Privacy Policy
Last updated September 26, 2026
Peepz is an app for your family’s calendar, lists, meals, polls and contacts – and, when you want, location sharing, trip following and emergency alerts. This policy describes the personal data we process when you use the app on iPhone and Apple Watch and the website peepz.se, why we do it and what you decide yourself. The Swedish version is the original; if the two differ, the Swedish version applies.
The short version
- Everything you add to Peepz is stored on servers in Sweden.
- We show no ads and never sell data. The app uses no trackers or analytics services from other companies. The website counts visits with Google Analytics only if you say yes.
- Your location is read only when you share it, start a trip or send an emergency alert. We keep no location history – only your latest position, and only while you share.
- What you share is visible only to your family. Your email address and phone number are not shown to the others.
- You can export your data and delete your account right in the app.
1. Who is responsible
The data controller for Peepz is Infinite Loop AB, Storgatan 147, SE-577 34 Hultsfred, Sweden. Send questions about your data to hej@peepz.se.
Peepz launches in Sweden. Processing follows the General Data Protection Regulation (GDPR) and Swedish data protection law.
2. Data we process
Your account
- Email address, display name and password. The password is never stored in plain text, only as a hash that cannot be reversed.
- Profile picture, if you add one. The picture is scaled down and all metadata is removed – including where the picture was taken.
- Phone number, if you enter it as your emergency number (see section 3).
- Language and time zone, so that notifications, emails and times are right.
Your family
- The family’s name, who its members are, and their roles, permissions and colors.
- Invitations: who invited, which role the invitation is for and when it was used.
- Profiles the adults manage for children without their own phone: name, color and an optional profile picture.
What you add
- Calendar events, with times, location names, notes and who is tagged.
- Lists and items, and what you usually buy – used for suggestions on the list.
- Polls, options and votes.
- The meal plan: which dishes you plan for which days and who cooks, with notes, recipe links and ingredients. It’s your own text – Peepz never asks about allergies or diets, and the recipe link is opened on your phone, never by us.
- The family’s shared contacts, such as the preschool, the babysitter or the plumber.
- Saved places – home, work and school – with address and coordinates.
- A custody schedule for anyone who lives in two homes: switch day, time and which homes it covers.
Location
Only when you share your location, start a trip with followers or send an emergency alert. Section 3 explains how it works.
Devices and security
- Signed-in devices: the device’s name, type, app version, language and – if you allow notifications – the address Apple gives us for sending push notifications to the device.
- Sign-ins: when, and from which IP address and app, a session was started and last used.
- An event log of security-relevant events, such as a sign-in from a new device, a changed password or email address, changed roles and permissions, and when an adult turns on location features for a child.
Buying Peepz Premium
If you buy Peepz Premium, Apple handles the payment in the App Store. We never receive your card or payment details – only what Apple certifies about the purchase: a transaction ID, which subscription it is, when it expires, whether it renews or has been refunded, and which family it applies to. Premium applies to the whole family, so the others in the family can see that the family has Premium and which of you pays for it.
When you contact us
What you write to us and your email address.
What we don’t collect
We don’t ask for your age, date of birth or national ID number. Peepz never reads your whole address book or the contents of your own calendars, keeps no location history and uses no advertising identifier.
3. Location, trips and emergency alerts
Location is the most sensitive data in Peepz, so it has its own rules. The app reads your location only when you have started one of the following – never otherwise. While it is running, the app may read your location in the background too, and your iPhone shows that Location Services are in use.
Share my location
You choose for how long: 15 minutes, an hour, the rest of the day or until you turn it off. While you share, we keep only your latest position – coordinates, accuracy, heading, speed and time – and overwrite it with the next one. The position is deleted as soon as the sharing ends. The fact that you shared, and when, is deleted after 24 hours.
Trips with followers
When you start a trip we store where you are going, how you travel, when you are expected to arrive, who is following you and your latest position during the trip. The route is calculated on your phone and is not stored by us. Your position and starting point are deleted 24 hours after the trip ends; the rest – destination, times, status and followers – after 7 days.
Emergency alerts
When you send an alert, your family sees who is sending it, when and where, and you see who has seen it. If you have entered an emergency number and allowed it to be shown, your family sees your phone number – only while the alert is active. The position is deleted 7 days after the alert ends. The alert itself – who, when and who saw it – is kept for 90 days, even if the account is deleted in the meantime (then without a name), so that it is possible to find out what happened.
