Privacy Policy
Version 2 · Effective 2 October 2026
What changed in version 2: we've updated this policy to match how PeakX works today. It now covers bookings and group chats, logbook validation and signatures, guest bookings, blocking and reporting, feedback reports, and where your data is stored. We've removed data types we don't collect, such as phone numbers and payment details.
1. Who we are
PeakX ("PeakX", "we", "us") is operated by M2X TECHNOLOGIES FZCO, registered in the United Arab Emirates under licence/registration number 92258 (International Free Zone Authority, IFZA), at DSO-IFZA, IFZA Properties, Dubai Silicon Oasis, Dubai, United Arab Emirates. We are the controller of your personal data.
This policy explains what data we collect when you use the PeakX app and website, why we collect it, who we share it with, and your rights. We comply with:
- the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL);
- the EU and UK General Data Protection Regulation (GDPR), where they apply;
- other local laws that apply to you.
Privacy questions: support@peakxapp.com
2. Data we collect
2.1 Data you give us
- Account: your name, email address and password. We store passwords only in hashed form, which nobody at PeakX can read.
- Profile:
- profile photo, bio and Instagram handle;
- whether you're an athlete or a coach;
- licence type, jump count, starting jump count and tunnel time;
- skills, languages, and home and affiliated dropzones.
- Licences and certificates: licence numbers, membership cards and certificates you upload.
- Logbook:
- jumps and tunnel sessions: date, venue, aircraft, altitude, freefall time, jump type, gear and notes;
- photos;
- the people you tag;
- incident notes.
- Starting-point photo: an optional photo of your paper logbook. Only you can see it.
- Signature: the signature you save to validate other people's jumps.
- Bookings:
- booking requests and bookings: service, date, time, location, price and notes;
- the people on a booking;
- reasons and notes when a booking is cancelled, declined or changed, or someone leaves or is removed.
- Messages: one-to-one and group chats, including chats for events and bookings.
- Reviews and ratings you give coaches.
- Events: events you create, sign up for or host.
- Friends, blocks and reports: your friend connections, the people you block, and the reports you submit, including the reported message text.
- Feedback and issue reports:
- your message and any screenshot you attach;
- the screen you were on;
- your device model, operating system and app version.
- Support requests you send us.
- Previous Android test sign-ups (website): Google account emails collected before the public Android launch to provide test access and download links. The website no longer collects Android test sign-ups.
2.2 Data about other people that you give us
- In-person signatures: if someone signs your jump in person on your device, we store their licence number and signature with your jump. The signer may not be a PeakX user. Only record a signature with the signer's agreement.
- Guest bookings: coaches can record the name of someone who isn't on PeakX, plus a private note (for example a phone number). Only that coach can see the note. Coaches must have the guest's permission.
- Tags: when you tag someone on a jump or a booking request, they're notified and can see that item.
2.3 Data collected automatically
- Location: with your permission, your location is used to show nearby dropzones and events and to check you in at a dropzone. We don't track your location in the background.
- Check-ins: the dropzone and time when you check in.
- Device and app information: device type, operating system, app version, time zone and push notification tokens.
- App activity: for example when you last saw your catch-up feed, which tips you've dismissed, and what you search for in the app. Some of this is stored only on your device.
- Coach response data: how quickly a coach first replies to booking requests.
2.4 Data from third parties
- Google Maps Platform: dropzone and tunnel details, photos, ratings and opening hours.
3. How we use your data, and why
| Purpose | Legal basis |
|---|---|
| Creating and running your account and profile | Contract |
| Logbook, jump numbering, validation and PDF export | Contract |
| Bookings, booking chats, reminders and booking notifications | Contract |
| Messages, friends, events and tagging | Contract |
| Showing nearby dropzones and events, and check-ins | Consent (location permission) |
| Push notifications | Consent (notification permission), which you can turn off at any time in Settings |
| Coach reply-time badges and booking response reminders (see section 5) | Legitimate interests: reliable bookings for athletes |
| Asking you to review a coach after a booking | Legitimate interests: trustworthy reviews |
| Keeping validated logbook records intact after the signer deletes their account | Legitimate interests: the integrity of other users' logbooks |
| Blocking and reports, and keeping the community safe | Legitimate interests and legal obligation |
| Improving PeakX from feedback and issue reports | Legitimate interests |
| Security and fraud prevention | Legitimate interests |
| Complying with the law | Legal obligation |
We don't sell your personal data, and we don't use it for third-party advertising.
4. Who can see what
- Your profile is visible to other PeakX users, apart from people you've blocked and people who have blocked you. That covers your name, photo, bio, jump count (shown as "X jumps · Y verified in PeakX"), licence type, home dropzone, skills and languages.
- Coach profiles are public to all users, including services, prices, locations, ratings, reviews and the reply-time badge.
- Your logbook: each jump is visible only to you and the people you tag on it.
