Private by default, minimal by design
PlayPeach is operated by Playpeach LLC. This page explains how we handle your account, private media and payment information. For privacy questions, contact support@play-peach.com.
What the product stores
- Account identifier, email, display name, account state, service-notification preference, and Peach balance ledger.
- Private normalized reference images, versioned consent records, safety decisions, immutable character snapshots, scene version, generation job identifier, and generated outputs.
- Billing order and signed event identifiers; card data stays with the hosted payment provider.
- Safety reports, support cases, contact email, and pseudonymous rate-limit data.
Signing in with Google or email
If you choose Google sign-in, Google shares your account identifier, verified email address, name and profile picture with PlayPeach. We use these details to sign you in and connect you to your PlayPeachaccount. We do not request access to your Gmail, Drive, contacts or calendar. Authentication records are stored in our database, and OAuth tokens are encrypted at rest.
For email sign-in, Cloudflare processes your email address and the sign-in message to deliver a link that expires after ten minutes. We store a hash of the link token. Essential session cookies keep you signed in. Account deactivation revokes sessions and blocks sign-in, while retaining your account and authentication records.
Affiliate referrals
If you arrive through an affiliate link, a first-party cookie remembers the referral for 30 days. Creating a new account saves that referral to your account so qualifying purchases can be attributed for as long as the account exists. We store the affiliate identifier and visit and signup dates, without an advertising profile or your full browsing URL.
Affiliates see referral counts and payment commissions, including refund adjustments. They do not receive your name, email, prompts, photos or videos. Payment and commission records may be retained with our billing records after account deletion. You can remove the referral cookie through your browser settings.
Reference-image privacy
The app re-encodes browser-supported reference images before upload and the server removes JPEG application metadata and comments again, including EXIF and GPS containers. Dimension, file-size, pixel-surface, and content-signature checks run before quarantined storage. References are used only to review and perform the requested generation.
Encrypted storage and access
Uploaded images and generated videos are stored privately in Cloudflare R2, which encrypts stored objects and their metadata with AES-256. Connections to PlayPeach use HTTPS. Access to private media is checked against your signed-in account; authorized team members and service providers can access content where needed for generation, support and safety. Storage encryption is not end-to-end encryption. See Cloudflare’s storage security documentation.
Completed videos stay in your private Library so you can retrieve, watch and download them again. You can remove videos from the Library when you no longer want them.
How media is used
We do not publish your private uploads or generated videos in a public feed, sell them, or use them to train models. To create your video, we process your chosen reference media and prompt with the PlayPeachvideo-generation model. Approved videos are labeled as AI-generated in the app and have a separate machine-readable provenance record.
Signup country
We save Cloudflare’s approximate country estimate when you create your account to determine free signup offer eligibility and understand account activity by country. This is an IP-based estimate, not proof of residence, and can be affected by VPNs. We store the country code, estimate source and time for this feature, without adding IP address, city or GPS storage. Later visits do not change your signup country. Contact Support if the estimate is incorrect.
Drafts on your device
Unfinished creations are saved in this browser for up to 24 hours so you can return after signing in or buying Peaches. Drafts are cleared after confirmed creation or sign-out. Your image-use acknowledgment is saved to your account and does not need to be repeated for each draft.
Product steps
Unless you turn analytics off, we note the first time your account reaches key steps in the app, such as opening a scene, adding a photo, tapping Generate or opening the plans, with the time it happened. This tells us where people get stuck. It records the step only, never your photos, prompts or videos.
Campaign links
When analytics is enabled, we store campaign labels from tagged links and a random browser cookie for 30 days. Your first tagged visit can be linked to a new account and confirmed purchases to measure campaign results. Turning analytics off removes this cookie and stops new campaign collection. No full referral URLs or browsing histories are stored for this measurement.