The emergency alert reaches your family, not the emergency services. In an emergency, call 112.
Maps and directions
Your phone gets maps, address search and travel times directly from Apple. Peepz servers never send your position to another company, and push notifications never contain coordinates, addresses or place names.
You decide
You can stop sharing, a trip or an alert at any time, and you can turn off location access for Peepz in your iPhone’s Settings. If you turn off Precise Location for Peepz, we store only an approximate position when you share your location, rounded to about a kilometer. For trips and emergency alerts we use the position your phone provides, without rounding. On child accounts, location features are off until an adult turns them on, and it is always the child who starts and stops them.
4. Why we process data, and on what legal basis
The GDPR requires every kind of processing to have a legal basis. These are the ones we use:
| Purpose | Data | Legal basis |
|---|---|---|
| Providing Peepz to you and your family: account, family, calendar, lists, meal plan, polls, contacts, saved places and custody schedule | Account, family and what you add | Contract – needed for the service to work (Art. 6(1)(b)) |
| Location sharing, trips and emergency alerts | Position, trip, alert | Consent – you start it yourself and can stop whenever you want (Art. 6(1)(a)). For child accounts also a guardian’s consent, see section 6 |
| Showing your phone number during your own emergency alert | Phone number | Consent – you turn it on yourself (Art. 6(1)(a)) |
| Keeping an ended emergency alert for 90 days | The alert and who saw it | Legitimate interest – being able to find out what happened (Art. 6(1)(f)) |
| Peepz Premium: give the family what was bought, and keep track of renewal, expiry and refunds | The purchase: transaction ID, subscription, dates, family | Contract (Art. 6(1)(b)) |
| Push notifications | Push address, notification text | Contract (Art. 6(1)(b)). You choose in your iPhone and in the app which notifications you get |
| Emails about your account: confirming your email, resetting your password, changing email, deletion, data export | Email address, name | Contract (Art. 6(1)(b)) |
| Protecting accounts and the service: sessions, an email when you sign in on a new device, blocking repeated sign-in attempts, the event log | Device, IP address, event log | Legitimate interest – security and preventing abuse (Art. 6(1)(f)) |
| Operations and troubleshooting | Technical logs and error data | Legitimate interest – keeping the service working (Art. 6(1)(f)) |
| Visitor statistics for the website, only if you say yes | Random ID in cookies, which pages, device and browser, approximate location | Consent (Art. 6(1)(a) and Chapter 9, Section 28 of the Swedish Electronic Communications Act), see section 12 |
| Answering you when you contact us | What you write, email address | Legitimate interest (Art. 6(1)(f)) |
We never use the data for advertising, profiling or automated decisions, and we don’t analyze the content of what you write.
5. Who in the family sees what
- What you add is visible to the family’s members, according to their role and the permissions an adult has given. Nobody outside the family sees it – not even other families you belong to.
- A list can be made visible only to the people you choose, such as your own wish list. Then nobody else in the family sees it – not even an adult.
- Your shared location is visible to the family you share with. The member role – a grandparent or the babysitter, for example – doesn’t see shared locations unless an adult turns it on.
- If you belong to several families, your location and alerts are shared only with the family you have chosen.
- Your email address and phone number are not shown to the others, except your phone number during your own emergency alert if you have chosen that.
- If you leave the family or delete your account, what you added to the family’s calendar and lists stays – it is the family’s shared content. A list that nobody left in the family can see is removed, though. See section 10.
Data about other people
The family’s contacts and calendar may contain data about people who don’t use Peepz, such as a teacher or a neighbor. The family is responsible for what it adds. We process that data only to show it to the family, and we never log or analyze it.
6. Children
- A child can only get their own account through an invitation from an adult in the family. Children without their own phone can instead be part of the family as a profile the adults manage.
- We don’t ask for age or date of birth.
- Location features are off on child accounts until an adult turns them on. The invitation and the adult turning them on are the guardian’s consent, and both are recorded in the event log – who and when.
- An adult who manages the child in the family can help the child sign in, remove them from the family or delete the child account in the app. A guardian who wants a copy of a child’s data can email us.
- A child account that no longer belongs to any family is deleted after 30 days. Seven days before, the child gets an email saying that an adult needs to send a new invitation.
