Piccy iOS App Privacy Policy

This policy covers the Piccy iOS app. For our website and web app, see our general Privacy Policy. Piccy is operated by S7 ("we", "us", "our").

The short version: we collect the minimum needed to run your events. We do not sell your data, we do not track you across other apps or websites, and the app contains no third-party advertising or analytics SDKs.

1. Information We Collect

Account information

• Sign in with Apple: we receive your name and email address. If you choose Apple's "Hide My Email", we only ever receive the private relay address and never your real one.
• Email sign-up: if you register with an email and password, we store your name, email address and a securely hashed password. We never store your password in readable form.

Event content

• Event details you create, such as the event title, dates, time zone and settings.
• Photos and guestbook messages uploaded to your events. In almost all cases these are uploaded by your guests through their phone's web browser, not through this app. The app is how you, as the host, view, manage and export them.
• Guest names that guests enter when they join your event.

Device and technical information

• Push notification token: if you enable notifications, Apple issues us a device token so we can send you updates about your events. You can turn this off at any time in the app or in iOS Settings.
• IP address: your IP address is used to rate limit requests and prevent abuse, and is recorded against short-lived web session records. We do not attach it to your account profile, your events or your photos, and we do not use it to build a profile of you or to infer your location.
• Technical logs: our servers record request times and error details so we can keep the service running and investigate problems.

2. Access to Your Photo Library

The app requests add-only access to your photo library, and only at the moment you tap to save a photo from one of your events to your device. This permission level means the app can save images you choose to save, and cannot read, browse or access any existing photos on your device. If you never save a photo, you will never be asked for this permission.

The app does not request access to your camera, contacts, microphone or location.

3. Purchases

Upgrades bought inside the app are processed by Apple through In-App Purchase. Apple handles the payment; we never see or store your card details. We use RevenueCat to validate purchase receipts and track which features your account is entitled to. RevenueCat receives an anonymous identifier for your account and the details of the purchase, not your payment information.

4. Tracking and Advertising

The Piccy iOS app does not include advertising SDKs or third-party analytics SDKs, does not access your device's advertising identifier (IDFA), and does not track you across other companies' apps or websites. You will not see an App Tracking Transparency prompt from Piccy because we have nothing to ask for.

5. How We Use Your Information

• To create and run your events, and to show you the photos and messages your guests share.
• To send push notifications about activity on your events, if you have enabled them.
• To process and honour upgrades and purchases.
• To provide customer support and respond to your questions.
• To keep the service secure, and to detect and prevent abuse and fraud.

We do not use your event photos to train machine learning models, and we do not sell or rent your personal data or your photos to anyone.

6. Who We Share It With

We share data only with the service providers needed to operate Piccy:

• Cloudflare R2 — stores event photos and message images.
• Apple (APNs) — delivers push notifications.
• Apple and RevenueCat — process and validate in-app purchases.
• Our hosting and email providers — run the servers and send transactional email such as event and account notifications.

We may also disclose information where we are legally required to do so.

7. How Long We Keep Your Photos

Event photos are deleted automatically once the event's retention period ends:

• Free events: photos are permanently deleted 14 days after the event ends.
• Unlimited events: photos are permanently deleted 90 days after the event ends.

We email you before this happens so you have time to export everything. Guestbook message text is kept with your event record, while the images attached to those messages are deleted on the same schedule as event photos. Account information is kept until you delete your account.

8. Deleting Your Account and Data

You can permanently delete your account and its associated data directly in the app, from Account Settings. Deleting your account removes your events and the photos and messages attached to them. You can also email us at josh@s7.gg and we will action it for you.

Individual photos, messages and guests can be deleted at any time from within the app without deleting your whole account.

9. Your Rights

Depending on where you live, you may have the right to access, correct, export or delete your personal data, to object to or restrict how we process it, and to withdraw consent. If you are in the UK or the European Economic Area, you also have the right to complain to your local data protection authority.

To exercise any of these rights, email josh@s7.gg.

10. Security

Traffic between the app and our servers is encrypted in transit. Passwords are hashed, access tokens are stored in the iOS Keychain, and photo links are time-limited. No system is perfectly secure, but we take reasonable technical and organisational measures to protect your data.

11. Children

Piccy is not directed at children under 13, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, contact us and we will delete it.

12. Changes to This Policy

We may update this policy from time to time. Material changes will be posted here with an updated date, and where appropriate we will notify you in the app.

13. Contact

Questions about this policy or your data: