PICON Privacy Policy
PICON ("we") processes personal information of people who use the PICON app (the "Service") as follows.
1. What we collect and why
| Category | Data | Purpose | Retention |
|---|---|---|---|
| Account | Apple or Google sign-in identifier, email (a relay address if you choose Apple's Hide My Email), internal user ID | Sign-in, account management, abuse prevention | Until you delete your account |
| Profile | Language, country, daily reset time zone, age confirmation (14+), consent records | App language, counting free saves, legal records | Until you delete your account |
| Photo processing | A copy of the photo you choose (location and other metadata are removed on your phone before upload), person/pet masks, expression and pose analysis, the emoticon image you make | Cutting out the person to make an emoticon, recommending designs | Deleted as soon as you finish, and within 24 hours at most. The re-download copy after saving is deleted within 30 minutes |
| Usage | Free save, ad reward and export records, number of library slots, likes and favorites in the PICON tab, invite codes | Checking free uses and rewards, providing features | Until you delete your account |
| Credits and payments | Credit ledger, store transaction ID, product, amount, refund status (we never receive card numbers) | Granting, using and refunding credits | 5 years as required by Korean e-commerce law (after account deletion, kept only under an ID that no longer links to you) |
| Ads | Advertising identifier (on iPhone only if you allow tracking), ad reward confirmations | Rewarded ads and confirming rewards | Reward records until account deletion; we do not store the advertising identifier |
| Server logs | Request time, error code, internal user ID (no photos, caption text, tokens or emails) | Troubleshooting, security | 30 days |
| App usage events | A random ID created when the app is installed (not linked to your name or email), your internal user ID once you sign in, names of the screens you visit, action names such as creation steps, saves and failures with short details (chosen template name, error code, time taken), and phone time (no photos, caption text or names) | Seeing where people get stuck to improve the Service; troubleshooting | Deleted automatically after 90 days (records linked to your account are deleted immediately when you delete the account) |
| IP address | The IP address of the device sending a request and app/device information (User-Agent). Our providers' access logs also record an approximate country and city derived from the IP | Our providers' access logs (troubleshooting, security); stopping excessive repeated requests sent before sign-in | Provider access logs are deleted after a short period set by the provider (about 7 days). For limiting requests before sign-in we never store the raw IP — only a value mixed with a server secret — and delete it after about an hour |
- Kept only on your phone: your original photos, emoticons in your library, drafts in progress, and the PICON keyboard's emoticon list stay on your device and are not sent to our servers.
- PICON keyboard: we do not store or send anything you type with the keyboard. The keyboard has no internet access; Full Access is used only to read and copy your own emoticons on your phone.
- Face information: we analyze face position and expression to find and cut out the person in your photo. We do not use it to recognize or identify anyone, and we do not create or store face templates or other biometric identifiers. Photos and results used for analysis are deleted within the periods above.
- AI training: we do not use your photos or results to train AI.
2. Service providers and international transfers
| Recipient | Country | Role | Data | Retention |
|---|---|---|---|---|
| Supabase Inc. | Republic of Korea (Seoul) | Database, sign-in, file storage | Account, profile, usage, payment and app usage records and IP address logs in §1 | As above |
| Cloudflare, Inc. (R2) | Asia-Pacific | Temporary storage for photo processing; storage of emoticons shared with friends | Photo copy, masks, result images; images of shared emoticons | Temporary files up to 24 hours; shared emoticons until you unshare them or delete your account |
| Runpod Inc. | United States and others | Photo analysis and cut-out (GPU) | Photo copy | Deleted right after processing |
| Google LLC (AdMob) | United States | Rewarded ads | Advertising identifier, device information | Google's policy |
| Google LLC (ML Kit, Android only) | United States | Diagnostics and usage statistics for the on-device cut-out — your photo never leaves your phone | Device information (manufacturer, model, OS), app name and version, processing time and error codes, image format and size | Google's policy |
| RevenueCat, Inc. | United States | Store purchase verification | Internal user ID, transaction data | RevenueCat's policy |
| Apple Inc. / Google LLC | United States | Sign-in, in-app purchases | Sign-in and purchase data | Their policies |
3. Your rights
- In the app: Me → Delete account (immediate, see §5); turn off ad tracking in iPhone Settings.
- To access, correct, restrict or withdraw consent, contact support@piconfamilys.com. We respond after verifying your identity, within the legal deadline.
- US residents may exercise rights under their state's law (access, deletion, correction, opting out of sale or sharing) at the same address. We do not sell personal information.
4. Children
- You must be 14 or older to sign up (confirmed at sign-up). If we learn a user is under 14 (under 13 in the US), we delete the account.
5. Account deletion
- In Me → Delete account, after you sign in again to confirm it is you, sign-in is blocked immediately and your profile, photo processing files and usage records on our servers are deleted. Remaining credits and extra library slots are lost and cannot be refunded.
- Credit and payment records we must keep by law remain only under an ID that no longer links to you, and are deleted when the period ends.
- Backups expire within about 7 days.
- Your library and keyboard emoticons on that phone are also deleted. Images you saved to Photos or sent in chats cannot be removed by the app.
6. Security
- Encrypted connections (HTTPS), photo files exchanged only through short-lived links, two-step verification for administrators, tamper-proof admin activity logs, row-level access control in the database, and secret keys kept only in server settings.
7. Contact
- Privacy officer: PICON privacy team / Email: support@piconfamilys.com
8. Changes
- We will announce changes in the app 7 days before they take effect (30 days for changes unfavorable to you).
- Effective date: November 12, 2026
Friends and bestie sharing
- "Share with friends" is on by default when you save an emoticon; you can turn it off before saving, and make any emoticon private again from the library at any time.
- When you mark an emoticon as "shared with friends", its image file (which may contain a person's photo), caption and template name are kept in private storage so that your friends can view it, and friends you designate as besties may copy it to their device and use it.
- Profile picture: only if you choose one, we keep one of the emoticons you made (not a photo from your album), reduced to 256×256, in private storage and show it next to your name in friend lists, emoticons you share with friends, comments and notifications. You can change or remove it at any time; the old file is deleted right away, and it is deleted when you delete your account.
- Reports: when you report an emoticon, comment or person, we keep who reported, the target and its owner, the reason and note, and what it said at the time (comment text, caption and file location, display name) so our team can review it. We never tell the reported person who reported them. Report records are deleted when either the reporter or the reported person deletes their account.
- Turning sharing off deletes the server file immediately; the bestie's copy is removed the next time their app opens. Friendship and bestie records (the other user's identifier, request/accept times, block records) are kept until the relationship ends or the account is deleted.
- You must have the consent of any other person shown in an emoticon before sharing it, and we may stop sharing an emoticon when it is reported.
- Notifications: if you allow notifications, we store your device's notification token (a random per-device value) to send friend updates and the daily free-save reminder. You can turn each kind off in My › Notifications; the token is deleted with your account.