Privacy Policy

1. Who this policy is from

ShipPeek is built and published by Dmitry Volf, trading as SavvyWolf.ai, in Ohio, United States. For anything in this policy, write to [email protected].

This policy covers the ShipPeek iPhone and iPad app. It does not cover Easyship, which is a separate company's service, governed by Easyship's own terms and privacy policy. ShipPeek is not affiliated with, endorsed by, or operated by Easyship; it is an independent client for their public API.

2. What data ShipPeek handles

Your Easyship API token

The app cannot do anything until you paste in an Easyship API token, which you get from your own Easyship account. It is stored in the iOS Keychain, which the operating system encrypts and ties to your device. The app can hold one token for Easyship's sandbox environment and one for production, and uses whichever the selected environment calls for.

The token is sent to Easyship, in the Authorization header of each request, and to nowhere else. It is never transmitted to SavvyWolf.ai, never written to a log, and never included in any diagnostic output.

Your ship-from address

You enter a default ship-from address once, in Settings, and every rate quote uses it as the origin. Depending on how much you choose to fill in, this can include a contact name, company name, email address, phone number, street lines, city, state, postal code, and country. It is saved in the app's own preferences on the device. Fields you leave blank are omitted from requests entirely rather than sent as empty values.

Shipment details you type in

To get a quote you enter a destination (country and postal code, plus optionally a full address), the parcel's weight and dimensions, its declared value, and an HS code or item category identifying the goods. These are sent to Easyship as part of the rate request. They are not retained by the app after the quote comes back.

Shipment and tracking data from your account

The Shipments tab reads shipments that already exist on your Easyship account, and their tracking checkpoints. This is your own business data, fetched fresh from Easyship each time and held in memory only while the app is open. It is not cached to disk and not retained after you close the app.

App preferences

The app stores which Easyship environment you selected, and whether you have seen the first-run walkthrough and dismissed its tips. That is all: nothing about you, and nothing that leaves the device.

3. What ShipPeek does not collect

• No ShipPeek account. There is nothing to register for, and no password to lose.
• No analytics or telemetry about you. The app contains no Firebase, no Google Analytics, no Mixpanel, no Amplitude, no crash reporter, and no SDK of any kind that reports usage.
• No advertising. No ad networks, no IDFA, no advertising identifiers, no ad tracking.
• No device location. The app never asks for location permission and never reads where your device is. See section 4 for the one place a postal code is sent to Apple.
• No contacts, photos, camera, microphone, health data, or calendar access. The app requests none of these permissions.
• No payment information. ShipPeek does not charge anything and cannot buy shipping labels.

4. Who the app talks to

Two services, both over HTTPS, and neither of them us.

Easyship

Requests go to public-api.easyship.com, or public-api-sandbox.easyship.com when the sandbox environment is selected. The app calls exactly three endpoints:

• POST /rates — asks for courier quotes for the parcel you described. It creates nothing; it is a price enquiry.
• GET /shipments — lists shipments already on your account.
• GET /shipments/trackings — reads tracking checkpoints for a shipment.

The app has no ability to create a shipment, buy a label, spend money, or change anything on your Easyship account. What Easyship does with the requests it receives is governed by Easyship's own privacy policy.

Apple's geocoding service

As a convenience, when you type a destination postal code the app asks Apple to turn it into a city and state so it can show you which place you have entered. This sends the postal code and country name you typed to Apple, using the operating system's built-in geocoder. It does not send your location, your identity, your token, or anything else, and it works the same whether or not the lookup succeeds — the result is cosmetic, and the rate request goes out either way. Apple's handling of that request is governed by Apple's Privacy Policy.

5. How the data is used

Only to do the thing you installed the app to do: fetch shipping quotes for a parcel you describe, and show the state of shipments already on your account. The comparisons and sorting are worked out on your device from the figures Easyship returns.

