Effective date: 19 October 2026
This policy explains how Pegg Co Pty Ltd (ABN 97 697 767 525), trading as Pegg ("Pegg", "we", "us" or "our"), collects, uses, shares and protects your personal information. Pegg is a fashion resale marketplace that helps you track your wardrobe, understand what it's worth, and sell with confidence.
It covers the Pegg iOS app, the Pegg website and related services (together, the "Service"). Pegg Co Pty Ltd is responsible for your personal information. In UK data protection terms, we are the "controller".
We handle personal information in line with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). For users in the United Kingdom, we also comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
You can contact us at any time:
By using the Service, you acknowledge that you have read this policy. Please read it alongside our Beta Terms of Use.
Pegg is currently in a private beta with a small group of invited testers. Some features are still being built, and the way we run the marketplace during the beta affects how your information is handled:
UK testers. Testers in the United Kingdom can add items to their wardrobe and see estimated values, but can't buy or sell during the beta. We don't collect payment, payout or delivery information from UK testers.
We will update this policy as features change and before Pegg opens to the public.
We collect only the information we need to run the Service. Most of it comes directly from you.
Account information. This includes your name, email address, profile photo and delivery address, plus a phone number if you give us one. You can sign in with Apple or Google through Google Firebase Authentication, which gives your account a unique identifier. If you use Sign in with Apple and choose "Hide My Email", we receive an Apple relay address instead of your real email.
Payment and payout information. Stripe collects and processes your card details, and for sellers, your bank account and identity verification details. Pegg never receives or stores your full card or bank account number. Stripe returns some limited details to us, such as your bank's name, the last four digits of the account, and your payout status, so we can show you where your money goes.
Wardrobe and listing information. This includes the photos you upload, item descriptions and details such as brand, size, colour, condition, category and price.
Receipts you forward. Pegg gives you a private forwarding address. When you forward an order confirmation to it, we receive the email through our email provider, Mailgun. That includes its sender, subject, date, text and up to three attachments. We store it with your account so we can add what you bought to your wardrobe.
Product searches. When you search for an item, or when we look up an item's details or comparable prices, the search words and item details are sent to our search provider.
Transaction history. For every purchase or sale we record the item, the price, the platform fee, the buyer and seller, the delivery details, and key dates such as when the item was ordered, handed over and confirmed received.
Marketplace activity. We record which listings are viewed, saved or followed, so sellers can see interest in their items and we can improve the marketplace.
Communications. We keep the messages, feedback and support requests you send us.
Technical and device information. This includes your IP address, the dates and times of your requests, your app version and device type, and a push notification token if you turn notifications on. We use Google Cloud's tools to monitor and analyse how our systems perform.
App analytics from Apple. If you have agreed in your device settings to share analytics with app developers, Apple gives us aggregated usage and crash data. If you test through TestFlight, Apple also passes on crash reports and any feedback you submit.
Website cookies and analytics. Our website uses cookies to keep the site working and Google Analytics to understand how visitors use it. Google Analytics collects information such as pages visited, browser type, approximate location (from your IP address) and how you arrived at the site.
What we don't collect. The app does not access your precise location or your device's advertising identifier (IDFA). It contains no advertising SDKs, and it does not track you across other companies' apps or websites.
We use your information to run the Service, keep it safe and meet our legal obligations. We do not sell your personal information. The right-hand column gives the legal basis we rely on under UK GDPR.
| What we use it for | UK lawful basis |
|---|---|
| Creating and running your account, wardrobe and listings | Contract (providing the Service you signed up for) |
| Processing payments, platform fees and seller payouts through Stripe | Contract; legal obligation (financial and tax records) |
| Arranging handover of purchased items, and resolving returns and disputes | Contract; legitimate interests (fair outcomes for buyers and sellers) |
| Estimating item values, recognising items in photos and receipts, removing photo backgrounds, and finding products and comparable prices | Contract |
| Sending transactional messages and push notifications (for example, "your item sold") | Contract |
| Sending news and promotions about Pegg | Consent (you can withdraw it at any time) |
| Understanding how the app and website are used, and fixing bugs | Legitimate interests (improving Pegg); consent for non-essential website cookies |
| Getting beta feedback, and quoting you publicly | Legitimate interests; consent before any public use of your name, image or words |
| Preventing fraud, enforcing our terms and keeping the Service secure | Legitimate interests; legal obligation |
| Meeting legal, tax and regulatory requirements | Legal obligation |
How we use AI. Pegg uses AI services to recognise items from your photos (category, brand, colour, condition and estimated retail price), to read forwarded receipts and pull out the items they list, and to write the short explanation shown with an item's estimated value. AI outputs are estimates and may be wrong, so please check them. We do not use your photos, receipts or emails to train general-purpose AI models, and our AI providers are not permitted to train their models on your data under our agreements with them. We don't make decisions based solely on automated processing that have legal or similarly significant effects on you.
