Try free

Privacy policy

Last updated 26 September 2026

1. Introduction

This Privacy Policy explains how Peeka ("we") collects, uses, stores, shares, and protects your personal data when you use our website and services at peekaai.com.

We are committed to complying with the applicable personal data protection laws and applicable international data protection standards. This policy applies to all users of Peeka, including guests, registered users, and referral program participants.

2. Data Controller

The data controller responsible for your personal data is:

Peeka
Email: contact@peekaai.com

For data protection inquiries, contact our Data Protection Officer at contact@peekaai.com.

3. Data We Collect

Account Data: When you register, we collect your email address, a hashed version of your password (we never store plaintext passwords), and your registration date.

Payment Data: Payments are processed by Stripe. We do not store your credit card details. We retain transaction records including purchase amounts, dates, plan type, and Stripe transaction identifiers for billing and accounting purposes.

Usage Data: We collect data about your use of the service, including videos generated, text prompts submitted, credits purchased and consumed, and timestamps of activity.

Technical Data: We automatically collect technical information including your IP address, browser type and version, device type, operating system, language preference, and referring URL.

Guest Data: If you use Peeka without registering, we collect a unique guest identifier, your IP address, and usage count (number of free videos generated). Guest data is persisted in our database to enforce usage limits.

Asset Library Data: If you upload files (images, videos, or audio) to the asset library, we store the uploaded files and associated metadata such as file name, file type, upload date, and file size.

Photos for One-Tap Effects: When you add a photo to make a clip with a one-tap effect (for one person), the photo is used only to make that clip. It is processed in memory and sent to our video model provider to generate the clip; we don't keep it on our servers, and the provider's working copy is deleted within twenty-four (24) hours. The finished clip is kept in your account (or, for guests, as described under Guest Data). Photos you add on Create are checked and saved to your photo library so you can reuse them, and registered with our video model provider so it can use them (you can delete them there at any time, which also removes the provider's copy); photos you add to your Studio cast or after face verification are stored as described in this policy.

Photos of People in Studio and Images: You may use photos of yourself or of people who agreed to appear. When a photo from your Studio cast, or an image you made in Images, is used to make a clip, a working copy is registered with our video model provider so it can use it. The provider's working copy is deleted within eight (8) days of its last use (a Studio preview can be made Full HD for up to seven days), or within about an hour after you delete that cast item.

Clips Made with a Friend (Photos of Two People): Some effects put two people in one clip. If you invite a friend, the photo you upload for the invite is stored until your friend accepts, you withdraw the invite, or seven (7) days pass, and is then deleted. Your friend's photo is used only to make that clip: it is sent to our video model provider, we don't keep it on our servers, and the provider's working copy is deleted within twenty-four (24) hours. We re-encode uploaded photos and remove embedded metadata such as location. The finished clip is kept in the inviter's account; the invited friend can delete it permanently from the invite page at any time. These clips can be shared by link but cannot be posted on the public wall. If you upload another person's photo yourself, you must have their permission.

Product Analytics: We measure how the service is used with our own first-party analytics: page views and a small set of product events (for example, "clip made" or "invite sent"), tied to a random device identifier stored in your browser. When you are signed in, these events and the device identifier are also linked to your account; we use that link for our own statistics and to prevent referral abuse (for example, one person inviting themselves from a second account). We do not use third-party advertising trackers. Raw events and device-to-account links are kept for up to 180 days.

Ask Peeka (in-app assistant): Ask Peeka is an AI assistant that helps you choose effects, write scenes, prepare Studio forms and understand your clips and credits. It cannot make clips, spend credits or change your account; you do that yourself on the page it opens. To answer, it uses the message you type and the page details shown as "Sees" chips (for example the effect you are viewing or a clip's status), and, if you leave the Account chip on, your balance and the status of your recent clips. It never receives your photos. Your message and this context are sent to our AI model provider, which processes them on our behalf only to produce the reply. If you are signed in, we keep the chat for thirty (30) days so you can come back to it, with email addresses, phone numbers and card or bank numbers removed; it is then deleted automatically, and you can delete a chat at any time. Chats are deleted when you delete your account. If you are not signed in, we do not keep the chat. Answers can be wrong; prices, balances and refund states shown in the chat's cards come directly from your account.