Optional advertising measurement
If you arrive from a TrafficJunky ad and explicitly allow measurement, we remember its click identifier for 30 days. We share that identifier and anonymous conversion keys for signup, confirmed purchases and approved completed videos with TrafficJunky. We do not send your name, email, account ID, prompts, photos, videos or payment details. Measurement is separate from Google Analytics. Declining does not affect your account or purchases. You can withdraw below; withdrawal stops future delivery but cannot recall requests already sent.
Optional audience measurement
With your permission, we use Google Analytics to measure visits to public pages, plan selections, checkout starts, confirmed purchases, and video creation starts and outcomes. Google receives a cookie-based browser identifier, general device and visit information, fixed page labels, plan and credit amounts, and hashed transaction identifiers to avoid counting a purchase twice. We do not send your name, email, account identifier, prompts, photos, videos, private page addresses or URL query strings. Advertising personalization and Google signals are disabled. Private app screens use a generic label. Video events contain only preset/custom mode, free/Peach credit type and credit amount. Telegram Stars are reported as Stars, without an estimated dollar value.
Analytics is enabled by default when configured. Your choice is saved in this browser for six months. You can turn it off and keep using PlayPeach, or change your choice below. Turning it off removes our Analytics cookies and stops future collection in this browser; it does not erase data already received by Google. Read how Google uses data from partner sites.
Optional advertising measurement
If you arrive from a TrafficJunky ad and explicitly allow measurement, we remember its click identifier for 30 days. We share that identifier and anonymous conversion keys for signup, confirmed purchases and approved completed videos with TrafficJunky. We do not send your name, email, account ID, prompts, photos, videos or payment details. Measurement is separate from Google Analytics. Declining does not affect your account or purchases. You can withdraw below; withdrawal stops future delivery but cannot recall requests already sent.
Retention and deletion
Photo and video references have no automatic expiry. Saved and unsaved references remain until you delete them. Manage photos in Saved photos, temporary references in its Other uploads menu, and finished videos in your library. Deleting a photo removes it from future use; completed videos remain available to watch, download and share until you delete them. Explicitly withdrawing permission still blocks videos made from that reference. Account data export and deactivation are available in Account. Deactivation cancels subscriptions and stops running generations, but retains your account, media, and credit history. Re-registration does not reset free offers. You can permanently delete your account and media in Account settings. We retain a keyed fingerprint of your email to prevent that email from opening another account or claiming free offers. Billing and safety records may remain where needed for disputes or legal obligations. For help, email support@play-peach.com. Legal evidence holds for abuse reports may override ordinary deletion where required.
Who receives data
When you connect Telegram, we store your Telegram user ID and display name to link payments to your existing PlayPeach account. We retain charge identifiers, plan amounts, renewal state and credit receipts for billing and payment disputes. Short-lived account-link tokens are stored as hashes. We do not request your Telegram phone number or contacts, and the billing bot does not receive your private media. Telegram Stars payments do not give PlayPeach your card details, but they are not fully anonymous: payments remain linked to your Telegram and PlayPeach accounts. Telegram receives the invoice details and your payment, and the service used to buy Stars may hold payment information; their privacy policies apply. Account deactivation removes the active Telegram link and link challenges while retaining the minimum financial records needed for refunds and obligations.
Cloudflare provides hosting, database, file storage and email services. Google handles Google sign-in, PlayPeach’s video-generation model processes generation requests, and Telegram handles Stars payments. Twilio SendGrid sends our tips-and-offers emails. These services receive the information needed for the features you use. Their processing is also subject to their respective terms and privacy policies.
Emails
Besides account and service emails, we may send occasional tips and offers about PlayPeach to the email on your account. We count clicks in total, not per person, to improve them. Every one of these emails has a one-click unsubscribe link.
Your controls
Use Account to edit your profile, change service email preference, inspect or revoke consent, export data, remove eligible references, sign out, or deactivate the account. Support handles privacy requests and appeals; the safety form handles urgent non-consensual content and minor-safety concerns.