Legal Notice
This document sets out the regulatory information relating to the PeakMe website and services, available worldwide.
Publisher
NOVEXA STUDIO - FZCO (trading as PeakMe)
Site built with Lovable.
Governing law
The site and all PeakMe services are governed by the law of the United Arab Emirates, regardless of the user's country of residence, in particular Federal Law No. 15 of 2020 on consumer protection, Federal Decree-Law No. 14 of 2023 on electronic commerce (Modern Technology Trade) and Federal Law No. 45 of 2021 (PDPL) on personal data protection. Any dispute, failing amicable resolution, shall fall within the exclusive jurisdiction of the courts of Dubai (United Arab Emirates).
Hosting
The site is hosted by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA.
Intellectual property
All site content (texts, images, logos, code) is protected by UAE Federal Law No. 38 of 2021 on copyright and related rights and applicable international conventions (Berne Convention, TRIPS). Any reproduction, even partial, without authorization is prohibited.
Data protection
Personal data is processed in accordance with UAE Federal Law No. 45 of 2021 (PDPL) and its implementing regulations, as well as international data protection standards. For users located in the European Union and the EEA, processing also complies with Regulation (EU) 2016/679 (GDPR), which applies extraterritorially under its Article 3(2); the UK GDPR applies on the same terms in the United Kingdom. Data controller: NOVEXA STUDIO - FZCO. To exercise your rights (access, rectification, erasure, objection, portability, restriction, withdrawal of consent), use the contact form; we reply within one month. EU users may lodge a complaint with the supervisory authority of their Member State (for example the CNIL in France) or, in the UAE, with the UAE Data Office. Where an Article 27 GDPR representative is required, its identity and contact details are provided on request via the contact form. Full details: Privacy Policy.
Artificial intelligence — transparency
PeakMe is a deployer of third-party general-purpose AI models (OpenAI GPT family, Google Gemini / Vertex family). In accordance with Article 50 of Regulation (EU) 2024/1689 (AI Act), users are informed before use that they interact with an AI system and that the analyses, plans and "after" images are generated or manipulated by AI — the transformed photo is a synthetic simulation, not a photograph. PeakMe performs no facial recognition, no biometric identification or categorisation, no emotion recognition and no social scoring, and operates no high-risk AI system within the meaning of Article 6 of the AI Act. User photos are never used to train any model. Human review of any result can be requested via the contact form.
Compliance & technical security
PeakMe implements the following technical measures to protect users and their data:
- Encryption in transit: the entire site is served over HTTPS/TLS.
- Hosting & CDN: Cloudflare (DDoS protection, WAF).
- Database: Supabase (PostgreSQL) with Row-Level Security enabled on all user tables — each user only accesses their own data.
- Payments: processed exclusively by Stripe (PCI-DSS Level 1 certified). No card data is stored on our servers. Stripe acts as Merchant of Record for all transactions: it collects payment, calculates and remits applicable local taxes in each jurisdiction, issues the invoice, and handles disputes, chargebacks and refunds. NOVEXA STUDIO - FZCO remains responsible for delivering and supporting the service. The transaction appears on the bank statement under the name NOVEXA STUDIO (or a shortened form such as "NOVEXA" or "NOVEXA STU").
- Authentication: sessions managed via signed tokens, passwords hashed (bcrypt/argon2).
- Personal data: processing compliant with UAE Federal Law No. 45 of 2021 (PDPL) and international standards. Rights of access, rectification, erasure, objection, portability and restriction can be exercised via the contact form or directly from "My account" (1-click deletion, including subscription cancellation).
- Transactional emails: dedicated infrastructure
notify.peakme.iowith SPF/DKIM/DMARC authentication. - Pricing transparency: activation price (€1 or local equivalent) and recurring subscription (€14.99/month, or historical plans of €3.99/week or €19.99/month for existing subscribers) starting after the initial 3-day period, explicitly displayed before any payment, reminded on the confirmation page and in the summary email.
- Cancellation: possible at any time in 3 clicks from "My account", without justification, without fees.
Reference legal framework
The PeakMe service is designed and operated in accordance with the following UAE legal texts. This list is provided for information purposes only and does not constitute a certification or legal opinion.
- Federal Law No. 15 of 2020 — Consumer protection.
- Implementing Decree No. 66 of 2023 — Implementation of consumer protection.
- Federal Law No. 45 of 2021 (PDPL) — Personal data protection (authority: UAE Data Office).
- Federal Law No. 38 of 2021 — Copyright and related rights.
- Federal Decree-Law No. 14 of 2023 — Electronic commerce (Modern Technology Trade).
- Federal Law No. 5 of 2012 (as amended) — Combating cybercrime.
- Local taxes — calculated, collected and remitted directly by Stripe (Merchant of Record) in each applicable jurisdiction, including UAE VAT (5%) where relevant.
For users located in the European Union / EEA, the service is additionally operated in accordance with the following EU texts, which apply to PeakMe as a service directed at EU users:
- Regulation (EU) 2016/679 (GDPR) — Personal data protection (Art. 3(2) extraterritorial application).
- Directive 2002/58/EC (ePrivacy) — Cookies: only strictly necessary cookies are used (Art. 5(3) exemption).
- Regulation (EU) 2024/1689 (AI Act) — Transparency obligations for AI systems and AI-generated content (Art. 50), prohibited practices (Art. 5), AI literacy (Art. 4).
- Directive 2011/83/EU — Consumer rights: pre-contractual information and right of withdrawal, extinguished for immediately executed digital content under Art. 16(m) subject to express consent and acknowledgement.
- Directive (EU) 2019/770 — Legal guarantee of conformity for digital content and services.
- Regulation (EC) No 593/2008 (Rome I) — Art. 6(2): mandatory consumer protection of the country of residence is preserved.
- Regulation (EU) 2022/2065 (DSA) — Applicable transparency and notice obligations; PeakMe is not a very large online platform.
Technical standards: HTTPS/TLS, PCI-DSS Level 1 (Stripe), PostgreSQL Row-Level Security, SPF/DKIM/DMARC, DPAs signed with sub-processors (Cloudflare, Supabase, Stripe, AI provider).
Note: the site is built with the Lovable platform, which provides the technical infrastructure. Lovable is not a legal certification body. Regulatory compliance is the responsibility of the publisher NOVEXA STUDIO - FZCO. For any question, use the contact form.
Credits
"Before/after" transformation photos displayed on the site: illustrations generated by artificial intelligence, representative of the type of result targeted by the PeakMe method. No real person is photographed. First names (Arjun, Thomas, Chloé, Eda) are fictional. The reviews and testimonials displayed are illustrative, based on fictional scenarios, for inspirational purposes only: individual results may vary.
Contact us
For any request (legal, data protection, support, refund, press), use the contact form. We will get back to you personally by email or phone within 48 business hours.