Privacy Policy

Last Updated: August 9, 2026

1. Introduction

Buck ("Buck," "we," "us," or "our") is a content-saving and action-planning mobile application operated by Good Peak LLC ("the Company"), a limited liability company organized in New York, USA.

This Privacy Policy describes how we collect, use, disclose, and protect information when you use the Buck iOS application (the "App"). It also describes the rights and choices available to you.

This Policy is incorporated into, and should be read alongside, our Terms of Service. If you do not agree with this Policy, please do not use the App.

2. Information We Collect

We collect information in three ways: what you give us directly, what we collect automatically, and what we receive from third parties (like Apple).

2.1 Content You Save

When you use Buck's share extension to save content from third-party platforms (such as TikTok, Instagram, or Google Maps), we collect:

  • The shared URL, link, or content reference

  • Screenshots or images you share to the App

  • Any text, captions, or metadata accompanying the shared content

  • Categories, tags, notes, and reminders you add to saved items

2.2 Account Information

When you create an account via Sign in with Apple, we receive:

  • Your name and email address, or Apple's private relay email address if you choose to hide your email

2.3 Content Processing via AI (Anthropic Claude API)

To extract structured information from saved content (for example, identifying a restaurant name, location, or category from a shared link or screenshot), we transmit the relevant content to Anthropic, PBC via the Claude API for processing.

Anthropic processes this data under its Commercial Terms of Service, which govern API usage. Anthropic does not use API inputs or outputs to train its models, and by default does not retain your prompts or Claude's outputs after a response is returned. The exception is content flagged by Anthropic's automated trust-and-safety systems, which may be retained for up to two years, or where retention is otherwise required by law.

2.4 Subscription and Payment Information

Subscriptions are sold and billed entirely by Apple through the App Store. We never receive or store your payment card details. Apple shares limited transaction data with us (such as subscription status, product identifier, and renewal/expiration dates) so we can manage your entitlements in the App.

2.5 Automatically Collected Information

When you use the App, we and our service providers automatically collect:

  • Subscription and revenue events, via RevenueCat, including purchase, renewal, and cancellation events, and entitlement status

  • Usage and device data, via Supabase (our backend database and authentication infrastructure), including device model, OS version, app version, and app usage events necessary to operate the App

  • Email engagement data, via Loops, our email service provider, for transactional and (if applicable) marketing emails — including whether an email was delivered, opened, or clicked

We do not use IDFA or any identifier requiring Apple's App Tracking Transparency prompt.

2.6 Location Data

[DESCRIBE LOCATION USAGE HERE, IF ANY]

3. How We Use Your Information

We use the information described above to:

  • Provide and maintain the App's core functionality — saving, organizing, categorizing, and reminding you about saved content

  • Process shared content through AI extraction to auto-categorize and structure your saves

  • Create and manage your account and subscription entitlements

  • Diagnose problems, maintain security, and improve the App

  • Communicate with you about your account, service updates, or support requests

  • Comply with legal obligations

We do not use your saved content to train AI models, and we do not use your data for third-party advertising.

4. How We Share Your Information

We do not sell or rent your personal information, and we do not share it for cross-context behavioral advertising.

We disclose information only as follows:

  • With Anthropic (Claude API), solely to process saved content as described in Section 2.3, under Anthropic's Commercial Terms of Service

  • With Apple, for authentication (Sign in with Apple), subscription billing, and entitlement verification

  • With service providers, who process data on our behalf under contractual confidentiality and data-protection obligations and are not permitted to use it for their own purposes:

    • Supabase, for backend database hosting and authentication

    • RevenueCat, for subscription and entitlement management

    • Loops, for transactional and marketing email delivery

  • For legal reasons, if required by law, subpoena, or legal process, or to protect the rights, property, or safety of the Company, our users, or the public

  • In connection with a business transaction, such as a merger, acquisition, or sale of assets, in which case user information may be transferred as a business asset (we will notify you of any such change in ownership or use of your data)

5. International Data Transfers

Buck is available to users in the United States, United Kingdom, European Economic Area, and California. Our servers and service providers (Supabase, RevenueCat, Loops, and Anthropic) may process and store data in the United States or other countries. Where we transfer personal data from the EEA or UK to a country that has not received an adequacy decision, we rely on Standard Contractual Clauses (SCCs) or another valid transfer mechanism with our processors.

6. Data Retention

We retain your account information and saved content for as long as your account is active. When you delete your account, your saved content, account information, and associated data are permanently deleted from our systems (Supabase) within 30 days, except where a shorter or longer period is required to:

  • Comply with a legal obligation

  • Resolve disputes or enforce our agreements

  • Maintain accurate financial and subscription records (subscription/transaction history may be retained longer as required by tax law)

Data already sent to Anthropic for processing is governed by Section 2.3 and is not retained by Anthropic beyond generating a response, except as described there.

7. Your Privacy Rights and Choices

7.1 All Users

  • In-app account deletion. You can permanently delete your account and all associated data at any time from within the App, under Settings > Delete Account. Deletion is initiated and completed directly in the App, without requiring a support request, in compliance with Apple App Store Review Guideline 5.1.1(v).

  • Permissions. You can revoke the App's access to photos or location at any time via iOS Settings.

  • Push notifications. You can disable push notifications at any time via iOS Settings.

7.2 California Residents (CCPA/CPRA)

California residents have the right to:

  • Know what personal information we collect, use, and disclose

  • Delete personal information we hold about you

  • Correct inaccurate personal information

  • Opt out of the sale or sharing of personal information (we do not sell or share personal information as defined by the CCPA)

  • Non-discrimination for exercising these rights

We honor Global Privacy Control (GPC) signals as a valid opt-out request where applicable. To exercise these rights, contact us at goodpeakllc@gmail.com.

7.3 EEA/UK Users (GDPR)

  • Our lawful basis for processing your information is performance of a contract (to provide core app functionality, such as saving and organizing content) and legitimate interests (for analytics, security, and product improvement, balanced against your privacy interests).

  • You have the right to access, rectify, erase, restrict, or port your data, and to object to certain processing.

  • You have the right to lodge a complaint with your local data protection authority (in the UK, the ICO; in the EEA, your national supervisory authority).

  • To exercise these rights, contact us at goodpeakllc@gmail.com.

8. Children's Privacy

Buck is not directed to children under 13 (or under 16 where required by applicable law), and we do not knowingly collect personal information from children under this age. If we learn that we have inadvertently collected such information, we will delete it promptly. If you believe a child has provided us with personal information, contact us at goodpeakllc@gmail.com.

9. Data Security

We use reasonable administrative, technical, and physical safeguards designed to protect your information, including encryption in transit, access controls, and encrypted storage. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will update the "Last Updated" date above, and for material changes, we will notify you through the App or by other reasonable means before the change takes effect.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, contact us at:

goodpeakllc@gmail.com Good Peak LLC 418 Broadway STE N, Albany, NY 12207 USA