Privacy Policy

Overview

This Privacy Policy explains what Piczo processes, why it is processed, when it leaves your device, and the choices available to you.

Piczo is designed so your Apple Photos library and its search index remain on your device unless you deliberately use a feature that needs selected media to be sent elsewhere.

Information you provide

Account data may include your email address, verified Apple or Google account identifier, display name, handle, profile photo, password credential, plan, and account settings. Passwords are stored only as salted, memory-hard hashes; Piczo does not store your readable password.

You may also provide prompts, selections, friend requests, reactions, reports, and messages or captions associated with memories you choose to share.

Connected social and video accounts

If you choose Connect, Piczo asks Instagram, Threads, Facebook Pages, TikTok, or YouTube only for the permissions needed for the features you select. Piczo may receive an account or channel identifier, display name, profile picture, posts, public videos, comments, replies, publishing and processing status, engagement totals, analytics, and related media metadata such as thumbnails, captions, dates, and links.

Piczo may prepare content for a connected account, but it publishes, replies, edits, or deletes only after you review and explicitly confirm that action. Monitoring and summaries are read-only. Piczo does not connect to or process WhatsApp or Messenger accounts.

Provider access and refresh tokens are stored encrypted on Piczo servers so the connection can keep working. You can disconnect an account in Piczo at any time; this removes the stored connection and tokens. You can also revoke Piczo in the provider’s settings. Media is copied into Piczo only when you explicitly choose to import it.

Photos, videos, and location

Your synced library is stored locally on your device. Piczo may read capture dates, places, and visual labels to organise and search that local library. Turning off library or location access stops new access allowed by that permission.

When you explicitly share a memory, ask AI to inspect a selected photo, or request an edit or image-to-image generation, the selected media and your instruction are uploaded for that request. Piczo does not upload your whole library merely because local library access is enabled.

People and faces

Piczo can group photos of the same person in your library. Faces are grouped on your iPhone: the face data used for this is created and kept on your device and never leaves it.

If you choose to send a photo to an AI feature, the whole photo is sent, including any faces in it. The face groupings themselves are never sent.

AI features and voice

When you use an AI feature, such as editing or creating images, making videos or music, getting suggestions, or talking to Piczo, the photos, video, words, or voice you provide for that request are sent to our AI partners (AI service providers) so they can produce the result. AI partners process requests to provide the feature.

When you talk to Piczo, your voice audio is sent to AI partners so they can understand and answer you. In Live, the view from your camera is also sent while Live is on. Piczo’s servers pass this on to produce an answer and do not keep the audio, the camera view, or the conversation; only how long it lasted is recorded, to count your plan’s voice allowance.

Piczo asks for your permission before it first sends your photos, video, voice, or text to AI partners. You can turn AI features off at any time in Settings.

Service and usage data

We process friend relationships, sharing activity, blocks and reports, AI usage and plan counters, session and device records, and security events needed to operate the service. We may process network information such as an IP address for abuse prevention and rate limiting, along with limited diagnostics needed to investigate failures.

How information is used

We use information to authenticate you, restore your profile across devices, organise local memories, provide friend and sharing features, perform requested AI operations, enforce plan limits, review reports, secure the service, prevent abuse, provide support, and comply with law.

Piczo does not sell your personal information or use your private library to train its own general-purpose AI model.

Service providers

Selected information is shared only as needed with providers that support hosting, storage, email delivery, authentication, connected social accounts, payments, diagnostics, and AI processing. Apple or Google receives information when you choose its sign-in method. Instagram, Threads, Facebook, TikTok, or YouTube receives the OAuth request when you choose to connect that account, and receives content only when you confirm a publishing action. AI partners receive only the prompts, media, voice, or camera view needed for the feature you use.

Friends and other people

Your handle, display name, and profile photo may be shown to people who search for, add, or interact with you. Content you share is disclosed to its recipients. Their later use of a copy outside Piczo is not controlled by Piczo.

Reporting and blocking

You can report a person or a photo shared with you, and block anyone, in the app. A report sends us the reason you choose, any note you add, and which person or shared photo it concerns, and a copy of a reported photo is kept with the report. We review reports within 24 hours and may remove content or suspend accounts.

Blocking someone removes any friendship or friend request between you, deletes the photos they sent you, and stops either of you finding, adding, or sending to the other. The person you block is not told.

Deleting your account

You can delete your account in the app at any time: Settings → Account → Delete account. This permanently deletes, from our servers, your profile (handle, display name, and profile photo), the links to your Apple, Google, email, or password sign-in and your sessions, your friends and friend requests, the photos and videos you shared and those shared with you, your blocks, connected social accounts and their stored tokens, your AI requests and results, your voice and credit usage, and your plan record. If you signed in with Apple, Piczo also asks Apple to revoke its access.

Reports and the material reported are kept for up to 90 days after an account is deleted, to deal with abuse and meet legal duties (see Retention). Photos in your Apple Photos library stay on your device and are not affected. Copies a recipient already saved outside Piczo cannot be recalled. Deleting your account does not cancel an App Store subscription; cancel it in your Apple Account settings.

Retention

Local library data remains until you remove it, revoke access, delete the app, or clear its data. Account, friendship, shared-memory, and imported social-media data is kept while needed to provide the service, and is deleted when you delete your account. Disconnecting a social account deletes that provider connection and its stored tokens; imported copies remain part of your Piczo diary until you delete them. Verification codes expire quickly and can be used only once.

Reports and the material reported are kept for up to 90 days after an account is deleted, to deal with abuse and meet legal duties. Otherwise a report and the material reported are removed 90 days after the report is resolved, and reports an account made about others are kept without any link to it until then. App Store top-up purchase records are kept without any link to a deleted account, to prevent the same purchase being redeemed twice. Copies in routine server backups, where they exist, are removed as those backups are replaced. Security records may be retained longer where reasonably needed for fraud prevention, disputes, or legal obligations.

Your choices and rights

You can change photo and location permissions in device settings, turn AI features off in Settings, connect or disconnect social accounts, control what you import, publish, and share, remove or block friends, report content, update profile details, sign out, and delete your account in the app. Depending on where you live, you may also request access, correction, deletion, portability, restriction, or objection to certain processing.

To make a privacy request, email [email protected]. We may need to verify that the account belongs to you.

Security and children

We use safeguards including encrypted transport, scoped access, hashed passwords and verification codes, and revocable sessions. No system can guarantee absolute security, so keep your device and sign-in details protected.

Piczo is not directed to children below the minimum age for consenting to an online service where they live. If you believe a child supplied personal information without valid permission, contact us so we can review and remove it.

Changes and contact

We may update this policy as Piczo changes. Material updates will be identified by a new date and, where required, an in-app or email notice. Privacy questions can be sent to [email protected].