Connected AI Assistants and API: If you connect an AI assistant (such as Claude or ChatGPT) or use an API key, we store the connection (which app, when you approved it, and the daily credit limit you set), a record of the credits each connection spends, and a record of each photo consent you give through it (the statement you agreed to, the time, your IP address and browser). These records are kept while your account exists and are deleted with your account. Assistants never receive your password or payment details, and you can disconnect them at any time.

Referral Data: If you participate in our referral program, we collect and store your unique referral code, referral relationships (who referred whom), referral reward records, and referral link usage. Referrers can see masked email addresses of their referred users (e.g., j***e@gmail.com). Full email addresses are never shared with referrers.

Cookie Data: We use cookies and similar technologies as described in our Cookie Policy.

Facial Information: Only if you choose to use real-person verification ("Verify it's you"). See Section 3A below.

3A. Facial Information Processing (Real-Person Verification)

This section applies only if you choose to use the optional "Verify it's you" feature, which lets you reuse your own face in videos without adding a photo each time. You don't need it to use ordinary photos of yourself. If you do not use it, we do not collect Facial Information from you through this feature, and refusing does not affect any other part of the service.

(a) Purpose and business scenario. The feature lets you verify your face once and then use it as a reference in any clip or film you create in your own Peeka account, without adding a photo each time. We use real-person verification so that you, and only you, can use your verified face. The feature is optional: ordinary photos of yourself, or of people who agreed to appear, can be used without it.

(b) Who processes it. Peeka is responsible for this processing. The face check and the storage of your face reference are carried out on our behalf by BytePlus Pte. Ltd. (Singapore), our technical service provider for video generation. BytePlus does not use your Facial Information for any purpose unrelated to our instructions.

(c) What we collect. "Facial Information" means: the facial images and short video captured during the face check; the facial recognition feature information extracted from them; the Reference Image described below; and the photos of yourself that you add after verification. We re-encode the photos you add and remove embedded metadata such as location before storing them.

(d) Real-person verification. Detection and comparison technology is used to verify that the person in front of the camera is a real, live person, and not a photo, video replay, mask or other non-live medium.

(e) Same-person authentication. Each photo you add is compared, using detection and comparison technology, with the facial features captured during your face check to determine whether it depicts the same person. Photos that do not match, or that show more than one face, are rejected. This comparison is not made against any government, public security or other identity database and is not a real-name identity check.

(f) Reference Image. After a successful face check, an image of your face is retained as the Reference Image for later same-person comparisons.

(g) How long we keep it, and deletion. We keep your Facial Information until you delete it, or until twelve (12) months have passed since you last used the feature (your last verification, photo upload or video made with your verified face), whichever comes first; it is then deleted automatically. You can delete it at any time with "Delete my face data" on the verification page or in Account, Profile, and it is also deleted when you delete your account. Deletion removes the photos stored on our servers immediately, stops any further use of your verified face, and instructs BytePlus to delete your Reference Image and photos; if BytePlus cannot be reached at that moment, we keep retrying until the deletion is complete. Photos that fail the same-person check are deleted from our servers straight away. Videos you have already made are not deleted automatically; you can delete them from your library.

(h) Consent. We process Facial Information only with your explicit consent, which you give by ticking a box (never pre-ticked) before the face check starts. You can decline. We keep a record of your consent and of its withdrawal (the version of the notice, the time, the method, your IP address and browser) for up to three (3) years so that we can demonstrate compliance; this record contains no Facial Information.

(i) Limits on use. We do not sell your Facial Information or share it with anyone other than BytePlus as described above. We do not use it for profiling, behavioural analysis, advertising or any purpose other than real-person verification and same-person authentication for this feature, and we never let another account use your verified face. You must be at least eighteen (18) years old to use this feature and may verify only your own face.