- Incident notes are visible only to you. People you tag can add their own incident notes to their copy of the jump, and you can't see those either.
- Your starting-point photo and the history of changes to your jump total are visible only to you.
- Signatures and licence numbers you give when validating someone's jump are visible to that person, and appear on their logbook and PDF export.
- Reviews are public, with your name.
- Messages are visible only to the people in that chat. People who leave a group chat keep the messages from while they were a member.
- Bookings are visible to the coach and the people on the booking. Reasons and notes for cancelling, declining or removing someone are shared only with the people they're meant for.
5. Automated decisions affecting coaches
If a coach doesn't respond to booking requests within the set time, PeakX sends reminders. If they still don't respond, their coach profile is automatically marked inactive and hidden from search. Replying to the athlete reactivates it straight away. Coaches can contact us at support@peakxapp.com at any time to question this.
We also show a reply-time badge on coach profiles, based on how quickly the coach replied to requests in the last 90 days.
6. Who we share data with
We share personal data only with:
- Other users, as described in section 4.
- Service providers that process data on our behalf, under contract:
| Provider | What for | Where |
|---|---|---|
| Supabase | Database, authentication, file storage and server functions | Mumbai, India |
| Lovable | Website hosting | Global |
| Google Maps Platform | Maps, dropzone search, details and photos | Global |
| Google Firebase Cloud Messaging and Apple Push Notification service | Push notifications | Global |
| Google Workspace | Sending emails, such as booking reminders and replies to support and feedback | Global |
| Unsplash | Event and cover images | Global |
- Legal requirements: when required by law, a court order, or to protect the safety of our users or others.
- Business transfers: if PeakX is acquired or merges with another company. We'll tell you before your data becomes subject to a different privacy policy.
Google Maps: PeakX uses Google Maps features. Your use of them is subject to the Google Privacy Policy.
Images: images from Google and Unsplash load directly from their servers, so those providers receive your device's IP address.
7. International transfers
Your data is stored in India (Supabase, Mumbai region) and may be processed in other countries where our providers operate. Where the law requires it, we rely on appropriate safeguards for these transfers, such as standard contractual clauses in our data processing agreements. Contact us for more information.
8. How long we keep data
| Data | How long |
|---|---|
| Account and profile | Until you delete your account. It's deleted straight away, and removed from backups within 30 days. |
| Your logbook | Deleted with your account. Two things stay in other people's logbooks: copies of your jumps that others added, and signatures you gave on their jumps (your name, licence number and signature). They stay so that their validated records remain intact. |
| Messages | Deleted with your account. Messages you sent stay visible to the people you sent them to, shown as from "Deleted user". |
| Bookings | If an athlete deletes their account, they're removed from their bookings, and the coach and other people on the booking keep their record. If a coach deletes their account, their bookings are deleted for everyone. |
| Feedback, issue reports, support requests and abuse reports | Up to 2 years |
| Push notification tokens | Until you sign out or delete your account, or the token stops working |
| Android test sign-up email | Until the Android app is publicly available, plus 30 days |
You can delete your account in the app under Settings → Delete account, or at peakxapp.com/delete-account.
9. Your rights
Depending on where you live, you can:
- Access: request a copy of your data.
- Rectification: correct inaccurate data. Most of it you can edit in the app.
- Erasure: have your data deleted, subject to section 8.
- Restriction: ask us to limit how we use your data.
- Portability: receive your data in a machine-readable format. Your logbook can also be exported as a PDF.
- Objection: object to processing based on legitimate interests.
- Withdraw consent: at any time, for example by turning off location or notifications.
- Automated decisions: ask a person to review a decision made automatically (see section 5).
Email support@peakxapp.com. We'll reply within 30 days. You can also complain to your data protection authority, for example the UAE Data Office, the UK ICO or your EU supervisory authority.
10. Sensitive information
Incident notes may contain health information. Only add what you're comfortable recording. Incident notes are visible only to you.
Please don't include sensitive information about other people in messages, notes or reviews.
11. Security
We protect your data with encryption in transit and at rest, access controls (each user can only reach their own data or data shared with them) and regular security reviews. No system is completely secure. If a breach is likely to put your rights at risk, we'll notify you and the relevant authorities as the law requires.
12. Children
PeakX is only for people aged 18 and over. We don't knowingly collect data from children. If you think a child has given us personal data, contact us and we'll delete it.
13. Changes to this policy
We may update this Privacy Policy from time to time. If a change materially affects your rights or how we use your data, we'll let you know in the app or by email before it takes effect. Other changes, such as clarifications or updates for new features, take effect when we publish them. The date at the top shows the latest version.
14. Contact
M2X TECHNOLOGIES FZCO · DSO-IFZA, IFZA Properties, Dubai Silicon Oasis, Dubai, United Arab Emirates support@peakxapp.com