7. What stays on your phone
Some features use data that exists only on your phone and is never sent to us:
- Apple Calendar. If you want, Peepz adds the family’s events to the calendar you choose and keeps them up to date. If you show your own calendars in Peepz, they are read on the phone – nothing from your calendars is uploaded. If you import from another calendar, only the events you choose (title, time, place and note) are copied to the family calendar, where they are handled like other events in Peepz.
- Contacts. You import or save one contact at a time through iPhone’s own screens. Peepz gets no access to your whole address book.
- Camera and photos. The camera is used only when you take a profile picture. If you pick a photo from your library, Peepz gets only that photo.
- Widgets, Spotlight and Live Activity. Their content is stored on the phone and protected until the phone has been unlocked for the first time after a restart. Widget content is hidden on the Lock Screen. Saved places and addresses never end up in widgets or Spotlight.
- Apple Watch. The watch signs in with a one-time code from the phone – you never type your password on the watch.
- Siri and Shortcuts. If you use Siri, Apple processes what you say under Apple’s own terms.
- Selected family. Which family you last chose is stored on your phone, not by us.
If you have chosen to share analytics with app developers in your iPhone’s Settings, we receive crash and performance reports from Apple. They contain no names or contact details and nothing you have added.
8. Where data is stored and who helps us
Everything you add to Peepz is stored on servers in Sweden that we operate. Backups are encrypted and are also kept in Sweden.
A few companies help us with limited tasks. They are data processors: they may process the data only on our behalf, following our instructions and an agreement with us.
| Company | Task | Data | Location |
|---|---|---|---|
| Our server provider | Data center and servers | Everything stored in Peepz | Sweden |
| Brevo | Sends emails from Peepz | Email address, name and the content of the email. We have turned off open and click tracking | EU (France) |
| Laravel Nightwatch | Error monitoring for the server | Technical error data with a random user ID – never names, email addresses, positions or what you add | EU |
| Google (Google Ireland Limited) | Visitor statistics for the website – only if you say yes | Random ID in cookies, IP address, which pages you visit, device and browser. Never anything from the app | EU and USA |
Google may process the details of your visit to the website in the USA. The transfer is supported by the European Commission’s decision on the EU–US Data Privacy Framework, which Google has joined, and by the Commission’s standard contractual clauses. Should any other processor handle data outside the EU/EEA, we make sure the transfer is supported by the GDPR and say so here.
Apple delivers push notifications to your phone and watch. Apple then receives the device’s push address and the notification text. The text is as short as we can make it – for example that someone has started a trip or added an event – and never contains coordinates, addresses or place names. Apple also provides iPhone, the App Store, maps and Siri; Apple’s own privacy policy applies to those. If you buy Peepz Premium, Apple is the seller and takes the payment, under Apple’s terms – and Apple tells us when the subscription renews, expires or is refunded.
We disclose data to authorities only when the law requires it. We never sell data to anyone.
9. How long we keep data
We keep data for as long as you have your account and it is needed for Peepz. Most things that are removed first go to a trash for 30 days, so that it can be undone, and are then deleted for good. Location and sign-in data are deleted right away, without a trash.
| Data | How long |
|---|---|
| Account | Until you delete it, plus a 30-day grace period – or right away, if you choose |
| The family and what you add | Until it is removed, plus 30 days in the trash |
| Checked-off items | Removed after 90 days |
| List suggestions | Removed when unused for 24 months |
| A list only chosen people can see | Removed 30 days after the last of them left the family, and deleted 30 days later |
| Closed polls | Removed after 12 months |
| Planned dinners | Removed 12 months after the day |
| Dishes in the meal plan | Removed when they haven’t been planned for 24 months |
| Recurring events that have ended | Removed 30 days after the end date |
| Position while sharing location | Deleted as soon as the sharing ends. The fact that you shared: 24 hours |
| Trips with followers | Position and starting point: 24 hours after the trip. The rest: 7 days |
| Emergency alerts | Position: 7 days after the alert. The alert: 90 days |
| Invitations | 30 days after being used, expiring or being revoked |
| Devices and push addresses | Until you sign out, or after 90 days without use |
| Sign-ins (sessions) | 30 days after signing out or expiring |
| Links and one-time codes (reset, confirmation, Apple Watch) | Deleted within a day of being used or expiring |
| Email address changes | 30 days |
| Event log (security) | 12 months |
| Data export | The file is deleted after 7 days, and right away if you delete your account |
| Purchases of Peepz Premium | 24 months after the subscription expired or was refunded, and when the account is deleted for good |
| Technical logs and error data | 30 days on our servers, at most 90 days in error monitoring |
| Backups | 35 days. Deleted data disappears from the backups within 35 days |
| Visitor statistics on the website | The cookies: at most 12 months after your last visit, and they are removed straight away if you say no. Details of individual visits: 2 months in Google Analytics, then only aggregated statistics. Your cookie choice: 12 months in your browser |
| Emails to us | As long as the matter requires |
10. When you delete your account
You delete your account in the app: tap your picture at the top right and choose Delete account. This is what happens:
- Right away: you are signed out on all devices, push addresses are removed, ongoing location sharing and trips end and you disappear from the family. Any data export is deleted.
