PAST PEEK — PRIVACY POLICY

Effective date: September 25, 2026 · Last updated: October 13, 2026

1. About this policy

Past Peek LLC ("Past Peek", "we", "us", "our"), a Nevada limited liability company at 3395 S Jones Blvd, Las Vegas, NV 89146-6729, United States, operates the Past Peek app and the website at pastpeekapp.com (together, the "Service").

This policy explains what personal information we collect, why we collect it, who we share it with, how long we keep it, and what choices and rights you have. It applies to everyone who uses the Service, including children whose parents have added them to a household plan. Past Peek LLC is the controller of the personal information described here.

2. The short version

We collect the information needed to run an account, personalise reading recommendations, deliver the notifications you have asked for, and manage subscriptions.

We do not sell your personal information, and we do not share it for cross-context behavioural advertising.

We do not show third-party advertising in the app, and we never use a child's information for targeted advertising.

We never see or store your payment card details. Apple and Google handle payment.

Children under 13 cannot register on their own. A parent or guardian creates the account, gives consent, and can review or delete the child's information at any time. Section 5 sets this out in full.

You can delete your account, and the information in it, from the app's settings at any time.

This summary is for convenience only; the sections below govern.

3. Information we collect

3.1 Information you give us

3.2 Information collected automatically

The app does not use cookies or similar tracking technologies for advertising. Our website uses only cookies strictly necessary to operate and secure the site; it does not use advertising or cross-site tracking cookies.

3.3 Information from third parties

Sign in with Google or Apple. If you sign in this way, the provider gives us your email address and, where available, your name. We do not receive your password. If you use Apple's Hide My Email, we receive a relay address and that is the address we hold.

Subscription status. Apple, Google and our subscription management provider tell us whether a subscription is active, when it renews or expires, and when it is cancelled or refunded. They do not give us your payment card details.

3.4 What we do not collect

Payment card numbers, bank details or billing addresses. All payment is processed by Apple or Google.

Precise geolocation.

Contacts, photos, microphone or camera data.

Special category data such as health, biometric, racial or ethnic origin, religion or sexual orientation.

4. How we use information

We use personal information for the purposes below. The final column states the legal basis under the UK and EU General Data Protection Regulation, which applies if you are in the United Kingdom or the European Economic Area.

We do not use personal information to make decisions producing legal or similarly significant effects about you by automated means. Recommendations are automated but affect only which content you are shown.

Children. We use a child's information only to provide the Service to that child: showing age-appropriate content, recommendations and reminders. We do not use it for marketing, for profiling for advertising, or for any purpose beyond operating the Service. See Section 5.

5. Children's privacy

This section applies to children under 13 and is written for parents and guardians. It reflects our obligations under the U.S. Children's Online Privacy Protection Act (COPPA).

5.1 Children cannot register on their own. Our sign-up flow does not permit a person under 13 to create an account independently. A child under 13 can use Past Peek only when a parent or legal guardian adds the child to the adult's household plan.

5.2 Parental consent. When you add a child under 13, you confirm that you are that child's parent or legal guardian and you consent to our collection and use of the child's information as described in this policy. We rely on the parent's role as Account Owner, and on the parent's own account and payment relationship with Apple or Google, as the basis for that consent.

5.3 What we collect from a child. A child's username or display name, age tier or date of birth, chosen interest categories, reading activity and progress, saved library items and tags, article ratings, device and diagnostic data, and a push notification token if notifications are enabled on that device. We collect no more than is reasonably necessary for the child to take part in the Service.

5.4 What we do not do with a child's information. We do not use it for advertising of any kind; we do not build profiles for advertising; we do not sell or share it; we do not disclose it publicly; and we do not send marketing email to a child. We do not condition a child's participation on disclosing more information than is reasonably necessary.

5.5 Who we disclose a child's information to. Only to the service providers listed in Section 6 that host our systems, manage subscriptions and deliver notifications, each of which is bound to use it only to provide services to us, and where disclosure is required by law or to protect a child's safety.

5.6 Your rights as a parent. At any time you may:

• review the personal information we hold about your child; • ask us to delete it; • refuse to permit any further collection or use of it, by removing the child from your plan or deleting the account; and • withdraw your consent.

You can do the first three from the app: open the child's profile in your household settings, or delete the account from the app's settings. To make a request directly, email pastpeekapp@gmail.com from the address on the Account Owner's account, giving the child's profile name. We will verify that you are the Account Owner before acting, and we will respond within 30 days.

If you ask us to delete a child's information or refuse further collection, we may no longer be able to provide the Service to that child.

5.7 Retention. We keep a child's information only as long as reasonably necessary to provide the Service, and delete it when the child is removed from the plan, when the account is deleted, or on your request.

5.8 If a child registers without consent. If we learn that a person under 13 has provided us with personal information without verifiable parental consent, we will delete it promptly. If you believe this has happened, contact pastpeekapp@gmail.com.

5.9 Teens aged 13 to 17. A teen may register with a parent's agreement to our Terms. We do not sell or share a teen's personal information, and we do not use it for targeted advertising.

6. How we share information

We do not sell personal information, and we do not share it for cross-context behavioural advertising. We disclose it only as set out below.

6.1 Service providers. We use the following providers, each bound by contract to use the information only to provide services to us:

We will name any additional provider in this policy before it begins processing personal information for us.

