Privacy Policy

Last updated: August 24, 2026

Peeko is a quick-commerce service for baby and kids essentials, run by ZIPPYCUBS PRIVATE LIMITED (“Peeko”, “we”, “us”). This policy sets out what personal data we handle when you use the Peeko app or peekonow.com, why we need each piece of it, who else gets to see it, how long we hold it, and what you can require us to do about it.

We are the data fiduciary for that data. This policy is written against the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000 and the SPDI Rules, 2011 made under it, and the Google Play User Data policy.

It covers the Peeko app on Android and iOS, this website, and the support we run over phone, email and WhatsApp. It does not cover anyone else’s site or app you reach from ours.

1. What we collect

1.1 What you give us

• Your mobile number. This is the only thing needed to sign in. We send a one-time password to it and verify that; we do not store the OTP after it is used.
• Your name, if you add it. It appears on your invoices and order updates.
• Your delivery addresses— house or flat details, landmark, pin code, and the point you drop on the map.
• What you send support— your message and anything you attach to it, over email, phone or WhatsApp.

1.2 What your orders create

• Items, quantities, prices paid, timestamps, cancellations, returns and refunds.
• The outcome of each payment and a masked reference to the instrument used — for example the last four digits of a card. We never receive or store a full card number, CVV, UPI PIN or netbanking credential; those go straight to our payment gateway.
• Delivery events: when an order was packed, picked up, and handed over, and the route the rider took while it was live.

1.3 Location

The store that can serve you, what is in stock, the delivery fee and the ETA all depend on where you are, so location is central to the service rather than incidental to it. We use it in two forms: the address you save, and — only if you grant the permission — your device’s GPS position while the app is open in front of you. Section 4 sets this out in full.

1.4 Device and technical data

• Device model, operating system version, app version and language.
• IP address, used to resolve an approximate region and to keep the service secure and working as intended.
• Your device’s advertising identifier (Google Advertising ID on Android, IDFA on iOS), used to attribute app installs to the campaign that produced them.
• A push notification token, so we can send you order updates.

1.5 How you use Peeko

• Screens opened, products viewed, searches typed, items added to cart, orders started and completed, and notifications opened.
• On this website, page views and a small number of interactions with the page.
• In the app, anonymised session recordings and heatmaps of screen interaction, used to improve the interface and the experience.
• Crash reports and error traces when something breaks.

1.6 What we do not collect

The Peeko app asks for internet, network state, location and notification permissions, and nothing else. It does not read your contacts, your photo library, your calendar, your call logs or your messages, it has no microphone or camera access, and it does not track your location in the background. We do not collect any information about children, and we do not buy personal data about you from anyone.

2. Why we use it

We do not sell your personal data, we do not rent or trade contact lists, and we do not build advertising profiles of you from your activity on sites and apps that are not ours.

3. Who else sees it

We share only what a given recipient needs to do its job, under contracts that limit them to that purpose. These are the recipients — there is no unnamed remainder.

We will also disclose data where the law requires it, where we need to establish or defend a legal claim, or where there is a genuine risk to someone’s safety. If Peeko is ever merged, acquired or restructured, your data may transfer with the business, and this policy continues to apply to it until you are told otherwise.

4. Location, in detail

Peeko asks for your device’s precise location only while the app is open and you are using it. It is never collected in the background, and never when the app is closed.

We use it to:

• Work out which of our stores can reach you, and whether we deliver where you are.
• Fill in your delivery address so you do not have to type it.
• Calculate the delivery fee and the arrival estimate.
• Guide your rider to you while an order is on its way.

Your location goes to our own servers, to the rider handling your live order, and to Google Maps to render the map and resolve the address. It is included in the analytics events we send to our own analytics tooling. It is never used to target advertising, and never sold or passed to data brokers.

You can refuse the permission or revoke it later in your device settings. Peeko keeps working — you will just need to set your delivery address by hand.

5. Cookies on peekonow.com

This website uses cookies for three things: keeping you signed in, holding on to a cart you started before signing in, and measuring how the site is used so that we can improve it. We do not use cookies to advertise to you.

You can block or clear cookies in your browser settings. Signing in and the cart will stop working if you do.

6. Messages, and how to stop them

Order and delivery messages are part of the service and cannot be switched off while you have an order running — you need to know when your delivery is arriving.

Everything promotional is separate and is yours to turn off. Push notifications can be disabled for Peeko in your device settings, WhatsApp marketing stops if you reply STOP, and writing to us at the address in section 15 removes you from all of them at once. Withdrawing this consent has no effect on your ability to order.

7. How long we keep it

8. How we protect it

• Traffic between your device and us is encrypted in transit with TLS.
• Data at rest sits in access-controlled cloud infrastructure.
• Access to production systems is limited to the people whose work requires it, and is logged.
• Payment credentials never touch our servers — they go directly to a PCI-DSS compliant gateway.
• We review access, permissions and dependencies regularly.
• No system is perfectly secure. If a breach occurs that is likely to affect you, we will notify you and the Data Protection Board of India as the DPDPA requires.

9. Your rights

Under the DPDPA you can ask us to:

• Tell you what we hold about you, what we have done with it, and who we shared it with.
• Correct or complete anything wrong or out of date. Most of it you can edit yourself in your profile.
• Erase your data and close your account, except records we are legally required to keep.
• Withdraw consent you gave for marketing, analytics or location, as easily as you gave it.
• Raise a grievance with us, and escalate to the Data Protection Board of India if our answer does not satisfy you.

To use any of them, write to customer.support@peekonow.com and tell us the mobile number you sign in with. We may need to verify it is you before we act — that check protects you rather than us.

Deleting your account. Send us a deletion request with the subject “Delete my account”. We acknowledge within 7 working days and complete it within 30 days of verifying the request. Your profile, addresses, saved preferences and marketing consents are removed; invoices and payment records are retained for the statutory period in section 7 and then deleted. You lose access to your order history, and you are welcome to sign up again later.

10. Children

Peeko sells products for babies and children, but it is a service for the adults buying them. It is not directed at anyone under 18 and we do not knowingly collect data from anyone under 18. We ask for no information about your child — no name, no date of birth, no gender — and we do not profile children or direct advertising at them. If you believe a minor has created an account, tell us and we will remove it.

11. Where your data lives

Our servers, databases and file storage are in India, in Amazon Web Services’ Mumbai region. Some of the providers in section 3 process data outside India on their own global infrastructure. Where they do, the transfer is governed by contractual data protection terms and is limited to the countries the Central Government has not restricted under section 16 of the DPDPA.

12. Other people’s sites

Peeko links to places we do not run — a payment gateway, an app store, our social accounts. Once you are there, their privacy policy applies and this one does not. We are not responsible for what they collect.

13. Changes to this policy

When this policy changes, the date at the top of the page changes with it. If the change materially affects how we handle your data, we will tell you in the app before it takes effect rather than relying on you noticing. Continuing to use Peeko after that means you accept the revised policy; if you would rather not, you can delete your account under section 9.

14. Grievance Officer

If something about the way we handle your data concerns you, our Grievance Officer is the person to write to, as required by the Information Technology Act, 2000 and the DPDPA.

We acknowledge every grievance within 5 working days and aim to resolve it within 30 days. If you are not satisfied with the outcome, you may escalate to the Data Protection Board of India.

15. Contact us