Home

Privacy Policy

Last updated October 26, 2026

This policy explains what information Peachy Social, Inc., a Delaware C Corporation, collects, why, and the choices you have. Questions go to support@pchy.app.

Information you provide

  • Phone number. You sign in with it, and people who have it in their contacts can find you by it. We don’t show it on your profile. To turn that off, set “Who can find me by my number” to Nobody in Settings › Privacy.
  • Profile. Your name, photo and @handle, and an email address if you give one. Your name, photo and handle are shown on your public page at pchy.app/handle. People on Peachy can find you by your name in Friends search; to narrow that, set “Who can find me by name” to Friends of friends or No one in Settings › Privacy. Someone who types your exact @handle can still find you, because it’s your public address. If you add them, your city, About you and interests, each shown only to the people you pick: your friends, your mutuals, both, or only you. Your About you can also be public, which is where it starts, and then it is on your public page too.
  • Birthday and pronouns. To use Peachy beyond events, you tell us your birthday, so we can check you’re 18 or over. To start, your friends see your birthday and your age. You can choose who sees the day and who sees the year: your friends, your mutuals, both, or only you. Neither is ever on your public page. You can also tell us your pronouns: she/her, he/him or they/them. They are not private: anyone who can see your profile sees them, your public page included, and Peachy uses them when it mentions you, as in “Wish her a happy birthday!”. Answering an event invitation asks for none of these.
  • Messages. Direct messages and private groups are end-to-end encrypted. See below.
  • Contacts, if you choose to sync them on iPhone, Mac or Android, and only after you agree to it in the app. The app uploads your contacts’ phone numbers to our servers, sealed on your device, and they are matched inside Peachy’s attested enclave; we never store them. We keep which people already on Peachy your address book matched, and may suggest you to them in People you may know, without saying why. To match, the enclave looks the numbers up in our database for the moment of the lookup, without writing them there.
  • Friends. Who you’re friends with, and the friend requests you’ve sent or not yet answered. When you send one, we tell the other person, with a notification and on their view of your profile; when they accept, we tell you. We never tell anyone you declined. People in the same community, or who both answer “going” to the same plan, are Mutuals. We work that out from the memberships and answers we already hold, and store nothing more about it.
  • Posts, plans and communities. What you post to your Feed, the plans you make or answer, and the communities you create or join. These are not end-to-end encrypted. See below.
  • Stories. The photos, videos and text cards you share to your story, the words and the friends you mention on them, the stories you add to yours from a friend who mentioned you, and who viewed and liked each one. These are not end-to-end encrypted either. See below.
  • Calendars, only if you turn them on for a device. Peachy reads them on the device and sends us only the times you’re busy over the next month, merged into one list with no event names, notes, places or guests. We keep it for at most three days and use it only to answer “does this time work?” for one of your friends: someone whose friend request you accepted, or who accepted yours.
  • ID verification, only if you choose to get verified: a photo of a government ID and a selfie. A person reviews it, and the photos are deleted when they do. We keep the verdict, and the name and date of birth read off it. That date becomes your birthday on Peachy, shown only to the people you pick.

What we can’t read

Direct messages and private groups, including a community’s groups, are end-to-end encrypted with MLS (RFC 9420). The keys are made on your devices and never reach us. We cannot read:

  • what you send in them: messages, photos, videos, files, places, reactions and replies;
  • who sent a message: no message we hold names its sender, and the sender’s own devices are among its recipients;
  • who is in them, or a group’s name, photo or topic: we keep no list of members;
  • your settings: who you block, the chats you mute or hide, your Peachy AI notification choices, whose stories you mute, the names you save for people, and whose message requests you accept. These are encrypted with a key only your devices hold. One exception: we also keep a list of the accounts you block, so we can stop them commenting on your Feed posts;
  • how far you have read, and which messages were deleted.

We hold an encrypted message only until each device it is for has collected it, then delete it; one still undelivered after 30 days is deleted anyway. Encrypted photos, videos and files are deleted from our storage 30 days after they are sent. Your chat history lives on your devices, so if you lose all of them it cannot be restored.

