← Back to Peak

Privacy Policy

This Privacy Policy explains how Host Consult Ltd (Company No. 15138216, registered at 167-169 Great Portland Street, London W1W 5PF, United Kingdom) ("we", "us", "our") collects, uses, and protects your personal data when you use the Peak application ("Peak", "the App"). We are the data controller for the personal data described in this policy.

1. Information We Collect

Account information

• Name, email address, and password (encrypted) — provided when you register
• Username — chosen by you at registration, permanent and unique

App content

• Tasks, notes, subtasks, tags, dates, and completion status that you create within the App
• Friend connections and tasks shared between users, where you choose to use this feature

Location data (optional)

• If you choose a weather location in Settings, we store the city/coordinates you select to fetch weather forecasts. We do not collect your precise device location automatically.

Technical information

• Basic usage data necessary to operate the App (e.g. login sessions, sync timestamps)

2. How We Use Your Information

Purpose	Legal basis (UK/EU GDPR)
Creating and managing your account	Performance of a contract (Art. 6(1)(b))
Syncing your tasks across devices	Performance of a contract (Art. 6(1)(b))
Providing weather forecasts for your chosen location	Performance of a contract (Art. 6(1)(b))
Enabling friend connections and task sharing (if used)	Consent / Performance of a contract (Art. 6(1)(a)/(b))
Maintaining security and preventing abuse	Legitimate interests (Art. 6(1)(f))
Complying with legal obligations	Legal obligation (Art. 6(1)(c))

3. Third-Party Service Providers

We use the following third-party services to operate Peak. Each processes data on our behalf under their own data protection terms:

• Supabase (database, authentication, file storage) — stores your account and task data securely
• Netlify (hosting) — serves the App to your browser
• Open-Meteo (weather data) — provides weather forecasts based on the location you select; no personal data is sent to Open-Meteo beyond geographic coordinates

We do not sell your personal data to third parties, and we do not use your data for advertising purposes.

4. Data Retention

We retain your account and task data for as long as your account remains active. If you delete your account via Settings, your personal data and task content are permanently deleted from our active systems. Residual copies may persist in backups for a limited period (up to 30 days) before being permanently purged.

5. Your Rights

Under UK GDPR and EU GDPR, you have the right to:

• Access — request a copy of the personal data we hold about you (you can also export your tasks directly via Settings → Export)
• Rectification — correct inaccurate personal data (e.g. your name, via Settings)
• Erasure — request deletion of your account and associated data ("right to be forgotten")
• Restriction — request that we limit how we use your data in certain circumstances
• Data portability — receive your data in a structured, machine-readable format (JSON export available in-app)
• Object — object to processing based on legitimate interests
• Withdraw consent — where processing is based on consent (e.g. friend connections), withdraw it at any time

To exercise any of these rights, contact us at privacy@peak100.app. We will respond within one month as required by law.

You also have the right to lodge a complaint with a supervisory authority. In the UK, this is the Information Commissioner's Office (ICO), ico.org.uk.

6. International Data Transfers

Our service providers may process data in countries outside the UK/EEA. Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission and UK Information Commissioner's Office, or transfers to countries with an adequacy decision.

7. Data Security

We use industry-standard measures to protect your data, including encrypted connections (HTTPS/TLS), encrypted password storage, and row-level access controls ensuring users can only access their own data (and data explicitly shared with them via the friend-sharing feature).

8. Children's Privacy

Peak is not directed at children under 16. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, please contact us so we can remove it.

9. Cookies and Local Storage

Peak uses browser local storage (not third-party tracking cookies) to keep you signed in and to cache data such as weather forecasts for offline use. This data remains on your device and is not used for advertising or cross-site tracking.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified to you via the App or by email. The "Last updated" date at the top of this page reflects the most recent revision.

11. Contact Us

Host Consult Ltd
167-169 Great Portland Street, London W1W 5PF, United Kingdom
Email: privacy@peak100.app