Version 1.0 · Effective date:
PeekaWhom is operated by PEEKAWHOM SOFTWARE - L.L.C - S.P.C, Abu Dhabi, United Arab Emirates (“PeekaWhom”, “we”, “us” or “our”). This Privacy Policy explains how we collect, use, disclose, retain and protect personal information when you use the PeekaWhom website, mobile app, services, communications and related features (together, the “Services”).
Privacy contact: [email protected].
We value your privacy and your rights as a data subject and have therefore appointed Prighter Group with its local partners as our privacy representative and your point of contact for the following regions:
Prighter gives you an easy way to exercise your privacy-related rights (e.g. requests to access or erase personal data). If you want to contact us via our representative, Prighter or make use of your data subject rights, please visit the following website: https://app.prighter.com/portal/17565921883
PeekaWhom is a mobile app for adults who are legally able to create an account. Each person has one PeekaWhom account and login. They may manage Child Profiles, accept invitations to a child’s Circle, or do both. A Circle is the trusted people granted access to a particular child’s information. Children do not create their own PeekaWhom accounts, and adults who manage their information must have the appropriate authority.
We collect only information reasonably connected to providing, protecting and improving the Services. Depending on how you use PeekaWhom, this may include:
Some Child Profile information may be sensitive, including health, allergy, disability, family or other information that receives additional legal protection. We process this information only for clear PeekaWhom purposes and under the consent, contractual arrangement or other lawful basis required by applicable law.
Where applicable law requires caregiver or parental authorization for a child’s personal data, PeekaWhom obtains the required consent or authorization before the relevant processing. The applicable age and consent rules depend on the child’s location and the nature of the service relationship.
Children's health information is stored only with the explicit consent of the child's parent or legal guardian, given in the app, and that consent can be withdrawn at any time in My Account. Our Consumer Health Data Privacy Policy explains how we handle children's health information.
Where the EU GDPR or UK GDPR applies, we rely on the legal basis appropriate to the processing, which may include performance of a contract, compliance with legal obligations, legitimate interests that do not override the rights of the individual, and consent. Where sensitive or special-category child data requires a separate legal condition, we rely on explicit consent or another condition lawfully available for the relevant relationship. For organization-controlled data, the organization determines the applicable legal basis and PeekaWhom processes the data under its instructions where PeekaWhom acts as a processor.
We disclose personal information only as needed for the Services, with appropriate safeguards and subject to the permissions and legal basis for the relationship. Recipients may include:
A teacher, therapist or other trusted professional may be granted access to a child’s Circle through their own PeekaWhom account. Their Relationship to the child does not automatically grant permissions. Their employer may have separate duties for records it holds outside PeekaWhom. Shared Child Profile information does not become PeekaWhom’s property.
Where FERPA applies to a US educational institution, PeekaWhom will process education-record information only as permitted by the written agreement and applicable law, including restrictions on use and redisclosure.
PeekaWhom is based in the United Arab Emirates and may use service providers in other countries. Where personal information is transferred across borders, we use the transfer mechanism and safeguards required by applicable law, which may include adequacy decisions, contractual safeguards such as Standard Contractual Clauses, or another lawful mechanism.
We keep personal information only for as long as it is reasonably necessary for the purpose for which it was collected, to provide the Services, or to meet legal and contractual obligations. We do not retain child data indefinitely merely because storage is available.
If your paid plan or free trial ends and is not renewed, your account becomes read-only: you can still sign in, view, print and download your information, but you cannot add or change it. We keep a read-only account and its child-profile data for 12 months after the plan ends. We will email you 30 days and again 7 days before the account and all of its child-profile data are permanently deleted. Restarting a plan at any time before then cancels the deletion. Members of a child's Circle keep their own accounts, but their access to that child's information ends when the child's data is deleted.
When an account is deleted, we send a confirmation email to its address. After deletion, nothing that names the person stays in PeekaWhom, except:
We maintain administrative, organizational and technical safeguards appropriate to the sensitivity of the information we process. No service can guarantee absolute security. We therefore combine preventive controls with access management, monitoring, incident response and contractual safeguards for service providers.
To report a security issue, email [email protected].
