Privacy policy

Peel is built so that as little as possible leaves your phone. This page says exactly what does.

Last updated 22 September 2026. Peel (peelcam.com) is run by Here Together in India. Questions, requests and complaints: support@peelcam.com.

The short version

• Your camera frames are checked on your own phone and are not uploaded. Calls go directly between the two phones (or through our relay when a network needs it), and we do not record them.
• We keep what an account needs: the Google account identifier, your date of birth, gender, public name, age-check result, and payment records if you buy or earn.
• If you file a report, it carries evidence you chose to send. Reports and bans key on your device so bans hold.
• We do not sell your data, show ads, or run analytics or tracking cookies.

What we collect and why

Signing in with Google

Google sends us a signed token when you sign in. We check it and keep only the permanent identifier Google gives your account, which becomes your Peel account key. We do not store your Google email address, name or photo, and we ask Google for nothing beyond basic sign-in (openid, email, profile). You stay signed in with a session token that lasts up to 90 days.

Your profile

Your date of birth and declared gender (used to keep Peel 18+ and to match you), and the public name you choose, which other people see. Your account key is never shown to other people. Incognito calls use a throwaway alias.

The face age check

The check estimates your age from your camera, on your phone. The frames are not uploaded or kept. We store the outcome only: pass or fail, an age band (18–21 or 21+), a confidence figure, the model version and the time. Some 18–21 results are looked at by a human reviewer, who sees that record, not your face. Failed attempts are counted on your device (three failures lock it for 24 hours). A member of staff can verify your age another way on request, and records that they did, who did it and why. We can also turn the face check off for everyone for a few hours while a fault is fixed; no age result is recorded for anyone during that time, and adult rooms stay closed to them.

Calls, chat and safety checks

• Video and voice go peer-to-peer over WebRTC. When a network blocks that, they pass through our relay server, encrypted, and are not stored.
• The nudity check runs on each phone. Only its verdict (not the picture) is shared with the other person's app and, when a call ends for nudity, counted on our server.
• Chat during a call passes through our server and is not stored. A private-room message sent while the other person is offline is held until they collect it, for at most 30 days, and deleted if the room is deleted.
• Your avatar, voice persona, friends, call history and private-room chat live on your device, not on our server.

Reports

A report records the reason, who made it and who it is about (account, device token, device hash and IP address for both). If the reporter leaves evidence switched on, it also carries one small picture of what the reporter saw from the other person's camera, the recent safety-check verdicts and the last 20 chat lines. Reviewers use this to decide warnings and bans.

Device identifiers

So that a ban holds on a device and not just an account, your app keeps a random device token, and sends a one-way hash of browser and screen characteristics (how text is drawn, graphics chip, screen size, time zone, languages, processor count and similar). We also see your IP address. We keep the most recent of these for each account and with each report and ban. We count usage in aggregate, with device identifiers salted and hashed, for 90 days.

Payments and payouts

Purchases of diamonds and Premium are processed by Razorpay; we never see your card or UPI details, only the order, payment and subscription records Razorpay returns, which we keep with your account's balance and history. Cash-out is not open yet, so we do not collect PAN, bank or UPI details. When it opens, cashing out will need your PAN and the name on it, and your bank account or UPI id and account holder name, to pay you and to meet tax obligations (including TDS), and this policy will be updated first.

Services we rely on

• Google for sign-in (Google Identity Services) and web fonts (Google Fonts, which receives your IP address when fonts load).
• Razorpay for payments, when you buy something. Razorpay's own privacy policy applies to what you give it.

Everything else, including the relay server and our storage, runs on servers we operate in India. We share data with authorities only where Indian law requires it.

Storage on your device

Peel uses your browser's local storage, not cookies, for your session, profile, avatar, friends, private-room chat, the device token and age-check attempts. Signing out clears the account data; the device token and age-check attempts stay so that bans and lockouts cannot be reset by signing out.

How long we keep it

• Account and profile data: while your account exists.
• Held private-room messages: until collected, at most 30 days.
• Nudity strikes: 7 days. Aggregate usage counts: 90 days.
• Reports, ban records and age-check results: as long as needed to keep Peel safe, including after an account is deleted, so a ban cannot be evaded by starting over.
• Records of what Peel's admins do (who, what, when, why; never the content of a setting): one year.
• Payment, payout and tax records: as long as Indian tax and accounting law requires.

Your rights

Under India's Digital Personal Data Protection Act, 2023 you can ask to see, correct or erase your data, withdraw consent, and nominate someone to act for you. Write to support@peelcam.com from the Google account you use on Peel. We delete an account within 30 days of a verified request, except the records listed above that we must keep for safety or by law. You can change your public name and gender in the app, and delete your account yourself under Profile, Delete account: that takes effect at once, signs out every device, and keeps only those same records.

Children

Peel is only for people aged 18 and over. We refuse accounts that fail the age checks, and we ban devices where an under-18 result is found.

Security

Traffic is encrypted in transit, sessions are signed, and access to moderation tools is restricted. No system is perfectly secure; if we learn of a breach affecting you, we will tell you and the authorities as the law requires.

Changes and contact

We will update this page when what we do changes, and change the date above. Grievances and data requests go to our grievance officer at support@peelcam.com; we acknowledge within 24 hours and aim to resolve within 15 days.