Privacy Policy

Peekafold (the iOS app for iPhone, iPad and iPhone Duo, and the website peekafold.com) is made by Huynh Gia Bao Nguyen, an individual developer based in Vietnam (“we”, “us”). We decide how the information described here is used, so we are its controller.

• Privacy questions and requests: privacy@peekafold.com
• Help with the app: support@peekafold.com

• No ads, no tracking, no third-party analytics. We do not sell anyone’s information or share it for advertising.
• Guest by default. A child plays without an account. As a guest, the app sends nothing to us or to anyone else on its own: no request at launch, no analytics, no crash reports. The only connections are the ones a grown-up starts behind the parental gate, such as a purchase through Apple.
• Your child’s name never leaves the device. It is used only for the name plate on the book’s cover.
• Grown-ups decide. Sign-in, purchases, links out of the app and notifications sit behind a parental gate.
• Offline first. Every book works without a connection.
• You can delete everything. A family account can be deleted from the grown-ups corner in the app, at any time.

When your child plays as a guest, everything stays on the device: the first name you may type for the cover’s name plate, the avatar picture, the stickers earned, which pages were played, a short play history for the grown-ups corner, and settings such as sound, music and the bedtime timer.

We do not receive any of it. Deleting the app deletes it, and Reset progress in the grown-ups corner clears it.

Like every app, Peekafold is downloaded and updated through the App Store. Apple handles that under its own privacy policy; we receive only the anonymous, aggregated statistics Apple gives every developer (for example, the number of downloads per country).

A grown-up can choose to sign in, behind the parental gate, with Sign in with Apple or Sign in with Google. The account exists only to keep progress in step across your family’s devices. If you sign in, we store:

• the email address Apple or Google gives us (with Apple, you can choose a private relay address that hides your real one). We do not ask Apple for your name;
• with Google, the name and profile picture link that Google includes with every sign-in. Our sign-in provider keeps them with the account; the app does not use or show them;
• a random user ID for the account, and the times the account was created and last signed in;
• your reader’s progress: the stickers earned, the pages played, the last 30 days of play counts, the stickers on the cover, and an avatar picture ID such as “foldy” or “cat”. Never the child’s name, age, photo or voice;
• for Sign in with Apple, a token from Apple that lets us revoke the sign-in when you delete the account, as Apple requires.

When a device signs in or syncs, our providers also process technical data needed to run and secure the service, such as the IP address, the time and the app version. It is kept in short-lived security logs, not in your account.

We use this information only to provide the account and sync it. Settings, purchases and the last book opened are not synced.

Notifications are off unless a grown-up turns on News about new books in the grown-ups corner. Until then, the notification software in the app is not even started and makes no connection.

If you opt in, our notification provider, OneSignal, stores a push token (Apple’s address for this device), a subscription ID, and device details its software sends to deliver messages: device model, iOS version, app version, language and time zone. OneSignal may also see the device’s IP address when it connects. If you are signed in, the subscription is linked to the account’s random user ID, never to an email or a name. No location is collected: the location module is removed from the app.

We send at most two messages a month, in the daytime, written for grown-ups: new and seasonal books. We never send messages meant to pull a child back to the app, and never streaks or countdowns.

You can turn news off in the grown-ups corner or in iOS Settings at any time. Turning it off stops the messages and withdraws your consent; deleting the account also deletes the OneSignal subscription.

Peekafold Pro and other books are sold through Apple’s In-App Purchase, only behind the parental gate. Apple processes the payment under its own privacy policy: we never see your card, name or billing address.

The app checks what you own with Apple, on the device. Restoring purchases works through your Apple Account, with or without a family account. If we later confirm purchases on our server, we will store only Apple’s transaction details for your account (product, status, expiry date), never payment information, and update this policy first.

Messages to support@peekafold.com, privacy@peekafold.com or hello@peekafold.com reach a mailbox we read ourselves. We use your message and your email address only to answer you and keep a record of the request, and we keep them for up to two years after the conversation ends, unless the law requires longer.

Please do not send us information about your child. We never need it to help you.

peekafold.com uses no cookies, no analytics and no tracking or advertising scripts. Its fonts, pictures and videos are served from the site itself, not from third parties.

If you join the waitlist, we store your email address, the language of the page, where you signed up and the time. We use it only to send you the launch announcement (and, at most, one reminder), and we never share it. We delete the waitlist within 12 months after the launch announcement, or sooner if you ask: reply to our email or write to privacy@peekafold.com. The waitlist is for grown-ups: please do not sign up a child.