If a personal data breach occurs, we assess the risk promptly and notify regulators, organizations, parents, users or affected individuals where and within the timeframe required by applicable law. We also take steps to contain, investigate and remediate the incident.
Depending on your location and relationship to the data, you may have rights to:
To exercise a privacy right, email [email protected]. We may need to verify your identity and authority, especially for requests involving a child’s information. We will not discriminate against you for exercising a legally protected privacy right.
Exercise your data subject rights under GDPR: we provide you with an easy way to submit privacy-related requests, such as a request to access or erase your personal data. If you want to make use of your data subject rights, please visit our Trust Center: https://app.prighter.com/portal/17565921883
Saudi Arabia's Personal Data Protection Law (PDPL) applies to our processing of personal data about people who live in Saudi Arabia.
Legal bases. We process your personal data:
Most information is optional. If you do not give the information an account needs, such as your email address, we cannot create an account. If you do not consent to health information, you can still use PeekaWhom, but no one can add health information for your children.
Where your data is stored, and transfers outside the Kingdom. We do not store your personal data in Saudi Arabia. It is stored in the EU, on Amazon Web Services servers in Frankfurt, Germany, and PeekaWhom manages the service from the United Arab Emirates. This means your personal data, including any health information you add, is transferred outside the Kingdom. Our service providers listed in section 8 may also process it in other countries (for example, Cloudflare delivers the Services through its global network, and Stripe processes payment information in the EU and the US). We transfer only the personal data needed to provide the Services, and we use the safeguards required by applicable law, as described in section 10.
Your rights. You can use the rights in this section, including the rights to be informed, to access your personal data and get a copy of it, to correct it, to have it destroyed, and to withdraw consent. Email [email protected]. We will answer within 30 days. If we need more time, we may extend this once, and we will tell you before the first 30 days end.
Complaints. If you are not satisfied with how we handled your personal data or your request, you can complain to the Saudi Data & AI Authority (SDAIA): https://sdaia.gov.sa
Data Protection Officer. Our Data Protection Officer for the PDPL is our Founder & CEO, who can be contacted at [email protected].
Where a US state privacy law applies, PeekaWhom provides the rights required by that law. PeekaWhom does not sell Child Profile information and does not use Child Profile information for targeted or cross-context behavioral advertising. We also do not knowingly sell or share personal information of anyone under 16. If a browser or device sends a legally recognized opt-out preference signal, such as Global Privacy Control, we will honor it where required for the website/browser context in which it is received.
We answer US state privacy requests within 45 days. If we need more time, we will tell you within those 45 days, and we will answer within a further 45 days.
Appeals. If we decline to act on your privacy request, you can appeal by replying to our answer or by emailing [email protected] with "Privacy Appeal" in the subject line. We will answer your appeal in writing within 45 days and explain what we did or did not do, and why. If we deny your appeal, you can contact the Attorney General of your state. In Connecticut, you can submit a complaint at https://portal.ct.gov/ag/common/complaint-form-landing-page.
We do not use personal data, including Child Profile information, to train large language models. If you live in Washington, Nevada or another US state with a consumer health data law, our Consumer Health Data Privacy Policy explains how we handle consumer health data and your rights.
PeekaWhom is designed for adults, but the information stored in it can be about children. This is why we provide a separate Children’s Privacy Notice explaining our rules for child data and a shorter Privacy for Children & Young People page written in simpler language.
Our public website may use cookies or similar technologies. Strictly necessary technologies may operate without consent where legally permitted. Non-essential analytics or advertising technologies are used only in accordance with applicable consent requirements. We do not permit targeted advertising based on authenticated child-profile information. See the Cookie Policy and Cookie Settings for details.
We may update this Privacy Policy when the Services or law changes. If a change materially affects how we use child or other sensitive personal information, we will provide prominent notice and obtain new consent where required. The effective date at the top shows when the current version applies.
Privacy: [email protected]
Legal notices: [email protected]
EU and UK representative: Prighter Group — https://app.prighter.com/portal/17565921883 (please quote reference ID-17565921883)
Data Protection Officer (Saudi Arabia): our Founder & CEO — [email protected]
PEEKAWHOM SOFTWARE - L.L.C - S.P.C, Abu Dhabi, United Arab Emirates
Version 1.0 — current version, effective . This is the first version of this document.