Privacy Policy

1. What Peekuin does

Peekuin lets you look up a public Instagram username and see which accounts that profile has recently followed, presented in chronological order. You can save profiles to a watchlist and receive a notification when a saved profile follows someone new.

Peekuin does not ask for, store, or use your Instagram credentials, and it does not sign in to Instagram on your behalf or on anyone else's. We never post, follow, message, or take any other action on Instagram.

2. Information we collect

• Account information: your email address and a securely hashed password, or an Apple sign-in identifier if you use Sign in with Apple. A display name is optional.
• Tracked profiles: the public Instagram usernames you search for or add to your watchlist, together with the results we retrieved and the time of each check.
• Subscription data: transaction and entitlement records from Apple confirming whether your subscription is active. We never receive or store your payment card details.
• Device & diagnostic data: device model, operating system version, app version, language, crash reports, and performance diagnostics.
• Usage analytics: anonymous, aggregated information about which features are used and how often, so we can improve the app.
• Support correspondence: the contents of any message you send us, and the address you send it from.
• Push notification tokens: if you enable alerts, the device token needed to deliver them.

We do not collect your contacts, your photo library, your precise location, or your Instagram account credentials.

3. Public Instagram data

Peekuin only ever reads information that a public Instagram profile already makes visible to anyone on the internet. If an account is set to private, its following activity is not publicly available and Peekuin cannot and will not retrieve it.

Information about a public profile that we retrieve on your behalf is associated with your account so that you can revisit past results and receive alerts. It is not sold, published, or shared with other users.

If you are the owner of a public Instagram profile and would like to raise a concern about data relating to your account, email us at support@peekuin.com.

4. How we use information

• To provide the core function of the Service: retrieving, ordering, and displaying public follow activity.
• To create and maintain your account and verify your subscription status.
• To deliver the alerts you have switched on.
• To save your activity history so you can revisit earlier results.
• To diagnose crashes, fix bugs, and improve performance and reliability.
• To respond to your support requests.
• To detect, prevent, and investigate abuse, fraud, or security incidents.
• To comply with legal obligations and enforce our Terms of Service.

We do not use your information for advertising profiling, and we do not sell it.

5. Legal bases (GDPR)

Where the EU or UK General Data Protection Regulation applies, we process personal data on the following bases:

• Performance of a contract — to deliver the Service you signed up for, including account management and subscription entitlement.
• Legitimate interests — to keep the Service secure, prevent abuse, and improve it through aggregated analytics.
• Consent — for push notifications and any optional analytics you agree to. You may withdraw consent at any time.
• Legal obligation — where we must retain or disclose information to comply with applicable law.

6. Sharing & disclosure

We do not sell, rent, or trade your personal information. We share it only in these circumstances:

• Service providers that operate infrastructure on our behalf — including Supabase for database and authentication hosting, and Apple for app distribution, push notifications, and payments — under contractual confidentiality and data-protection obligations.
• Legal and safety — where required by law, court order, or a valid request from a public authority, or where necessary to protect the rights, safety, or property of Peekuin, our users, or the public.
• Business transfers — in connection with a merger, acquisition, financing, or sale of assets, in which case this Policy will continue to apply to the transferred information.

7. Data retention

We keep personal information only for as long as it is needed for the purposes described in this Policy:

• Account data — for as long as your account is active.
• Activity history and tracked profiles — until you delete them from the app, or until your account is closed.
• Diagnostic and crash data — typically up to 12 months.
• Support correspondence — typically up to 24 months.
• Transaction records — for as long as required by applicable accounting and tax law.

When a retention period ends, we delete the information or irreversibly anonymise it.

8. Data security

Information is encrypted in transit using TLS and encrypted at rest by our hosting provider. Passwords are stored only as salted hashes and are never readable by us. Access to production systems is restricted to the small number of people who need it, and is protected by multi-factor authentication.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we become aware of a breach affecting your personal data, we will notify you and the relevant authorities where the law requires it.

9. Children's privacy

The Service is not directed to children under 13, or under the minimum age required by the law of your country. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it promptly.

10. International transfers

We operate internationally, and your information may be processed and stored in countries other than the one you live in, including in the United States and the European Union. Where we transfer personal data out of the EEA or the UK, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

11. Your rights & choices

Depending on where you live, you may have the following rights:

• Access — request a copy of the personal data we hold about you.
• Correction — ask us to correct information that is inaccurate or incomplete.
• Deletion — ask us to delete your personal data and close your account.
• Portability — request a machine-readable export of the data you provided to us.
• Objection & restriction — object to, or ask us to restrict, certain processing.
• Withdraw consent — where processing relies on consent, withdraw it at any time.
• Complain — lodge a complaint with your local data protection authority.

To exercise any of these rights, email support@peekuin.com from the address associated with your account. We respond within 30 days.

12. Third-party services

The Service relies on the following third parties, each of which handles data under its own privacy policy:

• Apple — app distribution, Sign in with Apple, in-app purchases, and push notification delivery.
• Supabase — database, authentication, and storage hosting.

Links from our website or app to other sites are provided for convenience. We are not responsible for the privacy practices of sites we do not operate.

13. Cookies & website analytics

The Peekuin app does not use cookies. Our website uses a small amount of local browser storage to remember your language preference. If we enable website analytics, it will be configured to collect aggregated, non-identifying measurements only, and any cookies used for that purpose will be disclosed here.

14. Notifications & permissions

Push notifications are optional. iOS will ask for your permission before Peekuin can send any, and you can withdraw it at any time in Settings → Notifications → Peekuin. Turning notifications off does not affect the rest of the app.

15. Data deletion & account closure

You can delete individual tracked profiles and history entries directly in the app at any time.

To close your account entirely, email support@peekuin.com from your account address and ask us to delete it. We complete deletion requests within 30 days, except where we are required by law to retain certain records, such as transaction history for tax purposes. Deleting your account does not automatically cancel an active Apple subscription — cancel that separately in your Apple ID settings.

16. Changes to this Policy

We may update this Policy to reflect changes to the Service or to the law. When we do, we will revise the "last updated" date at the top of this page. If a change materially affects how we handle your personal data, we will give you prominent notice in the app or by email before it takes effect.