Our hosting provider (Cloudflare) processes technical data such as IP addresses to deliver the site and protect it from abuse, in short-lived logs.

We use a small number of providers who process information on our behalf, only to run the service, under data processing terms that oblige them to protect it and use it only on our instructions:

• Supabase: database, sign-in and storage for family accounts, synced progress and the website waitlist. Our project runs in Singapore;
• OneSignal (United States): notifications, only after a grown-up opts in;
• Apple: the App Store, In-App Purchase, Sign in with Apple and the delivery of notifications;
• Google: Sign in with Google, only if you choose it, and the mailbox our email addresses forward to;
• Cloudflare: hosting for this website and the routing of email sent to our addresses.

These providers may process data outside your country, including in the United States and Singapore. Where the law requires safeguards for international transfers (for example the GDPR, the UK GDPR or Vietnam’s Personal Data Protection Law), we rely on the providers’ standard contractual clauses or other lawful transfer mechanisms and complete the assessments the law requires.

• Family account and synced progress: until you delete the account. Deletion removes it from our database at once; our database provider’s backups roll over and no longer contain it within 30 days.
• Notification subscription: while news is on; deleted with the account.
• Security logs kept by our providers: a short time, usually days and never more than 90 days.
• Waitlist emails: until 12 months after the launch announcement, or until you ask us to delete them.
• Emails to us: up to two years after the conversation ends.
• On the device: until you use Reset progress or delete the app.

In the app: open the grown-ups corner (the paper clip), answer the grown-up question, then choose Family account → Delete account and confirm. This deletes the account and everything synced to it. We also ask Apple to revoke the Sign in with Apple token and ask OneSignal to delete the notification subscription; if one of those requests fails, the account is still deleted, and you can write to us to finish the job. What is on the device stays there until you use Reset progress or delete the app.

Without the device: write to privacy@peekafold.com from the email address of the account, and we will delete it within 30 days.

Peekafold is made for children aged 5 and under and is listed in the App Store Kids Category. It is designed to follow Apple’s Kids Category rules, the U.S. Children’s Online Privacy Protection Act (COPPA), the GDPR and UK rules for children (including the UK Age Appropriate Design Code) and Vietnam’s rules for children’s data.

• A child never signs in and never sees a form, a link out of the app or a purchase: all of those sit behind the parental gate.
• The only personal detail a child might type, their first name for the cover, stays on the device.
• The app contains no ads, no third-party analytics, no chat and nothing shared with other people.
• The family account and news are set up by a grown-up, about the grown-up’s own Apple or Google account.

Parents and guardians can ask at any time to review the information connected to their family, to have it deleted, and to stop any further collection: use the grown-ups corner or write to privacy@peekafold.com. If you believe a child has sent us personal information, tell us and we will delete it.

Wherever you live, you can ask us to access, correct, delete or export the information we hold about you, and to stop using it. Depending on where you live, the law gives you further rights:

• EU, EEA and UK: the rights of access, rectification, erasure, restriction, portability and objection, and to withdraw consent at any time. You can complain to your local data protection authority.
• California and other U.S. states: the rights to know, delete and correct, and not to be discriminated against for using them. We do not sell or share personal information as those terms are used in California law, and we do not use it for targeted advertising or profiling.
• Vietnam: the rights under the Personal Data Protection Law, including to be informed, to consent and withdraw consent, to access, correct, delete and restrict processing, and to complain.

Legal bases (GDPR and UK GDPR): the family account and sync are needed to provide the account you asked for (contract); news and the waitlist rely on your consent; security logs, answering your emails and keeping records of requests rely on our legitimate interest in running a safe service.

To use any of these rights, write to privacy@peekafold.com. We will answer within 30 days, and may ask you to confirm the request from the account’s email address so we never give your information to someone else.

Information travels encrypted (HTTPS). In our database, row-level security lets each family reach only its own rows, and staff tools see only totals, never a family’s data. Sign-in sessions are kept in the iOS Keychain. Only the developer has administrative access, protected by two-step sign-in.

No system is perfectly secure, but we keep what we hold to the minimum, so there is little to lose. If a breach affects your information, we will tell you and the authorities as the law requires.

If we change this policy, we will update the date at the top of this page. If a change affects how we use information already collected, we will tell signed-in grown-ups in the app before it applies and, where the law requires it, ask for consent again.

Questions about privacy, or a request: privacy@peekafold.com. Help with the app: support@peekafold.com.