Yard Peek / Legal
Privacy Policy
Effective date: · Last updated:
At a glance
Your photos are sent for design processing only after in-app permission. You can delete saved work, withdraw permission and request account deletion. We have no advertising, tracking or data sales. This summary accompanies the full policy below.
1. Who is responsible
ROTUNDA TECH LTD is the publisher of Yard Peek and the controller of the personal information described in this policy. We are registered in England and Wales, company number 14755873. Our registered office is 2nd Floor College House, 17 King Edwards Road, Ruislip, London, United Kingdom, HA4 7AE.
For support, privacy questions or rights requests, email contact@yardpeek.com. This policy covers our iOS and Android app and this website at https://yardpeek.com. Our launch market is the United States. We explain UK GDPR and Data Protection Act 2018 rights and, where applicable, US state privacy rights below.
2. Information we collect
Using the app without signing in creates an anonymous account with a user ID. Optional Apple or Google sign-in gives us an email address and possibly a name. Apple may provide a private relay address.
When you use the app, we collect the content you submit: photos you choose or take, the areas you paint, style and element choices, optional notes, object descriptions and taps, generated designs, feedback, reports and support emails. Optional notes can contain up to 200 characters. We receive this content when you choose to submit it or use the related app tools. Do not include faces, house numbers or other private details in your photos or notes. Have permission for any personal information or private property you include.
Store purchases and subscription status are verified through a purchase verification provider. We never receive card details. We use Apple’s and Google’s device-check services to confirm that requests come from a genuine copy of the app. Server security logs contain IP addresses and timestamps. They never contain photos, notes, emails or tokens.
We do not use advertising, tracking, analytics or crash-reporting tools. We do not sell personal information. The website uses no cookies.
3. Why we use it and our lawful bases
We use information for the purposes below. A lawful basis is the legal reason for a use under UK data protection law.
| Purpose and information | Lawful basis |
|---|---|
| Create and maintain anonymous or optional sign-in accounts; store chosen content and saved work; provide design history and respond to service questions. | Contract: providing the service you request. |
| Send submitted photos, painted areas and design choices to our AI service providers to generate a requested design. | Consent: your in-app AI permission. |
| Verify purchases and subscription access using store transaction and subscription status. | Contract: supplying your purchase and allowance. |
| Check device integrity and use IP addresses and request logs to protect the app and website, prevent abuse and enforce fair limits. | Legitimate interests: operating a secure service and preventing misuse. |
| Review feedback, reports and support correspondence to resolve problems and protect the service. | Contract for requested support; legitimate interests in resolving reports and maintaining the service. |
| Keep records required by tax, accounting or other applicable law and respond to legally binding requests. | Legal obligation. |
We consider the impact on your rights when relying on legitimate interests. You can object to those uses as explained below. We do not use submitted photos to identify people or make decisions that produce legal or similarly significant effects about you.
4. AI permission and withdrawal
AI processing happens only after you give permission in the app. Your photos and choices are sent to our AI service providers. We send the content needed for your design request, including the photo and relevant painted areas, selections, notes or object descriptions.
Withdraw AI permission in Settings to stop new AI requests. This cannot undo processing that has already started. Withdrawal does not affect the lawfulness of earlier consent-based processing. We stop new consent-based requests when permission is withdrawn. You can also delete saved work or your account through Settings.
We do not use your photos to train AI models. This is a statement about our own use. We do not make a training promise on behalf of our AI service providers. Their copies of submitted content are subject to the retention information in section 7.
5. Service providers and disclosures
We use the following types of service providers for the listed purposes. They receive only the information necessary for those services, under contracts that require them to protect it. Apple and Google also handle store accounts and transactions under their own policies.
| Service provider | Purpose |
|---|---|
| Cloud hosting and storage providers | Accounts, database, file storage and our app server (United States and Germany) |
| AI service providers | Design generation, only after your in-app permission (United States) |
| Network security and delivery provider | Protects and delivers our app server and website; handles IP addresses and content in transit |
| Backup storage provider | Encrypted off-site backups |
| Purchase verification provider | Verifies store purchases and subscription status |
| Apple and Google | App stores, optional sign-in and device checks |
We may disclose relevant information when required by law, to respond to a valid legal request, or where necessary to establish, exercise or defend legal claims. Any such disclosure must have an appropriate lawful basis. We do not provide information to advertisers, sell it or share it for cross-context behavioral advertising.
6. International processing
We are a UK company. Our app server is located in Germany, in the European Union. Our cloud storage and AI service providers process data in the United States, where privacy laws may differ from those in the UK.
