Privacy Policy
Peplo ("we", "us") is a private real-time copilot. Privacy is the core of the product, and this policy explains plainly what we collect, what we deliberately do not collect, and how what we hold is used. It covers both the peploai.com website and the Peplo desktop application.
The short version: we never store, see, or transmit your conversations. Audio, screen content, questions, and AI answers go directly from your device to the AI provider you connect, or stay entirely on your device in local mode. What we keep is limited to your account email, plan, device identifiers, and daily usage counts.
1. What we collect on the website
- Waitlist email: if you join the waitlist, we store the email address you submit and use it to contact you about access to Peplo.
- Rate-limiting data: your IP address is processed briefly to prevent form abuse and is not used for profiling.
The website uses no advertising trackers and no third-party analytics.
2. What we collect in the app
- Account: your email address and a password. Passwords are handled by our authentication provider and stored only in hashed form; we never see them.
- Plan and license: your tier (free, trial, or Pro), trial and purchase dates, and license validity.
- Devices: a hashed machine identifier and the device name, used to enforce the two-device limit per account.
- Usage counts: daily totals such as number of sessions, questions, live minutes, and token counts. These are counters only and contain no content.
- App diagnostics: app version and operating system, used to understand adoption and support you.
- Feedback: if you send feedback from the app, we store the message and optional rating you write.
3. What we deliberately do not collect
- No conversation audio, transcripts, or recordings.
- No screenshots or screen content.
- No questions you ask and no AI answers you receive.
In bring-your-own-key mode, that content travels directly from your device to the AI provider you configured (for example Google Gemini or Groq) under your own API key and their terms. There is no Peplo server in that path. In local mode (Pro), AI runs on your own machine and that content never leaves it. A brief periodic online check keeps your license active; it carries no content.
4. Payments
Purchases are processed by Lemon Squeezy (lemonsqueezy.com), acting as merchant of record. Lemon Squeezy handles your payment details, taxes, and receipts under its own privacy policy; we never receive your card information. We receive confirmation of the purchase and the email used at checkout so we can activate your license.
5. Who processes data for us
- Supabase hosts our account database and authentication.
- Lemon Squeezy processes payments as merchant of record.
- Our web host serves this website and our email.
We do not sell or rent personal data to anyone, and we do not use it for advertising.
6. Security
Connections to our services use TLS. Session tokens on your device are encrypted at rest using your operating system's secure storage. Passwords are stored only as cryptographic hashes by our authentication provider.
7. Retention and your rights
Account data is kept for as long as your account exists. You can ask us at any time to access, correct, or delete the personal data we hold about you, including deleting your account entirely, by emailing support@peploai.com. Waitlist emails are deleted on request or when the waitlist is retired.
8. Children
Peplo is not directed at children under 16, and we do not knowingly collect their data.
9. Changes
If this policy changes, the new version will be published on this page with an updated date. Material changes will be flagged on the website or in the app.
10. Contact
Questions about privacy: support@peploai.com.