Receipts. We use forwarded receipts only to add the items you bought to your wardrobe for you to review. People at Pegg don't read your receipts unless you ask us to (for example, to fix a receipt that didn't import), or unless security or the law requires it.
We share personal information only as described below. We do not sell it, and we don't share it with advertising networks.
Within Pegg. Only the Pegg founding team (currently three people) can access customer details, and only when they need to run the Service, arrange deliveries, provide support or resolve disputes.
Service providers. These companies help us run Pegg. They may use your information only to provide their services to us.
| Provider | What it does for Pegg | Where data is processed |
|---|---|---|
| Stripe | Payments, seller payouts and seller identity checks | Australia, United States and other countries |
| Google Cloud Platform | Hosting, database, photo storage and system monitoring | Sydney, Australia |
| Google Firebase Authentication | Account sign-in, including Sign in with Google | United States |
| Apple | Sign in with Apple, push notifications, App Store and TestFlight analytics | United States |
| Google Analytics | Website analytics | United States |
| Mailgun | Receiving receipts you forward to Pegg | United States |
| Anthropic, with OpenAI as a backup | Recognising items in photos, reading receipts and writing value explanations | United States |
| fal | Removing photo backgrounds | United States |
| SearchAPI | Looking up products and comparable prices; receives search words and item details only, never your account or contact details | United States |
Other users. When you list an item, your seller profile name, listing photos, description and price are visible to other Pegg users. When a sale is made, the buyer and seller may see each other's names, plus whatever contact and handover details are needed to complete the sale.
Legal reasons. We may disclose information when we believe in good faith that it's needed to comply with the law or a valid legal request, to protect the rights, property or safety of Pegg, our users or the public, or to investigate breaches of our terms.
Business changes. If Pegg is involved in a merger, acquisition, restructure or sale of assets, your information may be transferred to the new owner. They must handle it in line with this policy, and we'll let you know before it happens.
We store our main database and your photos in Australia (Google Cloud, Sydney region). Some of our service providers, however, process information in other countries, mainly the United States. Stripe may also process data in other countries where it operates. The table in section 5 shows where each provider processes data.
Before we disclose information overseas, we take reasonable steps to make sure the recipient handles it consistently with the Australian Privacy Principles. Usually that means a contract requiring them to protect it.
For UK users: Pegg is based in Australia, so your information is transferred from the UK to Australia, and from there to the United States. Where the UK has not found a country's laws adequate, we rely on appropriate safeguards, such as the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, or the UK Extension to the EU–US Data Privacy Framework where a provider is certified. Contact us for more detail on these safeguards.
You can view and update your name, email, profile photo, delivery address and notification settings in the app at any time.
Access and correction. You can ask for a copy of the personal information we hold about you, or ask us to correct it, by emailing team@pegg.app. We will confirm your identity first and respond within 30 days, free of charge. If we refuse a request, we'll tell you why in writing and how you can complain.
Extra rights for UK users. Under UK GDPR you also have the right to:
We will respond within one month. You also have the right to complain to the UK Information Commissioner's Office (see section 13).
We keep personal information only for as long as we need it, then delete it or make it non-identifying.
| Information | How long we keep it |
|---|---|
| Profile, wardrobe items, photos, listings, saves and follows | Until you delete them or your account |
| Forwarded receipts | Until you delete your account |
| Transaction records | While your account is open; after that, in non-identifying form for as long as tax and accounting laws require (generally 5 years in Australia, 6 in the UK) |
| Financial records held by Stripe | As Stripe and financial regulations require |
| Support and feedback messages | Up to 2 years after the issue is resolved |
| Server logs containing IP addresses | A short rolling period, for security and troubleshooting |
| Website analytics | Up to 14 months (Google Analytics setting) |
We take reasonable steps to protect your information from misuse, loss and unauthorised access, change or disclosure. Those steps include:
No internet service is completely secure, so we can't guarantee the security of information you send us. Please keep your sign-in details safe, and tell us straight away if you think your account has been compromised.
If a data breach is likely to cause serious harm to you, we will notify you and the Office of the Australian Information Commissioner, as the Notifiable Data Breaches scheme requires. For UK users, we will notify the Information Commissioner's Office within 72 hours where UK GDPR requires it, and tell you without undue delay if the breach poses a high risk to you.
You must be 18 or older to use Pegg. We do not knowingly collect personal information from anyone under 18. If we find out we have, we will delete it promptly. If you think someone under 18 has given us their information, please contact team@pegg.app.
The Service may link to sites and services we don't control, such as brand websites, retailer pages or Stripe's portal. Their privacy practices are their own responsibility. Please check their policies before giving them your information.
We will update this policy as Pegg changes, including when the beta ends and new features launch. If we make a significant change, we will update the effective date and tell you through the app or by email before the change takes effect. If you don't agree with a change, you can delete your account at any time.
If you have a question or a complaint about how we've handled your personal information, contact us first:
We will acknowledge your complaint within 5 business days and aim to resolve it within 30 days.
If you're not satisfied with our response, you can complain to the regulator: