Privacy
Updated 10 October 2026 · Contact: picpie@yahoo.com
Who we are
The data controller is Arda Tor, the independent developer of PicPie. PicPie is the app name, not an incorporated company. Contact picpie@yahoo.com for questions or to exercise your privacy rights.
Information we use
When you sign in with Apple or Google, we receive an account identifier and the profile information that provider makes available, such as your name, email and profile photo. We store your username, chosen language, Pizza memberships, preferences, messages, media, reactions and optional places you share. We also use device notification tokens, app version, activity timestamps and purchase entitlement records. We do not receive your Apple payment card details.
Why we use it
We process account and shared content to provide the service you request. Device and activity information supports notifications, widget updates, abuse prevention and reliability. Purchase records enable Premium and support billing issues. Optional usage analytics and crash reporting are enabled only after your affirmative choice, based on consent. Other processing relies on performing our service agreement, complying with law or proportionate legitimate interests in security and improving the app.
Who can see a Pizza
Approved Pizza members can see content shared with that Pizza. A pending invitation does not grant access to private photos. Widget visibility and notification preferences are separate controls. Your device may display a widget or notification where other people can see its screen. Members may save or screenshot content. PicPie cannot remove copies another person has saved. This service does not promise end-to-end encryption.
Location and device permissions
Location is optional. A selected place is attached to the post you choose to share, not continuously tracked live. Camera, microphone, photo library and notification access are controlled by your device permissions. Declining optional access prevents the associated feature, not general browsing of the service.
Support emails
When you choose Continue in Mail, PicPie prepares an editable email containing your message, selected topic, app version, device model, operating system and language. Nothing is sent until you send it in your mail app. You can review, change or remove the included details first. We receive your sender email address and the information you choose to send, and use them to investigate and respond to your request. Your email provider and our support email provider process the email under their own privacy policies. This support correspondence is separate from optional usage analytics and crash reporting.
Service providers
Cloudflare provides backend, database, private media storage and website hosting. Google Firebase and Apple provide notification delivery. Apple and Google support sign-in. RevenueCat and Superwall support purchase entitlements and paywall flows when enabled. Mixpanel and Firebase Analytics support app usage analysis when enabled; Firebase Crashlytics processes permitted crash reports. Singular supports optional advertising measurement, with configured Meta and TikTok measurement integrations as described below. KLIPY supplies GIF search and media, and Apple supplies map services. These providers receive the information required for their functions. A download link takes you to taap.it, which has its own privacy practices.
Optional advertising measurement
Advertising measurement is optional and off until permitted. Updated iOS and Android versions explain crash reports, usage data and advertising measurement together in the privacy prompt and “Improve your experience” preference. Accepting enables the corresponding optional services; turning the preference off stops them. On iOS, advertising tracking additionally requires Apple’s App Tracking Transparency permission; Apple permission alone does not replace the in-app choice. Earlier analytics-only consent is not automatically converted into advertising consent. Declining does not restrict PicPie’s core features. You can change the in-app preference in PicPie Settings and iOS tracking permission in system Settings. Advertising choices, notice version and decision time are stored on the device.
With this permission, Singular measures which advertisements lead to app opens and subsequent registration, paywall and checkout actions. Its SDK may process advertising and SDK/device identifiers, app and operating-system information, timestamps, network information such as IP address, and attribution data. RevenueCat may send subscription lifecycle events, product and transaction identifiers, revenue, a customer identifier and available IP or country information to Singular. Configured measurement partners Meta and TikTok may receive attribution and conversion data to measure our advertisements. This advertising data is pseudonymous, not anonymous. We do not add names, email addresses, message contents, photos or precise shared locations to these advertising event payloads.
Before this permission is given, PicPie does not initialize the Singular SDK or buffer advertising events for later replay. Turning it off stops future SDK collection and requests removal of the RevenueCat advertising binding. An offline device cannot immediately update a server: pending changes synchronize when connectivity and the relevant services become available. Previously sent records are not automatically erased by switching off or signing out. Contact picpie@yahoo.com for access or deletion requests; provider retention and applicable legal requirements also apply. No fixed advertising-data retention period is asserted here until the relevant provider settings have been verified. Advertising measurement consent does not replace the separate safeguards required for international transfers.
Optional analytics and crash reports
This section explains the separate data-sharing choice in PicPie. Accepting the Terms, reading this notice or signing in does not enable optional analytics or crash reports. The short prompt refers to analytics and diagnostics providers; these are Mixpanel, Google Firebase Analytics and Google Firebase Crashlytics, as detailed below. Data is collected electronically by their app SDKs only when the corresponding choice is enabled. You may decline using the close button and continue using PicPie.
