Privacy

Peepful is a private notebook about the people in your life. Most of what it holds is about other people, written by you. This page covers what Peepful keeps, where it lives, who else handles it, and how to take it back.

What Peepful keeps

• Your account: your username and email address, a hashed form of your password (never the password itself), any passkeys you add, your name and the names you go by, and other personal details.
• What you record: the people you add and the facts, notes, photos, tags, circles and check-ins you attach to them.
• Conversation logs: the notes you type, the emails you forward to your Peepful address, and the chat exports (WhatsApp, LinkedIn) you import.
• Housekeeping: when you sign in and from which address and browser (to lock the door after repeated failed attempts), the API tokens you mint for scripts, and any AI assistant you connect.

Where it lives and how it is protected

Peepful runs from Tokyo, Japan: the app, its database, and the storage for photos. Notes and conversation logs are encrypted at rest with a key that is kept outside the database. Everything travels over HTTPS. Each account's data is walled off from every other at the database level, so one account cannot read another's.

Who else handles your data

Only services doing something you asked for, and only that:

• AI processing. When you log a conversation or upload a photo, its text or image is sent to an AI model for analysis, so the people and facts in it can be picked out for you. We only use models and providers that have Do Not Retain clauses specified in their Terms of Service. Your data won't be used for training of AI models.
• Email. A third party provider delivers the email Peepful sends (address verification, password resets) and receives any notes you email in.
• Connected AI assistants. Only if you connect one. Whatever the assistant reads through Peepful goes to the company that runs it (Anthropic, for Claude). You can disconnect it at any time from your profile.
• Push notifications. If you use the iOS app, Apple delivers its notifications, and Peepful keeps your device's notification token to send them.
• Analytics. Peepful runs its own analytics on its own server: page views, referrers, and browser and device type. No advertising trackers, and nothing goes to an analytics company.

Nobody else. Peepful shows no advertising and does not sell or share your data.

Cookies

One cookie keeps you signed in and one protects forms from being submitted by other sites. There are no advertising or third-party cookies.

Your choices

• Everything you record can be edited or deleted in the app, and deleting a person removes what you recorded about them.
• API tokens can be revoked, and connected assistants disconnected, from your profile.
• A copy of everything you have recorded is available through the API, using a token from your profile.

Changes to this page

When this page changes, the change is noted on the What's new page and the date at the top moves.