Eyko LLC, a company registered in the State of Wyoming, United States (hereinafter "we" or "Publisher"), places great importance on the protection of your personal data. This Privacy Policy describes what data we collect, why we collect it, how we use it, and what your rights are.
It applies to the Pico mobile application ("Application") and supplements the Terms and Conditions.
For users residing in the European Union, we comply with the General Data Protection Regulation (GDPR / EU Regulation 2016/679). We act as data controller within the meaning of the GDPR.
Contact: [email protected]
1.1 Data provided during onboarding
During the initial setup of the Application, you voluntarily provide us with:
This data is stored locally on your device and is not transmitted to our servers, except as noted below.
1.2 Data generated through use
This data is stored exclusively on your device.
1.3 Account data (if you create an account)
If you register via Apple Sign-In or Google Sign-In:
This data is transmitted to Supabase (our authentication and database provider).
1.4 Community data
If you participate in the community:
This data is stored on our Supabase servers and visible to other users according to community settings.
1.5 Pico AI assistant data
Messages you send to the Pico AI assistant are transmitted to Anthropic (AI model provider) to generate responses. These exchanges are not retained on our servers beyond the time required to process the request.
1.6 Purchase data
If you subscribe to a Premium plan, RevenueCat processes and retains:
We never collect or store your payment information (credit card, etc.) — this data remains with Apple.
1.7 Technical data
| Data | Purpose | Legal basis (GDPR) |
|---|---|---|
| Onboarding data | Personalization of the experience | Contract performance / Consent |
| Progress data (journal, mood) | Application functionality | Contract performance |
| Account data | Authentication, device restore | Contract performance |
| Community data | Community space functionality | Contract performance |
| AI messages | Generating Pico's responses | Contract performance |
| Subscription data | Managing Premium rights | Contract performance / Legal obligation |
3.1 Local data
The majority of sensitive personal data (journal, mood, no-contact progress, onboarding data) is stored exclusively on your device via the Application's local storage. This data does not pass through our servers.
Important: if you uninstall the Application, lose, or change your device without an active iCloud backup, this data will be permanently lost. We strongly recommend enabling iCloud Backup on your device.
3.2 Data on our servers (Supabase)
The following data is stored on Supabase servers:
Supabase is a provider whose servers are located in the European Union (AWS eu-west-1 region or equivalent). Supabase is subject to the European Commission's standard contractual clauses for data transfers outside the EU where applicable.
3.3 Transfers to third countries
Your data may be processed outside the European Union by our providers:
These transfers are governed by the European Commission's standard contractual clauses or equivalent recognized mechanisms.
| Data | Retention period |
|---|---|
| Local data (journal, mood, progress) | Until uninstallation or reset |
| Account data (Supabase) | Until account deletion |
| Community posts | Until deleted by the user or account deletion |
| AI messages | Not retained beyond request processing |
| Subscription data (RevenueCat) | Per RevenueCat's policy (generally 7 years for tax obligations) |
We never sell, rent, or commercialize your personal data.
Your data may be shared only with:
These providers act as data processors within the meaning of the GDPR and are contractually bound to process your data only according to our instructions and in compliance with applicable regulations.
We may also share your data if required by law or in response to a valid legal request from a competent authority.
We implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction, including:
No system is infallible. In the event of a data breach likely to affect your rights, we will notify you within the timeframes required by applicable regulations.
If you reside in the European Union, you have the following rights over your personal data:
To exercise these rights, contact us at [email protected]. We will respond within 30 days.
You also have the right to lodge a complaint with the supervisory authority in your country of residence (in France: the CNIL — www.cnil.fr).
You may delete your account at any time from within the Application (Profile > Reset). This action results in:
Cancellation of your Premium subscription must be done separately via the App Store (Article 11.6 of the Terms) before deleting your account.
The Application is available to users aged 13 and over, in accordance with the App Store rating. We do not knowingly collect personal data from children under the age of 13. If you believe a child under 13 has provided us with personal data, please contact us at [email protected] so that we may delete it promptly.
The Application may send push notifications if you authorize it. You may revoke this permission at any time in your device settings (Settings > Notifications > Pico). We do not use notifications for advertising purposes.
We may update this Privacy Policy. Any material change will be notified within the Application or by email at least 15 days before it takes effect. The date of the last update is indicated at the top of this page.
Eyko LLC
Wyoming, United States
Email: [email protected]