Privacy Policy
Last updated:
This policy explains what personal data Peekarrow ("the app", on Android and on the web at ) handles and why. It is written to meet Google Play's User Data policy, India's Digital Personal Data Protection Act, 2023 and DPDP Rules, 2025, the EU/UK GDPR and California privacy law. Peekarrow is run by ("we"), the data fiduciary / controller.
The short version
You can play without an account; then your levels, stars, hints and streak stay only on your device. If you choose to sign in with your email, a copy of your save is kept in your account so you can play on any device. We don't sell your data. The Android app shows ads from Google AdMob unless you buy No Ads or the Peekarrow Pass. Purchases in the Android app go through Google Play; on the web they go through Razorpay.
What is collected, and why
| Data | Collected by | Purpose | Shared? |
|---|---|---|---|
| Game progress, stars, hints, streak, settings | On your device. If you sign in, also in your account (Supabase). | Remembering your game; syncing it across devices | No |
| Email address (only if you sign in) | Supabase, our account provider | Signing you in with a one-time code; account messages | No |
| Advertising ID, approximate location from IP, device and app-interaction data (Android app, only when ads are shown) | Google AdMob | Showing ads, measuring them, preventing ad fraud | With Google, as described in Google's partner-sites policy |
| Purchase record (order ID, product, purchase token) | Google Play (Android) or Razorpay (web) | Giving you what you bought, restoring it, refunds, tax records | Only with the payment provider |
| Payment details (name, email, phone, card/UPI) | Google Play or Razorpay, never us | Taking payment | We never see your card or UPI details |
| IP address and basic request data | Cloudflare, our host | Serving puzzles, security, preventing abuse | No; not kept by us |
All data is encrypted in transit (HTTPS). We don't use your data for profiling beyond the ads described above, and never to train AI models.
Ads and your choices
- Ads in the Android app come from Google AdMob. Where the law requires it (for example in the EEA and UK), we ask for your consent before personalised ads are shown, and you can change it at any time from the app.
- You can reset or delete your Advertising ID, or opt out of personalised ads, in Android Settings → Privacy → Ads.
- "Watch an ad for extra lives" is always optional.
- No Ads or the Peekarrow Pass removes ads.
Who processes data for us
- Google (Google Play distribution and billing, AdMob ads)
- Razorpay Software Pvt. Ltd. (web payments, India)
- Supabase, Inc. (accounts and cloud saves, if you sign in)
- Cloudflare, Inc. (hosting and security; servers worldwide under standard contractual safeguards)
How long we keep it
Purchase records are kept as long as Indian tax and accounting law requires (currently up to 8 years). Your account and cloud save are kept until you delete your account, or deleted after 2 years without a sign-in. Progress on your device stays until you uninstall the app or clear its data, which deletes it.
Deleting your data
- Account: in the app, tap your profile → Delete account. This deletes your sign-in, email and cloud save straight away. You can also email from the address you signed in with and we'll delete it within 7 days.
- This device: uninstall the app or clear its storage (Android Settings → Apps → Peekarrow → Storage → Clear data).
- Purchase records we must keep for tax law are kept only as long as required; ask us to delete anything else.
Your rights
You can ask us what we hold about you, correct it, or erase it (except records the law makes us keep), and withdraw consent at any time, as easily as you gave it. Under the DPDP Act you can nominate someone to act for you. In the EU/UK you can also restrict or object to processing, ask for portability, and complain to your data protection authority. In California you have the right to know, delete and correct, and to opt out of "sharing" for cross-context ads (use the Android ad settings above). Write to the Grievance Officer below.
Children
Peekarrow is designed for a general audience aged 13 and over and is not directed at children under 13. We do not knowingly collect data from children, and we don't show personalised ads to users we know are under 18. Buying anything requires being 18 or over, or a parent's or guardian's permission.
Security
Purchase tokens are signed so they can't be forged. If a breach affects your data, we will tell you and the Data Protection Board of India (and other regulators where required) as the law requires.
Grievance Officer and contact
, , . We acknowledge complaints within 48 hours and resolve them within 30 days. If you're not satisfied, you can complain to the Data Protection Board of India.
Changes
We'll update the date above when this policy changes, and tell you in the app about important changes.