Optional analytics is off until you accept. Your choice can be changed in Settings. We keep the choice, notice version and relevant consent metadata on the device and, when signed in, synchronize it with the existing account consent record. Consent records are not sent as analytics events to Mixpanel or Firebase Analytics.
Updated versions use an account-scoped analytics identifier derived from your PicPie account ID to recognize the same signed-in account across sessions and devices, including after reinstalling and signing in again. This separate identifier is pseudonymous personal data, not anonymous data: we can associate it with your account. Before sign-in, permitted analytics uses a random device-local identifier. Earlier versions may use different identifiers, and historical records may not be linkable. Analytics can include app version, build, platform, language, operating-system/device information, screen and action identifiers, outcomes, durations, membership status, Pizza counts, photo-layout preference and an approximate country inferred from device time-zone or region settings. This country is not verified residence or precise location. Our event payloads exclude names, usernames, email addresses, raw account UUIDs in updated versions, messages, photos, precise coordinates, shared locations and credentials. Advertising identifier collection for usage analytics and Mixpanel IP-based geolocation are disabled. Providers still receive technical network information needed to deliver their services.
Google Firebase Crashlytics processes technical errors, app/device information and SDK installation identifiers when crash reporting is enabled. We do not attach your PicPie account ID. Analytics and crash reporting are optional and are not used by us for cross-company advertising tracking.
Declining or withdrawing consent stops optional collection; activities performed without permission are not buffered for later transmission. Signing out suspends account analytics. In updated versions, signing back into the same account uses its same analytics identifier only while consent permits collection; ordinary sign-out does not reset Firebase’s installation identifier. Clearing app storage or reinstalling can still change SDK installation identifiers. Local resets and account deletion do not themselves erase records already held by providers. Contact picpie@yahoo.com for access or deletion requests. We verify the request, use available identifiers to locate relevant records, and handle applicable rights separately from routine retention schedules. Earlier device-only identifiers may not be recoverable; this does not make those records anonymous.
Analytics retention
Google Firebase Analytics (GA4). Our property settings checked on 7 October 2026 retain event-level data for 2 months and user-level data for 14 months. New activity restarts the user-level period. Expired data is processed for deletion monthly. Standard aggregated reports are outside these settings. These are different data categories, not a promise that every record disappears after 2 months. Google retention documentation.
Mixpanel. Under the standard policy applicable to our project, events are retained for 2 years from the event date. User profiles have a separate policy: they remain for the active service subscription unless deleted earlier. The 2-year event limit does not automatically delete profiles. Mixpanel retention documentation.
These provider settings describe technical retention, not permission to keep personal data longer than necessary. A valid erasure request or the end of an applicable processing purpose may require earlier deletion. Provider plans, configuration, legal obligations and safeguards can affect the applicable period; changes must still comply with GDPR, KVKK and other applicable law. Provider terms do not override those duties. We update this notice when our practices change. These analytics periods do not describe Crashlytics, advertising records or service-account data, which have separate purposes and retention requirements.
Storage and chat visibility
Chat normally displays the latest 24 hours. Disappearing from the interface does not mean immediate erasure from our servers. During the current testing period, older chat records and media may remain stored while physical retention cleanup is being finalized. The latest eligible widget photo from each person may remain available beyond the chat window until replaced or removed. Do not use PicPie as your only archive.
Deletion and security
You can request account deletion in the app or contact us with questions. Your account is hidden when you request deletion. Signing in with the same sign-in provider and the same Apple or Google account within 30 days restores your PicPie account and cancels the pending deletion. If you do not return within that period, we remove your personal data and associated content and delete your sign-in account from our service. Shared Pizzas remain available to other members; empty message references may remain after your content is removed. Backups, security records and legally required purchase records may persist separately for their necessary retention period. We use access controls and encrypted transport, but no online service can guarantee absolute security.
International processing and your choices
The service uses infrastructure in the United States and may process information in other countries where providers operate. The optional consent prompt covers usage analytics, crash reporting and advertising measurement; it is not a blanket permission for every international transfer. International transfers must separately meet applicable legal requirements, including any required safeguards and provider agreements. Depending on your location, you may request access, correction, deletion, portability, restriction or objection, withdraw consent, and complain to your data protection authority. Contact us so we can verify the request without disclosing another account’s information.
Age and website storage
PicPie is for people aged 13 or older and subject to any higher local requirement for valid consent. If you believe a child has supplied information inappropriately, contact us. This website stores only an optional language preference locally. It does not load advertising or third-party analytics scripts. Hosting providers may process technical request logs such as IP addresses to serve and protect the site.
Changes
We will update this page when practices change and provide additional notice when required. The date above identifies this version.