When information is transferred outside the UK, we rely on the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, included in each provider’s data processing agreement, or the UK Extension to the EU-US Data Privacy Framework where a provider is certified under it. Email contact@yardpeek.com to ask about relevant transfers or request a copy of the applicable safeguards.
7. How long information is kept
| Information | Retention |
|---|---|
| Saved work, including photos and generated designs | Until you delete the saved work or account |
| Photos and designs in our live systems after accepted account deletion | Deleted within 24 hours of an accepted account deletion request |
| Abandoned uploads | Deleted after 24 hours |
| Unused inputs | Deleted after 7 days |
| Backups | Encrypted database backups are kept for 14 days, then deleted. Backups do not contain photos or designs. If we ever restore a backup, we first re-apply all deletion requests, so deleted accounts and work stay deleted. |
| Copies held by AI service providers | We ask our AI service providers to delete generated images after 24 hours and not to store request data. Any copies they keep for safety and abuse monitoring are retained under their own terms, then deleted. |
| Purchase, legal and compliance records required by law | 6 years from the end of the financial year they relate to, as UK law requires |
| Server security logs | 30 days |
| Website host and CDN request logs | Up to 30 days |
Deletion from live systems is separate from backup expiry and records that must be retained to meet a legal obligation or handle legal claims. We keep support correspondence, feedback and reports only for as long as needed to resolve the matter and meet applicable legal requirements; ask us for the criteria relevant to your request.
Exported or shared copies are outside our control. Deleting work in the app cannot delete a copy you saved to Photos or sent to another person.
8. Your UK privacy rights
Subject to the conditions and exceptions in applicable law, you may request access to your information, correction of inaccurate information, erasure, restriction of use and portability of information. You may object to processing based on legitimate interests and withdraw consent at any time. These rights are different: withdrawing AI permission stops new requests, while deleting saved work or an account addresses stored information.
Email contact@yardpeek.com and explain the right you want to exercise. We may ask for enough account information to verify that you are the person concerned; do not send sensitive identity documents. We reply within one month. If a request is complex or there are several requests, the law may permit an extension; we will explain it within the initial month. If a request cannot be fulfilled, we explain the reason and the available complaint route.
You have the right to complain to the UK Information Commissioner’s Office at ico.org.uk. You can contact us first so we can try to resolve the concern.
9. Information for US residents
Depending on your state and whether its law applies to our service, you may have rights to know or access your information, obtain a portable copy, delete it, correct inaccuracies, and appeal a refusal. We do not discriminate against you for exercising an applicable privacy right.
The categories we collect are account identifiers and optional contact information; user-submitted photos and other content; purchase and subscription information; device-integrity information; and internet or network activity, including security IP addresses, timestamps and website request logs. Purposes and recipients are described in sections 3 and 5. Retention is described in section 7.
We do not sell personal information, share it for cross-context behavioral advertising or use it for targeted advertising. To make a request, email contact@yardpeek.com. We verify the request using relevant account information without asking for sensitive documents. We aim to reply within one month and meet any deadline required by the applicable state law. To appeal, reply to our decision at the same email address and explain why you want it reconsidered. We explain the appeal outcome and any further complaint route required by applicable law.
10. Children and eligibility
The app is not directed at children. You must be at least 13 to use Yard Peek. If you are under 18, you need permission from a parent or guardian to make purchases.
If you believe a child has provided information contrary to the app’s eligibility requirements, email contact@yardpeek.com so we can investigate and address the information.
11. Security and your choices
We use account access controls, device-integrity checks and security logging to protect the service. No system can guarantee complete security. Keep your Apple or Google account secure, and avoid uploading private identifying details. Server security logs contain IP addresses and timestamps. They never contain photos, notes, emails or tokens.
You can delete saved work, withdraw AI permission and delete your account in Settings. For account deletion, use Settings → Delete account, or email contact@yardpeek.com. Deleting your account does not cancel a store subscription. Cancel it in your store account settings. Read the account deletion page for the process and retained categories.
12. Website and policy changes
This website uses no cookies, advertising, tracking, analytics or third-party scripts. Our website host and network security provider still process IP addresses and request logs to deliver and protect the site. We keep website request logs for up to 30 days, as shown in section 7. Email links open your email application; your message is sent through your chosen email service.
We may update this policy when the service or its processing changes. The effective and last-updated dates appear at the top. Where law requires a specific notice or renewed consent, we provide it before the relevant change. Questions about this policy can be sent to contact@yardpeek.com.