Private by default, minimal by design

PeachMuse is operated by Playpeach LLC. This page explains how we handle your account, private media and payment information. For privacy questions, contact support@play-peach.com.

What the product stores

• Account identifier, email, display name, account state, service-notification preference, and Peach balance ledger.
• Private normalized reference images, versioned consent records, safety decisions, immutable character snapshots, scene version, generation job identifier, and generated outputs.
• Billing order and signed event identifiers; card data stays with the hosted payment provider.
• Safety reports, support cases, contact email, and pseudonymous rate-limit data.

Signing in with Google or email

If you choose Google sign-in, Google shares your account identifier, verified email address, name and profile picture with PeachMuse. We use these details to sign you in and connect you to your PeachMuseaccount. We do not request access to your Gmail, Drive, contacts or calendar. Authentication records are stored in our database, and OAuth tokens are encrypted at rest.

For email sign-in, Cloudflare processes your email address and the sign-in message to deliver a link that expires after ten minutes. We store a hash of the link token. Essential session cookies keep you signed in. Account deactivation revokes sessions and blocks sign-in, while retaining your account and authentication records.

Affiliate referrals

If you arrive through an affiliate link, a first-party cookie remembers the referral for 30 days. Creating a new account saves that referral to your account so qualifying purchases can be attributed for 12 months. We store the affiliate identifier and visit and signup dates, without an advertising profile or your full browsing URL.

Affiliates see referral counts and payment commissions, including refund adjustments. They do not receive your name, email, prompts, photos or videos. Payment and commission records may be retained with our billing records after account deletion. You can remove the referral cookie through your browser settings.

Reference-image privacy

The app re-encodes browser-supported reference images before upload and the server removes JPEG application metadata and comments again, including EXIF and GPS containers. Dimension, file-size, pixel-surface, and content-signature checks run before quarantined storage. References are used only to review and perform the requested generation.

Encrypted storage and access

Uploaded images and generated videos are stored privately in Cloudflare R2, which encrypts stored objects and their metadata with AES-256. Connections to PeachMuse use HTTPS. Access to private media is checked against your signed-in account; authorized team members and service providers can access content where needed for generation, support and safety. Storage encryption is not end-to-end encryption. See Cloudflare’s storage security documentation.

Completed videos stay in your private Library so you can retrieve, watch and download them again. You can remove videos from the Library when you no longer want them.

How media is used

We do not publish your private uploads or generated videos in a public feed, sell them, or use them to train models. To create your video, we process your chosen reference media and prompt with the PeachMusevideo-generation model. Approved videos are labeled as AI-generated in the app and have a separate machine-readable provenance record.

Signup country

We save Cloudflare’s approximate country estimate when you create your account to determine free signup offer eligibility and understand account activity by country. This is an IP-based estimate, not proof of residence, and can be affected by VPNs. We store the country code, estimate source and time for this feature, without adding IP address, city or GPS storage. Later visits do not change your signup country. Contact Support if the estimate is incorrect.

Drafts on your device

Unfinished creations are saved in this browser for up to 24 hours so you can return after signing in or buying Peaches. Drafts are cleared after confirmed creation or sign-out. Your image-use acknowledgment is saved to your account and does not need to be repeated for each draft.

Campaign links

When analytics is enabled, we store campaign labels from tagged links and a random browser cookie for 30 days. Your first tagged visit can be linked to a new account and confirmed purchases to measure campaign results. Turning analytics off removes this cookie and stops new campaign collection. No full referral URLs or browsing histories are stored for this measurement.

Retention and deletion

Unsaved references become eligible for cleanup after seven days unless an active job requires them. Saved photos remain until you delete them. Manage photos in Saved photos, temporary references in its Other uploads menu, and finished videos in your library. Deleting a photo removes it from future use; videos already created remain until you delete them. Account data export and deactivation are available in Account. Deactivation cancels subscriptions and stops running generations, but retains your account, media (subject to ordinary retention), and credit history. Re-registration does not reset free offers. For account and data deletion, email support@play-peach.com. Legal evidence holds for abuse reports may override ordinary deletion where required.

Who receives data

When you connect Telegram, we store your Telegram user ID and display name to link payments to your existing PeachMuse account. We retain charge identifiers, plan amounts, renewal state and credit receipts for billing and payment disputes. Short-lived account-link tokens are stored as hashes. We do not request your Telegram phone number or contacts, and the billing bot does not receive your private media. Telegram Stars payments do not give PeachMuse your card details, but they are not fully anonymous: payments remain linked to your Telegram and PeachMuse accounts. Telegram receives the invoice details and your payment, and the service used to buy Stars may hold payment information; their privacy policies apply. Account deactivation removes the active Telegram link and link challenges while retaining the minimum financial records needed for refunds and obligations.

Cloudflare provides hosting, database, file storage and email services. Google handles Google sign-in, PeachMuse’s video-generation model processes generation requests, and Telegram handles Stars payments. These services receive the information needed for the features you use. Their processing is also subject to their respective terms and privacy policies.

Your controls

Use Account to edit your profile, change service email preference, inspect or revoke consent, export data, remove eligible references, sign out, or deactivate the account. Support handles privacy requests and appeals; the safety form handles urgent non-consensual content and minor-safety concerns.