A new device is included only after a device you already have approves it and you scan its code, or match the number on both screens. Your friends’ apps check that approval themselves, so our server cannot quietly add a device to your account. If you start over after losing every device, your friends see that your security code changed.

What we can read

  • Feed posts, with their comments, reactions, photos, videos and places. Posts for Friends, Mutuals or a community are seen only by them. Public posts can be seen by anyone, including people who don’t use Peachy and link previews, and so can the comments on them. Neither is end-to-end encrypted. Your messages always are.
  • Stories: the photo, video or text card, the words on it, who it mentions, when it was shared, and who viewed and liked it. A story is shown only to the friends of the person who shared it, for 24 hours, and who viewed and liked it is shown only to that person. You can mention only your friends. Everyone who can see the story sees the names of the people it mentions, and each person you mention gets a notice in your direct message with them, sent by your app and end-to-end encrypted like any other message. A friend you mention can add your story to their own. Their friends then see it inside theirs, with your name and photo on it, even if they aren’t your friends. It disappears from theirs when you delete it, when it is removed, or when either of you blocks the other, and it is never shown to anyone you have blocked or who has blocked you. Who viewed their story is shown to them, not to you. A reply to a story goes to your direct message with the person who shared it, end-to-end encrypted like any other message; it points to the story rather than copying it. No AI model reads stories.
  • Communities: a community’s name, description and topics, and who belongs to it, so people can find and join it. Never what is said in its groups.
  • Plans: the title, description, time and place, who is invited and who is going, notes left with an answer, the hosts’ updates, and the plan’s activity: comments, replies and reactions. The activity is shown to the hosts and to people who are going, and pushed to the hosts. We use plans for reminders and your calendar link.
  • Delivery information for encrypted chats: while a message waits, which devices it is for, when it arrived and its size. Sizes are padded to a whole number of 256-byte blocks, so a message is known only to the nearest 256 bytes, and an attachment to a ladder of sizes about five per cent apart. When you message someone whose key your device does not yet hold, the send carries your account; we don’t store it with the message.
  • Reports. If you report a message in an encrypted chat, we learn who you say sent it and which message it was, and its words only if you choose to include them.
  • Moderation. We may remove a Feed post or comment or a story, or suspend an account, after a report. We keep a record of what was removed, by whom, and which accounts are suspended. Public posts, their comments, and names and handles are checked against a short list of words we don’t allow; posts to Friends, Mutuals or a community are not.

Information we collect automatically

  • Devices: platform, the app or browser and its major version (like “Chrome 140 on macOS”), push tokens, and the day each device last connected.
  • Usage counts: how many times a screen was opened each day, how many messages were sent each hour (by the kind of app, whether to one person or a group, and whether with a photo or file), and how many devices used each build number of our apps each day, across everyone, not by whom, to whom, or what was in them. Our apps send their build number to count it; it is never kept against your account or device. Kept for 180 days, in our own system; we use no third-party analytics or advertising product.
  • Server logs, which record that requests happened rather than what was in them, kept for 14 days.
  • IP addresses are used while a connection is open, to limit abuse, and not stored.

We don’t show anyone whether you are online, and there is no “last seen”.

Peachy AI

Peachy AI is never a member of a chat. From an encrypted chat it sees only what your own device sends it, for a chat you set to “Time-sensitive only” or “Custom…”: the incoming message, the sender’s name as you saved it, the chat’s name and your choice. Your device seals these to a key held only inside Peachy’s attested enclave; our servers relay them without being able to open them, and the answer comes back sealed the same way.

Advanced Chat Privacy stops that for a chat: while it is on, no one’s app sends that chat to Peachy AI. Either person in a direct message can turn it on, and in a group its owners and admins can. It is kept by the apps, not by the encryption; a modified app could ignore it.

