Privacy policy

Effective 13 October 2026.

Peal lets an AI assistant you choose set alarms and reminders on your iPhone. Peal is made and run by Tortoise Software LLC. Questions about this policy: connor@bytortoise.com.

The short version: Peal has no accounts. It does not ask for your name, email address, phone number, location or contacts. It has no analytics, no advertising and no tracking, and it does not use cookies. It keeps only what it needs to put the alarms you ask for on your phone, and you can delete all of it from the app.

What Peal stores on its server

Your phone's identity

The first time you open Peal, the app makes a random secret and keeps it in your iPhone's Keychain. The server stores only a hash of that secret, when it was created, and when the phone was last in touch. If the phone registers for notifications, the server also stores its push token and whether it is a development or production token. The server also records which plan you are on (free or Plus) and when a Plus plan ends.

Alarms and reminders

For each alarm or reminder an assistant asks for: whether it is an alarm or a reminder, its label, date, time, time zone and repeat schedule; which assistant asked; its upcoming times; and its state, meaning whether the phone set it, any error the phone reported, and whether it was canceled and by whom.

Delivery receipts

When the phone reports back about an alarm: whether it was set, failed or removed, the times it set, any error text, and when the report arrived.

Assistants

When an assistant registers with Peal, it gives a name (such as Claude) and the web addresses it returns to after sign-in; the server stores both. When you pair an assistant with your phone, Peal also stores the site it connected from, whether you allowed or removed it, its daily alarm limit, and when you allowed or removed it.

Sign-in records

Pairing codes, sign-in codes, and access and refresh tokens, each stored only as a hash, with when it expires and whether it was used or revoked. A sign-in code is also stored with the address the assistant returns to and the one-way check value from the sign-in (the PKCE challenge).

Notification log

If Peal sends a notification to your phone: which alarm it was for, its kind, Apple's message identifier, Apple's response, and when it was sent.

Request logs

The server writes one line for each request it answers: the method, the path without its query string, the status and how long it took. These lines never contain tokens, secrets, pairing codes, push tokens or alarm labels. Errors are logged by type only. To limit abuse, the server counts recent requests per IP address in memory; those counts are not written to the database or the logs, and they are gone when the server restarts.

What Peal keeps on your phone

The secret described above, in the iPhone Keychain, and a list of the alarms and reminders Peal has set on the phone, so it can keep them in step with the server. Alarms and reminders themselves are set through iOS.

What Peal does not collect

• No account, name, email address or phone number.
• No location, contacts, photos, health data or microphone.
• No analytics, advertising identifiers, tracking or cookies.
• Nothing of your conversations with your assistant. Peal receives only what the assistant sends to Peal's tools, which is the alarm details listed above.

Peal does not sell data and does not share it, except with the companies that host Peal:

• Fly.io runs Peal's server, in the United States (Virginia).
• Supabase, which hosts the database.
• Apple delivers notifications to your phone, when Peal sends one, through the Apple Push Notification service.

Each of them handles data under its own terms and may keep its own operational logs. Your assistant's provider (for example Anthropic, for Claude) handles your conversations under its own privacy policy, and Apple handles TestFlight under its own.

How long Peal keeps it

About once a day, Peal deletes:

• alarms and reminders 30 days after they were canceled or ended, with their delivery receipts;
• notification log entries after 30 days;
• pairing codes, sign-in codes and tokens 7 days after they expire;
• everything about a phone that has not been in touch for 180 days;
• an assistant's registration (its name and return addresses) once it is more than a day old and no phone is paired with it.

Removing an assistant under Assistants in Peal stops it and cancels its alarms. Its record stays, marked removed, until you delete your Peal data or the 180 days pass.

Deleting everything

In Peal, tap Settings, then hold Delete Peal data at the bottom. Before you do, Peal says: Deleting Peal data cancels every alarm on this phone, disconnects every assistant, and removes your Peal record from the server. This cannot be undone.

This deletes, at once, from the server: your phone's identity and push token, your plan, every alarm and reminder, their delivery receipts, the assistants you paired, pairing and sign-in records, and the notification log. On the phone, Peal cancels every alarm and reminder it set, deletes its list of them, and removes its secret from the Keychain. The next time it syncs, Peal registers the phone again as a new, empty identity that is not linked to the old one. An assistant's own registration, which is not linked to you, is deleted by the daily cleanup once no phone is paired with it.

If you delete the Peal app without deleting your data first, what Peal stored on the server is deleted once the phone has been out of touch for 180 days. To have it deleted sooner, write to connor@bytortoise.com.

If you reinstall Peal on the same phone, it may pick up the same record; use Delete Peal data to start fresh.

Changes

If this policy changes, the new version is posted at this address with a new effective date.