Privacy Policy
Effective October 28, 2026
Peak is a journal for your training and your meals. This policy explains what Peak collects, why, who receives it, how long it is kept, and your choices.
Health data has its own page: the Consumer Health Data Privacy Policy.
On this page
- Who we are
- What stays with you
- The AI meal scan
- Your subscription
- Crash reports
- What our server keeps
- Who receives data
- Why we use data, and for how long
- No ads, no selling, no tracking
- Your choices and rights
- International transfers
- Who Peak is for
- Security and breaches
- Changes to this policy
- Contact us
1Who we are
Peak is made by its developer in Cairo, Egypt, the seller named on Peak's App Store page, who decides how your personal data is used and is its controller under privacy law. "We" means Peak's developer. Write to us at peak@edgemind.dev.
2What stays with you
Peak has no accounts. Your name, your look, your exercises and your meals, with their photos, are saved on your iPhone and, when iCloud is on for Peak, in your own private iCloud, which we can't read. Our server keeps no copy. Delete one from its card in Progress, or everything with Delete all data in Settings.
3The AI meal scan
With Peak Premium, the free trial included, Peak estimates a meal's calories, protein, carbs and fat from a photo you choose. Our AI provider is Anthropic, PBC, the company that makes Claude. If we change provider, we update this policy first.
Peak asks for your consent before it reads your first photo, and you can turn AI photo reading off in Settings at any time. When you tap Read my meal, a smaller copy of the photo, without its location, goes through our server to Anthropic. Anthropic never gets your name, your email or any ID for you, works as our processor, and may not train its models on your photos. Estimates can be wrong, so check them.
4Your subscription
Apple takes payment, and we never see your card. RevenueCat manages subscriptions as our processor: it gives each copy of Peak a random ID, and receives Apple's receipt, your purchases and basic device details. Our server uses that ID to check Peak Premium and count your meal scans.
5Crash reports
When Peak crashes, it sends a crash report to Crashlytics, a Google Firebase service, so we can fix the problem. It holds where in Peak's code the crash happened, the error, the time, Peak's version, your device's model, iOS version and free storage, whether it is jailbroken, and random IDs that Firebase creates for this copy of Peak. Peak adds no name, email, meal, photo or exercise, and crash reports can't be turned off. Peak collects no analytics and sends no notifications.
6What our server keeps
Peak's server runs on Google Firebase. Under RevenueCat's random ID, never a name or an email, it keeps your AI consent and its date, where your subscription stands, the meal scans used in each period, and a short log of each scan and consent change. Firebase App Check confirms each request comes from the real Peak app, and Google Cloud logs each request with its IP address. The server never keeps a photo, a meal or an exercise.
7Who receives data
| Company | What for |
|---|---|
| Anthropic | The AI meal scan, as our processor. |
| Peak's server, app security and crash reports, as our processor under the Google Cloud and Firebase data processing terms, and our mailbox. See Privacy and Security in Firebase. | |
| RevenueCat | Subscriptions, as our processor. See RevenueCat's privacy policy. |
| Apple | Payments, iCloud and App Attest, under Apple's privacy policy. |
| Cloudflare | Hosts these pages, which set no cookies and run no scripts, and forwards your emails to us, under Cloudflare's privacy policy. |
Our processors protect your data at least as well as this policy. We may also disclose data when the law requires it, or to protect people or Peak. If Peak moves to a new owner, your data moves with it under this policy, and we say so here first.
8Why we use data, and for how long
| Data | Why, and our legal reason | How long |
|---|---|---|
| What you save in Peak | To give you the app (contract) | Until you delete it |
| Meal photos sent to Anthropic | To estimate the meal (your consent) | Up to 30 days, or 2 years if Anthropic's safety systems flag them, and their safety scores up to 7 years |
| Your subscription and scan counts | To provide Peak Premium (contract), and to prevent abuse (legitimate interest) | While we need them, or until you ask us to delete them |
| Scan logs, App Check and request logs | To fix problems and keep the server safe (legitimate interest) | Up to 30 days |
| Crash reports | To find and fix crashes (legitimate interest) | 90 days, then Google starts deleting them |
| Emails you send us | To answer you and keep a record (legal obligation, legitimate interest) | As long as we need them for that |
You never have to give us anything to use Peak, except a photo and Peak Premium for the meal scan. The AI only estimates, and makes no decision about you. We may keep data longer when the law requires it.
9No ads, no selling, no tracking
Peak shows no ads, sells no data, shares none for advertising, and never uses health or fitness data for marketing. It doesn't track you across other apps or websites, so Peak and these pages respond to a Do Not Track signal no differently. We don't use your data to train AI, and Anthropic may not either.
10Your choices and rights
In Peak, you can change your profile, correct or delete a meal, delete an exercise, delete everything, and turn AI photo reading off.
By email, you can ask what we hold about you, get a copy to take with you, correct or delete it, restrict or object to its use, or withdraw your consent, for free. Peak has no accounts, so to find our server's and RevenueCat's records, send the receipt Apple emailed you for Peak Premium. Deleting data doesn't cancel your subscription: cancel it in your Apple Account settings.
We answer within one month, or within 45 days where a US state law sets that, and never treat you differently for using your rights. If we decline, you can appeal by replying to our answer. You can complain to us by email, to your data protection authority, in the UK to the ICO, or in Egypt to the Personal Data Protection Center. Nevada: we don't sell covered information. For consumer health data, see the Consumer Health Data Privacy Policy.
11International transfers
We are in Egypt, and our providers store and process data mainly in the United States, some of it elsewhere. For data from the EU, the UK and Switzerland, Google relies on the Data Privacy Framework, with Standard Contractual Clauses as the fallback, and Anthropic and RevenueCat on Standard Contractual Clauses with the UK and Swiss addenda.
12Who Peak is for
Peak is for adults aged 18 and over, and is not directed to children. If we learn a child has given us personal data, we delete it. Peak gives general wellness information, not medical advice.
13Security and breaches
Data travels over encrypted connections, only our server can read its records, and Peak's AI key never leaves it. No system is perfectly secure. If a breach affects your data, we tell the authorities the law requires, within 72 hours where it sets that limit, and tell you without undue delay, never later than 60 days after we find it.
14Changes to this policy
We post every change here before it takes effect, with a new date at the top. For a material change, such as a new kind of data or a new AI provider, we also ask for your consent in the app where the change or the law requires it.
15Contact us
Peak's developer, Cairo, Egypt. Email peak@edgemind.dev. Our replies may come from a different address. For help with the app, see Peak Support.