Last updated: May 12, 2026
This Privacy Policy explains how Pico (the "App") handles user information. The App handles information only to the extent necessary to provide its features. The App does not perform advertising tracking and does not sell user data.
- Information We Handle
The App handles the following information to provide its features.
- Account information: User IDs issued by Supabase, guest account identifiers, and email addresses when you sign in with Apple or Google.
- Task information: Task titles, dates, start and end times, all-day settings, completion status, recurrence settings, notification and alarm settings, color settings, creation timestamps, and related task details.
- Subscription information: RevenueCat customer identifiers, purchase eligibility information, subscription status, and related information used to confirm purchase, restore purchase, and active Pico Pro access. Payments are processed by Apple, and the App does not collect credit card numbers or other payment card details.
- Support inquiry information: If you contact support, the message body, inquiry ID, app version, OS version, device model, and related information included in the inquiry.
- Guest account transfer information: A hashed temporary token, source anonymous user ID, expiration time, usage time, and related information used to transfer a guest account to an Apple or Google account.
- Minimal usage status information: Last-seen timestamps and similar information used to maintain guest accounts and prevent abuse.
- Information stored on the device: Display theme, week start preference, app icon preference, widget task snapshots, scheduled notifications, authentication sessions, and similar app settings or local data.
- Purposes of Use
The App uses the information above for the following purposes.
- To create accounts, sign users in and out, link accounts, and transfer guest accounts.
- To provide task creation, editing, deletion, synchronization, recurrence, completion management, and widget display features.
- To run task notifications, badges, and alarms configured by the user on the device.
- To confirm Pico Pro purchases, restores, subscription status, and access to paid features.
- To respond to inquiries, investigate issues, protect security, prevent abuse, and maintain the App.
- To check minimum supported app versions and provide update notices.
- Third-Party Services
The App uses the following third-party services to provide its features. Information sent to each service is limited to what is necessary for the purposes described above.
- Supabase: Authentication, database, and Edge Functions for account deletion and guest account transfer.
- Google Sign-In: Sign-in and account linking with a Google account.
- Sign in with Apple: Sign-in and account linking with an Apple account.
- RevenueCat: In-app purchase, subscription status, and purchase restoration management.
- Apple App Store: In-app purchase payments, subscription management, refunds, and related App Store services.
Please also review the privacy policies of the relevant third-party services.
- Supabase: https://supabase.com/privacy
- Google: https://policies.google.com/privacy
- Apple: https://www.apple.com/legal/privacy/
- RevenueCat: https://www.revenuecat.com/privacy
- Sharing and Disclosure
The App does not sell user information. The App also does not provide user information to advertising tracking services or third-party advertising networks. Information may be shared or disclosed only in the following cases and only to the extent necessary.
- When processing is entrusted to cloud, authentication, payment, support, or related services necessary to operate the App.
- When the user has given consent.
- When disclosure is required by law, court order, administrative authority, or valid legal process.
- When necessary to prevent abuse, address security issues, or protect the rights of users or third parties.
- Device Permissions and Local Storage
When the user configures task notifications or alarms, the App requests iOS notification permission and alarm permission. Notification and alarm content is managed on the device. The App may store some task display data in the local App Group container for widget display.
Settings such as display theme, week start preference, and app icon preference are also stored on the device. Authentication sessions and temporary transfer information are managed in secure storage provided by the operating system or in the App's local storage.
- Retention and Deletion
Account and task information is retained for as long as necessary for the user to use the App. Users can start account deletion from the settings screen in the App. When account deletion is completed, the account, tasks, recurring tasks, notification rules, guest transfer information, and usage status information stored in Supabase are deleted, except for information that the App operator is required to retain by law.
Records related to subscriptions and payments may be retained by Apple, RevenueCat, or as required by legal or accounting obligations. Deleting an account does not necessarily cancel an App Store subscription automatically. If needed, please cancel the subscription from Apple's subscription management screen.
- Security
The App takes reasonable security measures, including encrypted communication, Supabase Row Level Security, data separation by authenticated user, and use of secure storage on the device. However, no internet communication or cloud service can be guaranteed to be completely secure.
- Children's Privacy
The App is not primarily directed to children. If it becomes clear that personal information has been collected from a child without parental consent, appropriate deletion or suspension measures will be taken.
- User Choices
Users can manage information handling in the following ways.
- Notification and alarm permissions can be changed in iOS Settings.
- Google or Apple account linking can be managed through the relevant account settings of each service.
- Subscriptions can be viewed and cancelled from the App Store subscription management screen.
- Account deletion can be performed from the settings screen in the App.
- Changes to This Policy
This Policy may be updated in response to added features, changes in laws or guidelines, or changes to third-party services. If there are important changes, they will be announced by updating this page or through in-app notice.
- Contact
For questions about this Policy or the handling of user information, please contact the App operator by selecting "Contact" from the settings screen in the App.