Updated on October 3, 2026

Privacy policy

Picpic brings together the photos and videos of an event in one album. This page explains what data we process, why, with whom, for how long, and how to exercise your rights.

Data controller

Picpic is published by LOGAMES (association). For any question about your data: contact@picpic.day.

Data we process

Account: a technical identifier, your username, your profile photo or avatar, your language. If you link Apple or Google: the identifier provided by that service and the email address it shares (Apple may hide it). An account can also stay a guest account, without an email.

Albums: title, date and place if given, members, roles, invitations and access requests, sharing settings.

Photos and videos: the original files as you send them, with their metadata, including the capture date and, if your device recorded it, the GPS location. We create previews and playback copies without metadata. Album members who download an original receive the complete file, metadata included. If the album hides where photos were taken (an album setting), the GPS location and place names are removed from the photos received afterwards, and the original that held them is deleted; videos keep their location. Otherwise, remove the location from your photos before sending them if you do not want to share it.

Usage: what you already downloaded in an album (to show it to you), your notification preferences and your device token to receive them.

Purchases: the status of your Picpic+ subscription and event passes, checked with RevenueCat, Apple and Google. We never receive your payment details.

Ad measurement, only if you accept it: the campaign or link that led you to install Picpic and the main steps of your use (profile created; album created, shared or joined; number of photos sent; offers viewed; purchases), with device identifiers (including the advertising identifier if your phone allows it), through AppsFlyer. Never the content of your albums: no titles, photos or videos.

Diagnostics: technical error reports without identity or content (error type, device model, app version).

Security: your IP address is used transiently to limit abuse; our hosting providers keep technical logs for a limited time.

Why, and on what basis

Providing the service (albums, sharing, uploads, downloads, purchases): performance of the contract.

Security, prevention of abuse and abnormal costs, error diagnostics: our legitimate interest in running a reliable service.

Notifications: your consent, given and withdrawn in your phone’s and the app’s settings.

Ad measurement: your consent, asked once (on iPhone through Apple’s “Allow tracking” prompt) and withdrawable at any time in your profile or your phone’s settings. Declining limits nothing in the app.

Legal obligations (billing by the stores, requests from authorities).

We do not sell your data, show no ads in the app and use your photos for nothing but the service.

Who sees what

Members of an album see its photos and videos, and the username and profile photo of their authors. Depending on the album’s settings, a link may let other people ask for access or join the album.

Our providers, only to run Picpic: Supabase (database and authentication, hosted in the European Union, in Ireland), Cloudflare (media storage in Western Europe, processing and delivery), RevenueCat (purchases), Apple and Google (sign-in, payments, notifications), Expo (notification delivery), Sentry (error reports), AppsFlyer (ad measurement, only with your consent). Some are based in the United States: these transfers rely on the European Commission’s standard contractual clauses or the Data Privacy Framework.

How long we keep data

Free album: locked 14 days after its creation, then deleted with its files 3 days later. Album with an event pass: kept for one year after the purchase. Picpic+: kept while the subscription is active, then 90 days before the free rules apply (only 7 days at the end of a free trial or after a refunded first payment). You get a reminder before the deadline.

Account deletion (Profile → Delete my account): your account, your albums and all their content are deleted. The photos and videos you added to other people’s albums stay there by default, no longer linked to your account; an option deletes them too.

A deleted file leaves storage within hours. Technical database backups are erased as they rotate.

Your rights

You can access, correct and delete your data, object to some processing, ask for its restriction and get your files back (download the originals from the app). Most of this is done directly in the app; otherwise write to contact@picpic.day. You can also contact your data protection authority (in France, the CNIL: cnil.fr).

Security

Exchanges are encrypted. Originals are private: only authorized members can reach them, through signed temporary links, after our servers check their rights.

Recommended age

Picpic is recommended from the age of 12. Under 15, a parent’s consent is required to create an account.

Changes

We may update this policy; the date at the top shows the latest version. If something important changes, we let you know in the app.