Private by default, minimal by design

PeachMuse is operated by Playpeach LLC. This page explains how we handle your account, private media and payment information. For privacy questions, contact support@peach-muse.com.

What the product stores

• Account identifier, email, display name, account state, service-notification preference, and Peach balance ledger.
• Private normalized reference images, versioned consent records, safety decisions, immutable character snapshots, scene version, generation job identifier, and generated outputs.
• Billing order and signed event identifiers; card data stays with the hosted payment provider.
• Safety reports, support cases, contact email, and pseudonymous rate-limit data.

Signing in with Google or email

If you choose Google sign-in, Google shares your account identifier, verified email address, name and profile picture with PeachMuse. We use these details to sign you in and connect you to your PeachMuseaccount. We do not request access to your Gmail, Drive, contacts or calendar. Authentication records are stored in our database, and OAuth tokens are encrypted at rest.

For email sign-in, Cloudflare processes your email address and the sign-in message to deliver a link that expires after ten minutes. We store a hash of the link token. Essential session cookies keep you signed in. Account deactivation revokes sessions and blocks sign-in, while retaining your account and authentication records.

Affiliate referrals

If you arrive through an affiliate link, a first-party cookie remembers the referral for 30 days. Creating a new account saves that referral to your account so qualifying purchases can be attributed for as long as the account exists. We store the affiliate identifier and visit and signup dates, without an advertising profile or your full browsing URL.

Affiliates see referral counts and payment commissions, including refund adjustments. They do not receive your name, email, prompts, photos or videos. Payment and commission records may be retained with our billing records after account deletion. You can remove the referral cookie through your browser settings.

Supplied characters

We do not accept customer images or videos as generation inputs. We store your prompt, selected fictional character identifiers and internal character references to perform your generation.

PlayPeach promotions

Library and first-entry promotions link to PlayPeach with fixed campaign labels. These links do not transfer your account, prompts or media. A browser preference remembers dismissal of the introduction. Accounts and Peach balances remain separate.

Encrypted storage and access

Uploaded images and generated videos are stored privately in Cloudflare R2, which encrypts stored objects and their metadata with AES-256. Connections to PeachMuse use HTTPS. Access to private media is checked against your signed-in account; authorized team members and service providers can access content where needed for generation, support and safety. Storage encryption is not end-to-end encryption. See Cloudflare’s storage security documentation.

Completed videos stay in your private Library so you can retrieve, watch and download them again. You can remove videos from the Library when you no longer want them.

How media is used

We do not publish your private uploads or generated videos in a public feed, sell them, or use them to train models. To create your video, we process your chosen reference media and prompt with the PeachMusevideo-generation model. Approved videos are labeled as AI-generated in the app and have a separate machine-readable provenance record.

Signup country

We save Cloudflare’s approximate country estimate when you create your account to determine free signup offer eligibility and understand account activity by country. This is an IP-based estimate, not proof of residence, and can be affected by VPNs. We store the country code, estimate source and time for this feature, without adding IP address, city or GPS storage. Later visits do not change your signup country. Contact Support if the estimate is incorrect.

Drafts on your device

Unfinished creations are saved in this browser for up to 24 hours so you can return after signing in or buying Peaches. Drafts are cleared after confirmed creation or sign-out. Your image-use acknowledgment is saved to your account and does not need to be repeated for each draft.

Product steps

Unless you turn analytics off, we note the first time your account reaches key steps in the app, such as opening a scene, adding a photo, tapping Generate or opening the plans, with the time it happened. This tells us where people get stuck. It records the step only, never your photos, prompts or videos.

Campaign links

When analytics is enabled, we store campaign labels from tagged links and a random browser cookie for 30 days. Your first tagged visit can be linked to a new account and confirmed purchases to measure campaign results. Turning analytics off removes this cookie and stops new campaign collection. No full referral URLs or browsing histories are stored for this measurement.

Advertising links

If you arrive from a TrafficJunky ad, this browser tab keeps the ad's click identifier. When you open the PlayPeach link, it goes along to play-peach.com, which measures that ad as described in PlayPeach's privacy page, where you can turn it off. PeachMuse itself sends nothing to TrafficJunky.

Retention and deletion

Photo and video references have no automatic expiry. Saved and unsaved references remain until you delete them. Manage photos in Saved photos, temporary references in its Other uploads menu, and finished videos in your library. Deleting a photo removes it from future use; completed videos remain available to watch, download and share until you delete them. Explicitly withdrawing permission still blocks videos made from that reference. Account data export and deactivation are available in Account. Deactivation cancels subscriptions and stops running generations, but retains your account, media, and credit history. Re-registration does not reset free offers. You can permanently delete your account and media in Account settings. We retain a keyed fingerprint of your email to prevent that email from opening another account or claiming free offers. Billing and safety records may remain where needed for disputes or legal obligations. For help, email support@peach-muse.com. Legal evidence holds for abuse reports may override ordinary deletion where required.

Who receives data

When you connect Telegram, we store your Telegram user ID and display name to link payments to your existing PeachMuse account. We retain charge identifiers, plan amounts, renewal state and credit receipts for billing and payment disputes. Short-lived account-link tokens are stored as hashes. We do not request your Telegram phone number or contacts, and the billing bot does not receive your private media. Telegram Stars payments do not give PeachMuse your card details, but they are not fully anonymous: payments remain linked to your Telegram and PeachMuse accounts. Telegram receives the invoice details and your payment, and the service used to buy Stars may hold payment information; their privacy policies apply. Account deactivation removes the active Telegram link and link challenges while retaining the minimum financial records needed for refunds and obligations.

Cloudflare provides hosting, database, file storage and email services. Google handles Google sign-in, PeachMuse’s video-generation model processes generation requests, and Telegram handles Stars payments. Twilio SendGrid sends our tips-and-offers emails. These services receive the information needed for the features you use. Their processing is also subject to their respective terms and privacy policies.

Emails

Besides account and service emails, we may send occasional tips and offers about PeachMuse to the email on your account. We count clicks in total, not per person, to improve them. Every one of these emails has a one-click unsubscribe link.

Your controls

Use Account to edit your profile, change service email preference, inspect or revoke consent, export data, remove eligible references, sign out, or deactivate the account. Support handles privacy requests and appeals; the safety form handles urgent non-consensual content and minor-safety concerns.