the same kind of events and diagnostics, plus the advertising identifier if you allowed tracking, for the same purpose, while we have its SDK switched on.
- AppsFlyer is a reserve attribution service. While it is off it receives nothing. If we switch it on, it receives install information and the device data listed above, and the advertising identifier only if you allowed tracking.
None of the advertising services receives your gender, age bracket, referral answer, other answers about yourself or your feed, study link tap events, your progress on the path, or your subscription details beyond the purchase events described above.
Data Retention
The copies of your progress and answers on your device are retained for as long as you keep the App installed. Profile, then Delete my data, clears those local copies, including gender, age bracket and referral source, immediately and permanently. It does not erase analytics events or the referral property already held by Google, data held by the other providers above, or the identifier in the device keychain. For those requests, see Your Rights. Analytics events are retained by Google for 14 months. Subscription records held by Apple and RevenueCat, and app events held by Meta, TikTok and AppsFlyer, are retained under those companies' own policies.
Your Rights
Depending on where you live, you may have rights to access, correct, export or erase personal data held about you, and to object to its use for advertising. You can erase the local copies of your progress and answers from Profile at any time. You can withdraw tracking permission at any time in iOS Settings. For the analytics, subscription and advertising data described above, write to [email protected], best from Profile, then Support, so that the email carries your installation's identifier. We will delete the analytics data tied to it, including recorded onboarding answers, referral source and study link taps, and ask our providers to do the same where they allow it.
Children's Privacy
Peakful is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, contact us and we will act on it.
Legal Information & Contact
Provider: Friendo Apps Technologies - FZCO, a free zone company registered in Dubai, United Arab Emirates. Contact: [email protected].
Changes to This Policy
We may update this policy as the App changes. Material changes will be reflected here with a new "last updated" date, and where the change affects what is processed, the App will say so before the change takes effect.