Privacy policy
Last updated 18 October 2026
peaq is made by rūkī, who decide how your data is used (the “controller” in privacy law). This page says what we collect, why, who else handles it, and what you can ask of us. Questions or requests: admin@ruki.es.
What we collect
- Your Google account details: its ID, your name and your email, when you sign in or sign up. We ask Google for nothing else: no contacts, no calendar, no files. We never see your Google password.
- What you add to peaq: your workouts (day, sport, title, duration, distance, load, steps, whether done or missed) and the words you typed to describe them.
- Your settings: your theme, and the time zone your device reports, so “today” is right wherever you are.
- The invitation code you used, and when.
- Technical records: a sign-in session, and short-lived counters keyed to your network address to stop people guessing invitation codes. Our servers also keep ordinary logs of errors and events.
We do not collect payment details, location, health data from devices, contacts, or anything for advertising. There are no ads and no tracking or analytics cookies.
Why we use it
- To give you peaq: sign you in, show your calendar, calculate your load. (This is the contract we have with you.)
- To keep it secure and fair: stop abuse, fix faults. (Our legitimate interest in running a safe service.)
We do not sell your data, and we do not use it to profile you.
Cookies and browser storage
One cookie keeps you signed in, and one short-lived cookie protects the Google sign-in step. Both are essential, so there is no cookie banner. Your browser also remembers, for the tab only, the words you have typed in the box at the bottom, so a reload does not lose them.
Who else handles your data
- Google, to sign you in.
- Fly.io, which runs the app on servers in Frankfurt, Germany.
- Neon, which stores the database.
Today, peaq reads your workout descriptions with its own rules, and nothing is sent to an AI provider. If we turn on an AI model to understand descriptions better, we will say so here first. Only the words you type, the day, your distance units, and how many recent workouts you have in each sport would be sent: never your name or email.
How long we keep it
Your account and workouts stay until you ask us to delete them. Sign-in sessions end after a few days. Security counters and logs are short-lived. Invitation codes stay as a record of whether they were used.
Your rights
You can ask us for a copy of your data, to correct it, to delete it, to limit how we use it, or to object to it, and to receive it in a usable format. Write to admin@ruki.es and we will answer within a month. To delete your account, ask the same way: we remove it and all your workouts. If you think we handled your data wrongly, you can complain to your data protection authority; in Spain that is the Agencia Española de Protección de Datos (aepd.es).
Changes
If this policy changes in a way that matters, we will tell you in peaq or by email. The date at the top shows when it was last updated.