6.2 App stores. Apple and Google process your purchase and tell us the status of your subscription. Their handling of your information is governed by their own privacy policies.

6.3 Within your household. An Account Owner can see the profiles on their own plan, manage seats, and set the content age tier for a child's profile. Each member's library, tags and reading history belong to that member's own profile.

6.4 Legal and safety. We may disclose information where we reasonably believe it is necessary to comply with a law, regulation, subpoena or court order; to enforce our Terms; to detect or prevent fraud or a security incident; or to protect the rights, property or safety of Past Peek, our users or the public, in particular the safety of a child.

6.5 Business transfers. If we are involved in a merger, acquisition, financing or sale of assets, information may be transferred as part of that transaction. We will give notice before your information becomes subject to a materially different privacy policy.

6.6 With your direction. When you use the share feature, you choose what to share and with whom, through your device's sharing options.

7. How long we keep information

When you delete your account, we delete or irreversibly de-identify the personal information associated with it within 30 days, other than records we are required to keep. Your email address is released so it can be used to register again. Backups are overwritten on our ordinary backup cycle, within 90 days.

8. How we protect information

We use technical and organisational measures appropriate to the risk, including encryption of data in transit, encryption of data at rest, hashed and salted password storage, access controls limiting who on our side can reach personal information, and administrative access through named accounts.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a breach occurs that affects your personal information, we will notify you and the relevant authorities where the law requires.

9. International transfers

We operate from the United States, and personal information is processed and stored there. Privacy laws in the United States may differ from those where you live.

If you are in the United Kingdom or the European Economic Area and we transfer your information to the United States or elsewhere, we rely on the European Commission's Standard Contractual Clauses, together with the UK Addendum where applicable, and on any additional safeguards required. You may request a copy of the safeguards by writing to pastpeekapp@gmail.com.

10. Your rights and choices

10.1 Everyone. Whatever your location, you can:

• see and edit your profile, interests and notification settings in the app; • turn push notifications off in the app or in your device settings; • delete your account, and the information in it, from the app's settings; and • contact us at pastpeekapp@gmail.com with any privacy question or request.

10.2 California residents. Under the California Consumer Privacy Act as amended, you have the right to know what personal information we collect, use and disclose and the categories of source and recipient; to access a copy in a portable form; to correct inaccurate information; to delete your information, subject to exceptions; to opt out of sale or sharing for cross-context behavioural advertising; to limit the use of sensitive personal information; and not to be discriminated against for exercising these rights.

We do not sell personal information and we do not share it for cross-context behavioural advertising, and we have not done so in the preceding twelve months, including for consumers under 16. We do not collect sensitive personal information for the purpose of inferring characteristics.

To exercise a right, email pastpeekapp@gmail.com. We will verify your identity, normally by confirming control of the email address on the account, and respond within 45 days, extendable by a further 45 days where necessary. An authorised agent may act for you with proof of authorisation.

10.3 Other U.S. states. If you live in a state with a comprehensive privacy law, including Colorado, Connecticut, Virginia, Utah, Texas and Oregon among others, you have comparable rights of access, correction, deletion, portability and opt-out, and a right to appeal a refusal. Use the same contact address and tell us your state. If we refuse a request, we will explain why and how to appeal.

10.4 Nevada residents. Nevada law gives residents the right to direct us not to sell certain personal information. We do not sell personal information, but you may submit a request to pastpeekapp@gmail.com.

10.5 United Kingdom and European Economic Area. If you are in the UK or EEA, you have the right of access, rectification, erasure, restriction of processing, data portability, and objection to processing based on legitimate interests; the right to withdraw consent at any time without affecting processing already carried out; and the right to lodge a complaint with your supervisory authority, or with the Information Commissioner's Office in the UK.

10.6 Marketing. You can unsubscribe from marketing email using the link in the message. We will still send emails necessary to operate your account.

10.7 No discrimination. We will not deny you the Service, charge a different price or give you a lower quality of service because you exercised a privacy right.

11. Push notifications

If you allow notifications, we store a push token for your device and use it to send the notifications you have enabled: a daily recommendation, a reminder to continue an article you paused, and a streak reminder. You can turn any of them off in the app's settings, and turn all of them off in your device settings. Turning them off does not affect the rest of the Service.

12. Automated recommendations

We generate reading recommendations automatically from the interest categories you choose, your reading history and the articles you rate. This decides only which content is suggested to you. You can change your interests at any time, and doing so changes what you are shown.

13. Third-party links

The Service may link to third-party websites and to the App Store and Google Play. We do not control those sites and are not responsible for their privacy practices. Read their policies before giving them information.

14. Changes to this policy

We may update this policy. We will change the "Last updated" date above and, where a change is material, give notice in the app or by email before it takes effect. Where the law requires consent to a change, in particular any material change to how we handle a child's information, we will obtain it before the change applies. Previous versions are available on request.

15. How to contact us

For any privacy question, request or complaint, including a parent's request about a child's information:

Past Peek LLC 3395 S Jones Blvd, Las Vegas, NV 89146-6729, United States Email: pastpeekapp@gmail.com Website: pastpeekapp.com

We aim to respond within 30 days, and within the shorter period any applicable law requires.