Your data is not used for profiling, not sold, not shared, not aggregated with anyone else's, and not used to train any model.

6. Where the data is stored

All of it is on your own device:

• iOS Keychain, holding your Easyship API token, encrypted by the operating system.
• App preferences on your device, holding your default ship-from address, the selected environment, and the walkthrough flags.

Nothing else is written to disk. Rate quotes, shipments, and tracking checkpoints are held in memory while you are looking at them and are gone when the app closes. SavvyWolf.ai operates no server for ShipPeek and receives no copy of any of this.

7. Diagnostic logging

Development builds of the app print the requests they send and any error responses to the Xcode console, so that a rejected request can be diagnosed. This is compiled out of the builds distributed through TestFlight and the App Store, stays on the developer's own machine when it does run, and never includes the Authorization header that carries your token.

8. Data retention

There is no server-side retention, because there is no server. On the device:

• Your API token persists until you sign out, or until you revoke it in your Easyship account.
• Your ship-from address and preferences persist until you delete the app.
• Quotes, shipments, and tracking data are never stored and do not persist at all.
• Deleting the app removes the preferences and the Keychain entries with it.

9. Sharing and disclosure

ShipPeek shares your data with nobody. There are no third-party processors, no analytics vendors, no advertising partners, and no affiliates, because no data ever leaves your device to reach them. There is no data to sell, and none is sold. If SavvyWolf.ai were ever acquired or wound down, there would still be no user data to transfer; the situation is the same for us as it is for you.

The two exceptions that are not really exceptions are in section 4: the app sends requests to Easyship using your own credentials to fetch your own data, and sends a postal code to Apple to name a city.

10. Your rights and choices

• Access. Everything ShipPeek holds is visible in the app itself: your ship-from address in Settings, and your own Easyship data.
• Deletion. Fully in your hands, on your device, with no request to anyone. See the instructions below.
• Withdrawing consent. Revoke or rotate the API token in your Easyship account at any time, without involving us. The app immediately stops being able to read anything.
• Portability and correction. The underlying shipment data lives in your Easyship account, where Easyship's own export and correction tools apply.
• Objection and complaint. If you are in the UK, EU, or a US state with a comprehensive privacy law, you have rights of access, deletion, correction, and complaint to your data protection authority. Since the only personal data involved never leaves your device, these are exercised by deleting it yourself, as below. Write to [email protected] if you would like it confirmed in writing.

11. Data deletion instructions

12. Security

Your API token is held in the iOS Keychain, encrypted by the operating system and protected by your device passcode or biometrics. Preferences live in the app's own sandboxed container, which iOS makes unreadable to other apps. All network traffic is over HTTPS. Because nothing is transmitted to us and nothing is stored off-device, there is no central store of user data to breach.

One thing worth knowing, because it is about how you handle the token rather than how the app does: an Easyship API token grants whatever your Easyship account permits. ShipPeek only ever reads, but the token itself is not read-only. Treat it like a password, and prefer a sandbox token when you are only trying the app out.

13. Children

ShipPeek is a tool for people who ship parcels for a business and is not directed to children. It is not intended for anyone under 13 (or under 16 in the UK and EU), and it knowingly collects nothing from them.

14. International users

ShipPeek is published from the United States. Because the app stores data only on your own device and transmits it only to Easyship using your own credentials, no cross-border transfer of your data to us takes place at all. Easyship's and Apple's own transfers are governed by their policies.

15. Changes to this policy

If this policy changes, the date at the top of the page changes with it, and the substance of any material change will be described here. ShipPeek is currently distributed for testing through TestFlight; if a future version stored data anywhere other than your device, or talked to any service beyond the two named in section 4, that would be described here before it shipped.

16. Contact

Privacy questions, deletion requests, or anything else about this policy:

• Email: [email protected]
• Postal address available on request, for formal data protection correspondence.

Replies within two business days for ordinary questions, and within 30 days for formal requests under a privacy law.