(j) Your rights. You may access, obtain a copy of, correct, supplement, delete or port your Facial Information, and you may withdraw your consent at any time. Withdrawing consent (for example with "Delete my face data") stops the processing and deletes your Facial Information as described above. Please send any request directly to us, not to BytePlus, at contact@peekaai.com. We will respond within thirty (30) days.

(k) Security and location. Facial Information is sent over encrypted connections and stored in access-restricted locations, never at public web addresses. Photos are made available to BytePlus only through private, short-lived links that stop working once the photo has been processed.

4. How We Use Your Data

  • Service Delivery: To provide AI video generation, manage your account, process your inputs, and deliver generated content.
  • Billing and Payments: To process credit purchases, maintain transaction records, and manage your credit balance.
  • Abuse Prevention: To detect and prevent fraudulent activity, enforce usage limits, and protect the security and integrity of the service.
  • Content Safety: To check what you ask us to make against our Acceptable Use Policy before anything is made (the text you type is sent to our AI model provider, which processes it on our behalf only to classify it), to review reports, and to act on violations, including telling the competent authorities where the law requires it.
  • Referral Tracking: To operate the referral program, attribute referrals, calculate referral rewards, and prevent referral abuse.
  • Analytics: To understand how the service is used, identify trends, and improve our platform.
  • Communications: To send service-related notices, respond to support requests, and notify you of material changes to our terms or policies.
  • Legal Compliance: To comply with applicable laws, regulations, and legal processes, including applicable personal data protection requirements.

5. Legal Basis for Processing

We process your personal data on the following legal bases under applicable data protection law:

  • Contract Performance: Processing necessary to provide the service you have requested, including account management, video generation, billing, and credit management.
  • Legitimate Interest: Processing necessary for our legitimate interests, including fraud prevention, service improvement, analytics, and platform security, where those interests are not overridden by your rights.
  • Consent: Where we rely on your consent, such as for non-essential cookies and optional communications. You may withdraw consent at any time.
  • Legal Obligation: Processing necessary to comply with applicable laws and regulations, including tax reporting, anti-money laundering, and law enforcement requests.

6. Third-Party Services

We share data with the following categories of third-party service providers, each acting as a data processor on our behalf:

Stripe (Payment Processing): When you make a purchase, your payment information is sent directly to Stripe, Inc. for processing. Stripe is PCI DSS compliant. We do not have access to your full card details. See Stripe's Privacy Policy.

AI Model Providers (Image Generation): When you use the AI image generation feature, your text prompt is sent to third-party AI model providers to generate reference images. We do not share your email address, account information, or payment data with these providers.

AI Model Providers (Video Generation): Your text prompts and uploaded reference images are sent to third-party AI model providers for video generation. We do not share your email address, account information, or payment data with these providers.

IP Geolocation: Our video and image model providers are only available in certain countries and regions, so we look up the country of your IP address (not your precise location), using a local copy of a public database, when you create something and when you open Peeka while signed in. If you are signed in, we store the country code of your latest visit on your account, with the time it was recorded, so that the same rule applies when you create through a connected AI assistant or the API. For guests we don't store the result. IP Geolocation by DB-IP (licensed under CC BY 4.0).

Amazon Web Services (Hosting): Our server infrastructure is hosted on AWS. All data stored and processed on our servers resides within AWS infrastructure. See AWS Privacy Policy.

7. Data Sharing

We do not sell your personal data to third parties. We share your data only in the following circumstances:

  • Service Providers: With the third-party processors described in Section 6, solely for the purposes of providing the service.
  • Legal Requirements: With law enforcement authorities or government agencies when legally required to do so, or when we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.
  • Business Transfers: In connection with a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction. We will notify you of any such transfer.

8. International Data Transfers

Our servers are located in Singapore (AWS Lightsail). If you are accessing the service from outside Singapore, your data will be transferred internationally. We ensure appropriate safeguards are in place for such transfers in accordance with applicable data protection law, including contractual commitments with our service providers to maintain adequate data protection standards.

