Peak

Privacy Policy

Effective October 28, 2026

Peak is a journal for your training and your meals. This policy explains what Peak collects, why, who receives it, how long it is kept, and your choices.

Health data has its own page: the Consumer Health Data Privacy Policy.

On this page
  1. Who we are
  2. What stays with you
  3. The AI meal scan
  4. Your subscription
  5. Crash reports
  6. What our server keeps
  7. Who receives data
  8. Why we use data, and for how long
  9. No ads, no selling, no tracking
  10. Your choices and rights
  11. International transfers
  12. Who Peak is for
  13. Security and breaches
  14. Changes to this policy
  15. Contact us

1Who we are

Peak is made by its developer in Cairo, Egypt, the seller named on Peak's App Store page, who decides how your personal data is used and is its controller under privacy law. "We" means Peak's developer. Write to us at peak@edgemind.dev.

2What stays with you

Peak has no accounts. Your name, your look, your exercises and your meals, with their photos, are saved on your iPhone and, when iCloud is on for Peak, in your own private iCloud, which we can't read. Our server keeps no copy. Delete one from its card in Progress, or everything with Delete all data in Settings.

3The AI meal scan

With Peak Premium, the free trial included, Peak estimates a meal's calories, protein, carbs and fat from a photo you choose. Our AI provider is Anthropic, PBC, the company that makes Claude. If we change provider, we update this policy first.

Peak asks for your consent before it reads your first photo, and you can turn AI photo reading off in Settings at any time. When you tap Read my meal, a smaller copy of the photo, without its location, goes through our server to Anthropic. Anthropic never gets your name, your email or any ID for you, works as our processor, and may not train its models on your photos. Estimates can be wrong, so check them.

4Your subscription

Apple takes payment, and we never see your card. RevenueCat manages subscriptions as our processor: it gives each copy of Peak a random ID, and receives Apple's receipt, your purchases and basic device details. Our server uses that ID to check Peak Premium and count your meal scans.

5Crash reports

When Peak crashes, it sends a crash report to Crashlytics, a Google Firebase service, so we can fix the problem. It holds where in Peak's code the crash happened, the error, the time, Peak's version, your device's model, iOS version and free storage, whether it is jailbroken, and random IDs that Firebase creates for this copy of Peak. Peak adds no name, email, meal, photo or exercise, and crash reports can't be turned off. Peak collects no analytics and sends no notifications.

6What our server keeps

Peak's server runs on Google Firebase. Under RevenueCat's random ID, never a name or an email, it keeps your AI consent and its date, where your subscription stands, the meal scans used in each period, and a short log of each scan and consent change. Firebase App Check confirms each request comes from the real Peak app, and Google Cloud logs each request with its IP address. The server never keeps a photo, a meal or an exercise.

7Who receives data

CompanyWhat for
AnthropicThe AI meal scan, as our processor.
GooglePeak's server, app security and crash reports, as our processor under the Google Cloud and Firebase data processing terms, and our mailbox. See Privacy and Security in Firebase.
RevenueCatSubscriptions, as our processor. See RevenueCat's privacy policy.
ApplePayments, iCloud and App Attest, under Apple's privacy policy.
CloudflareHosts these pages, which set no cookies and run no scripts, and forwards your emails to us, under Cloudflare's privacy policy.

Our processors protect your data at least as well as this policy. We may also disclose data when the law requires it, or to protect people or Peak. If Peak moves to a new owner, your data moves with it under this policy, and we say so here first.

8Why we use data, and for how long

DataWhy, and our legal reasonHow long
What you save in PeakTo give you the app (contract)Until you delete it
Meal photos sent to AnthropicTo estimate the meal (your consent)Up to 30 days, or 2 years if Anthropic's safety systems flag them, and their safety scores up to 7 years
Your subscription and scan countsTo provide Peak Premium (contract), and to prevent abuse (legitimate interest)While we need them, or until you ask us to delete them
Scan logs, App Check and request logsTo fix problems and keep the server safe (legitimate interest)Up to 30 days
Crash reportsTo find and fix crashes (legitimate interest)90 days, then Google starts deleting them
Emails you send usTo answer you and keep a record (legal obligation, legitimate interest)As long as we need them for that

You never have to give us anything to use Peak, except a photo and Peak Premium for the meal scan. The AI only estimates, and makes no decision about you. We may keep data longer when the law requires it.

9No ads, no selling, no tracking

Peak shows no ads, sells no data, shares none for advertising, and never uses health or fitness data for marketing. It doesn't track you across other apps or websites, so Peak and these pages respond to a Do Not Track signal no differently. We don't use your data to train AI, and Anthropic may not either.

10Your choices and rights

In Peak, you can change your profile, correct or delete a meal, delete an exercise, delete everything, and turn AI photo reading off.

By email, you can ask what we hold about you, get a copy to take with you, correct or delete it, restrict or object to its use, or withdraw your consent, for free. Peak has no accounts, so to find our server's and RevenueCat's records, send the receipt Apple emailed you for Peak Premium. Deleting data doesn't cancel your subscription: cancel it in your Apple Account settings.

We answer within one month, or within 45 days where a US state law sets that, and never treat you differently for using your rights. If we decline, you can appeal by replying to our answer. You can complain to us by email, to your data protection authority, in the UK to the ICO, or in Egypt to the Personal Data Protection Center. Nevada: we don't sell covered information. For consumer health data, see the Consumer Health Data Privacy Policy.

11International transfers

We are in Egypt, and our providers store and process data mainly in the United States, some of it elsewhere. For data from the EU, the UK and Switzerland, Google relies on the Data Privacy Framework, with Standard Contractual Clauses as the fallback, and Anthropic and RevenueCat on Standard Contractual Clauses with the UK and Swiss addenda.

12Who Peak is for

Peak is for adults aged 18 and over, and is not directed to children. If we learn a child has given us personal data, we delete it. Peak gives general wellness information, not medical advice.

13Security and breaches

Data travels over encrypted connections, only our server can read its records, and Peak's AI key never leaves it. No system is perfectly secure. If a breach affects your data, we tell the authorities the law requires, within 72 hours where it sets that limit, and tell you without undue delay, never later than 60 days after we find it.

14Changes to this policy

We post every change here before it takes effect, with a new date at the top. For a material change, such as a new kind of data or a new AI provider, we also ask for your consent in the app where the change or the law requires it.

15Contact us

Peak's developer, Cairo, Egypt. Email peak@edgemind.dev. Our replies may come from a different address. For help with the app, see Peak Support.