Privacy Policy

Last updated: 14 July 2026

This Privacy Policy explains how Peak (“Peak”, “we”, “us”) collects, uses and protects your information when you use the Peak mobile app and this website. We take your privacy — and especially your health data — seriously.

1. Who we are

Peak is operated by Benjamin Borri, a self-employed developer registered in Belgium (enterprise number 1033.203.913). We are the “data controller” for the personal data described here under the EU General Data Protection Regulation (GDPR).

Contact for any privacy question or request: benjaminborri1@gmail.com.

2. The data we collect

Account data — your email address and authentication details, so you can sign in and we can secure your account.
Health and fitness data — with your explicit permission, Peak reads data from Apple Health (iOS) and Health Connect (Android), such as heart rate, heart-rate variability, resting heart rate, sleep sessions and stages, workouts, steps, distance and calories. This is “special category” (health) data under GDPR Article 9.
Content you enter — journal entries, mood and behaviour logs, goals and any notes you choose to add.
Usage and diagnostic data — basic technical information (app version, device type, crash logs) used to keep the app working.

3. How we use your data

To calculate your sleep, recovery, strain and Body Battery scores and show you your trends.
To generate short, plain-language summaries and insights (see “AI features” below).
To provide, secure and improve the app, and to respond to your requests.

Legal basis. We process your health data only on the basis of your explicit consent (GDPR Article 9(2)(a)), which you give in the app before any health data is read, and which you can withdraw at any time. We process account data to perform our contract with you.

4. AI features

Peak uses AI to write short summaries of your sleep, recovery and activity. To do this, a limited set of your health metrics (for example, last night’s sleep and heart-rate figures) may be sent to trusted AI providers — currently Anthropic and OpenAI — solely to generate your summary and return it to you. These providers process the data on our instructions, do not use it to train their models, and do not receive your identity. These providers are based in the United States, so this involves an international transfer (see section 7).

5. Who we share data with

We do not sell your data and we do not use it for advertising. We share it only with service providers who help us run Peak, under contracts that require them to protect it:

Supabase — secure database and account hosting.
Apple / Google — the Health data sources you connect (Apple Health, Health Connect).
Anthropic / OpenAI — AI summary generation, as described above.

6. Where your data is stored

Your Peak account data is stored on secure cloud servers. Health data is also kept on your device by Apple Health / Health Connect, which you control through your phone’s settings.

7. International transfers

Some of our providers are located outside the European Economic Area (notably in the United States). Where that happens, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses to protect your data.

8. How long we keep it

We keep your data for as long as you have a Peak account. If you delete your account, we delete your personal and health data from our systems, except where we must keep limited records to meet legal obligations.

9. Your rights

Under GDPR you have the right to access, correct, export or delete your data, to restrict or object to processing, and to withdraw your consent at any time. You can export or delete your data from within the app, or by emailing benjaminborri1@gmail.com. You also have the right to lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données).

10. Security

We protect your data with encryption in transit, access controls and secure, reputable infrastructure providers. No system is perfectly secure, but we work to keep your data safe and to limit who can access it.

11. Children

Peak is not intended for children under 16, and we do not knowingly collect data from them.

12. Not a medical device

Peak is a wellness and fitness app. It is not a medical device and does not diagnose, treat, cure or prevent any medical condition. Always consult a qualified healthcare professional for medical advice.

13. Changes to this policy

If we make material changes, we will update this page and the “last updated” date above, and where appropriate notify you in the app.

14. Contact

Questions or requests: benjaminborri1@gmail.com.

This policy is a starting draft tailored to how Peak works today. Before you rely on it at launch, re-read it against the app’s final data practices and consider a quick professional review — it’s the document Apple and Google will check.