9. Data Retention

We retain your data for the following periods:

  • Account Data: Retained for as long as your account is active. Upon account deletion, your data is removed within a reasonable timeframe, subject to legal retention obligations.
  • Generated Videos and Assets: Retained until deleted by you or upon account deletion. A clip you delete goes to "Recently deleted" for thirty (30) days so you can restore it, and is then permanently deleted with its files. You can also delete it permanently straight away.
  • Photos for One-Tap Effects: Not stored; used only to make the clip.
  • Photos You Add on Create: Kept in your photo library until you delete them or your account.
  • Working Copies with Our Video Model Provider: For one-tap effect photos, deleted within twenty-four (24) hours; for Studio cast photos and images from Images used in a clip, within eight (8) days of their last use; for photos in your photo library, when you delete them or your account.
  • Ask Peeka Chats: Thirty (30) days for signed-in users; not kept for guests.
  • Studio Projects and Cast: Your Studio projects (including the details you type, such as a business name or phone number) and the photos you add to your Studio cast are kept until you delete them or your account. When you delete a project or a cast item, it is removed from Studio straight away and permanently deleted from our servers, with its photos, thirty (30) days later. Clips made in Studio stay in My clips, where you can delete them as described above.
  • Invite Photos for Clips Made with a Friend: Deleted when the invite is used, withdrawn, or expires (after seven (7) days at most).
  • Guest Data: Your guest identifier, IP address and usage count, and the clips and images you made as a guest, are kept for ninety (90) days from your last activity as a guest, then automatically deleted.
  • Server Logs: Logs of requests to our servers and to the API (without image or video content) are kept for up to twelve (12) months for security, fraud prevention, billing reconciliation and debugging.
  • Content Checks and Violation Records: Before anything is made, we check descriptions and other text against our Acceptable Use Policy. When a request is blocked, held or flagged, or a clip is reported, we keep a record: an excerpt of the text with email addresses, phone numbers and card numbers removed, the category, the decision, when it happened and the account or guest identifier. Flagged requests that were allowed are kept for thirty (30) days; blocked requests, reports and our decisions for twelve (12) months. For the most serious cases (content that sexualises children, supports terrorism or gives weapon instructions) we also keep the original text and, after a takedown, a restricted copy of the clip, until the matter is closed. These are legal records: we keep violation records for twelve (12) months after you delete your account, with your account anonymized. Requests that pass the check are only counted, not stored.
  • Transaction Records: Retained for the period required by applicable tax and accounting laws (for tax invoices, at least five (5) years), including after you delete your account. When an account with invoices is deleted, the account itself is anonymized and only the invoices are kept.

10. Your Rights

Under applicable data protection laws, you have the following rights:

  • Right of Access: You may request a copy of the personal data we hold about you.
  • Right to Rectification: You may request correction of inaccurate or incomplete personal data.
  • Right to Erasure: You may request deletion of your personal data, subject to legal retention requirements.
  • Right to Restriction: You may request that we restrict the processing of your personal data in certain circumstances.
  • Right to Data Portability: You may request your personal data in a structured, commonly used, machine-readable format.
  • Right to Object: You may object to the processing of your personal data where we rely on legitimate interest as the legal basis.
  • Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.
  • Right to Complain: You have the right to lodge a complaint with the competent data protection authority if you believe your data protection rights have been violated.

To exercise any of these rights, contact us at contact@peekaai.com. We will respond to your request within thirty (30) days.

11. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

  • All data transmitted between your browser and our servers is encrypted using HTTPS/TLS.
  • Passwords are securely hashed and never stored in plaintext.
  • Access to personal data is restricted to authorized personnel on a need-to-know basis.
  • Database connections are encrypted.
  • Regular security reviews of our infrastructure and practices.

While we take reasonable steps to protect your data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

12. Children

Peeka is not intended for use by individuals under the age of eighteen (18). We do not knowingly collect personal data from minors. If we become aware that we have collected data from a person under 18, we will take steps to delete that data promptly. If you believe a minor has provided us with personal data, please contact us at contact@peekaai.com.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will notify registered users of material changes via email or a prominent notice on the platform. We encourage you to review this policy periodically.

14. Contact

If you have any questions about this Privacy Policy or our data practices, please contact us:

Peeka
Email: contact@peekaai.com
Data Protection Officer: contact@peekaai.com