- For 30 days you can change your mind by signing in again. You can also choose to delete everything right away.
- After that the account is deleted for good, together with your profile picture, your sessions and your positions. What you added to the family’s calendar, lists and polls stays, but is shown as from “Former member”. The event log and any emergency alerts are kept for their remaining time without any link to you. The details of your Peepz Premium purchases are deleted too – but a subscription in the App Store continues until you cancel it there.
If you own a family, you first need to hand the family over to another adult or delete it. A deleted family can be restored by its owner within 30 days; after that, all of the family’s content is deleted.
11. Security
- All traffic between the app and the server is encrypted.
- Passwords are stored only as hashes, and sign-in keys are kept in the phone’s keychain.
- Repeated failed sign-in attempts are blocked, and you get an email when your account is signed in on a device we haven’t seen before. Under Profile you see your signed-in devices and can sign them out.
- Sensitive changes – such as changing your email, your password or deleting your account – require you to confirm with your password.
- Permissions are checked on the server for every request, so that nobody sees more of the family than their role allows.
- Logs never contain positions, sign-in keys or the content of what you add.
- If a security incident were to affect your data, we report it to the Swedish Authority for Privacy Protection and notify you when the law requires it.
12. The website
peepz.se uses no fonts or images from other websites. The server logs technical details of each visit – IP address, time, page and browser – for operations and security. The logs are kept for at most 30 days.
Visitor statistics and cookies
The first time you visit the home page, we ask whether we may count your visit with Google Analytics. If you say yes, two cookies are set and Google receives details of the visit: which pages you read and how you got here, your device, browser and language, and roughly where you are – country and city, which Google works out from your IP address without storing it. We only see aggregated statistics, for example how many people have read about Premium. Google’s features for ads and for linking visits to Google accounts are turned off.
If you say no, or don’t answer, nothing is loaded from Google and no cookies are set. Your choice is saved in your browser for 12 months – it is not a cookie and is not sent to us. You can change your mind at any time under Cookie settings at the bottom of the page. If you say no, we remove the cookies.
| Cookie | What it does | How long |
|---|---|---|
_ga | A random ID that tells your browser apart from others, so that a return visit isn’t counted as a new visitor | 12 months after your last visit |
_ga_GGSFTKRY5E | Keeps a visit together, so that several pages count as the same visit | 12 months after your last visit |
The cookies only apply to peepz.se. The app has no visitor statistics and sets no cookies, and the privacy policy – which the app also shows – doesn’t ask about cookies.
13. Your rights
- Access and a copy. Export your data in the app under Profile → Privacy → Export my data. You get a zip file with your account, your memberships, what you have added yourself, your votes and your security history, in a machine-readable format. Other people’s data is not included.
- Correction. You change most things yourself in the app. Otherwise we help you.
- Deletion. Delete your account in the app (see section 10) or ask us to.
- Withdrawing consent. Stop sharing, a trip or an alert, and turn off the emergency number or location access in your iPhone’s Settings. What you have already shared is deleted according to the times in section 9. On the website, you change your cookie choice under Cookie settings at the bottom of the page (section 12).
- Objection and restriction. You can object to processing based on our legitimate interest and ask us to restrict processing while a question is being looked into.
- Complaints. If you are not happy with how we handle your data, you can contact the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY), Box 8114, SE-104 20 Stockholm, Sweden, imy.se.
Email hej@peepz.se to use your rights. We reply within one month and may need to ask you to confirm that it is your account.
14. Changes
When Peepz gets new features or we change providers, we update this policy and the date at the top. If we change something that really affects you, we tell you in the app or by email before it takes effect.
15. Contact
Storgatan 147
SE-577 34 Hultsfred
Sweden