Our servers also send the enclave, from content we can read: if you turn on the paragraph filter (it is off unless you do), your Feed paragraph with the posts you can already see, to filter your Feed; the text of posts to tag their topics; and the photo of an ID you send to get verified, to read the name and date of birth.

Every one of these goes to Tinfoil, which runs open-weight models inside hardware-attested enclaves. Our server verifies the enclave before the first request and every hour after; if it cannot, the request fails rather than going anywhere else. None of it goes to any other provider. Tinfoil states that it keeps nothing once a request is answered. Under our terms with Tinfoil it does not train models on what we send, and neither do we. You can check the enclaves yourself. Anthropic receives none of your content.

The only other AI we use makes event cover art, described under Google (Gemini) below.

Who we share it with

We don’t sell your personal information. We share it only with the companies below, and only for what each does. This is the whole list.

  • Tinfoil: runs the AI models, as described above.
  • Google (Gemini): makes event cover art when you ask for it. It receives the event’s title and the cover prompt, and nothing else; a photo you upload as a cover is never sent to it. Nothing is sent until you agree the first time, and you can turn it off in Settings.
  • Twilio: texts you your sign-in code. It receives your phone number and the code.
  • Cloudflare: stores and serves the photos, videos and files you upload, including ID verification images. Videos posted to the Feed are processed there so they stream well. An encrypted attachment is stored as bytes it cannot open.
  • Apple, Google and your browser’s push service: deliver notifications. For an encrypted chat the notification is the same every time and carries no words; your device fetches the message and draws the alert. For a comment on your Feed post it carries the commenter’s name, never their words. When a friend mentions you in the Feed it carries their name and the words of that post or comment. For a plan it carries what the plan’s page shows: a host’s update, or, to the hosts, a guest’s comment or the note left with an answer.
  • Google Maps Platform, only while you choose a place to share. Our server sends the words you typed and a position rounded to about a kilometer, or, for “use current location”, to about a hundred meters. It sends nothing that names you.
  • Your device’s own map and location services, which we don’t run: your device’s location service when you ask for your position, Apple map tiles in the Mac place picker, and Apple Maps or Google Maps when you tap “open in Maps”.
  • Your calendar provider, if you subscribe to your Peachy calendar link. The link lists the plans you are going to, invited to or hosting, and nothing from any chat. Anyone holding the link can read it; reset it in Settings › Calendar.
  • Render: hosts our servers, database and logs.

We may also disclose information when the law requires it, or to protect someone’s safety. Our transparency page lists every government request.

How we use information

  • to run Peachy: sign-in, delivering messages, notifications;
  • to connect you with contacts already on Peachy;
  • to run the AI features you turn on;
  • to keep Peachy secure and free of abuse;
  • to build and improve features.

Retention

We keep your information while your account is active. An encrypted message is kept until each device it is for has collected it, and never longer than 30 days. A plan’s activity is deleted 30 days after the plan ends or is canceled. A story is shown for 24 hours, and you can see it and who viewed it for 48; then we delete it, its photo and its record of views, and keep no archive. A friend who added your story to theirs shows it only while we still keep yours. A report about a story keeps what the reporter saw until we have reviewed it; after that, only its words. You can delete your account at any time in the app. That removes your profile, releases your phone number and handle, and clears the messages you sent. It also destroys the encryption keys and chats on the device you delete from. Deleting your account lists what goes and what stays.

Your choices

  • You choose whether to sync your contacts.
  • You can turn notifications off, and mute any chat.
  • You can mute a friend’s stories without telling them, and delete a story of your own at any time.
  • You choose, chat by chat, whether to use Peachy AI’s notification options, and you can turn on Advanced Chat Privacy.
  • You can delete your account, and its data, at any time.
  • You can ask to access or correct your data at support@pchy.app.

Age

Peachy is not for anyone under 18, and we don’t knowingly collect their information. We ask your birthday when you make an account, and don’t make one for anyone under 18. If we learn that an account belongs to someone under 18, we close it.

Changes

We’ll update this policy as Peachy changes, and take reasonable steps to tell you about material changes.