Privacy Policy
Last updated: June 12, 2026
This Privacy Policy explains how PicFil processes personal data to allow users to create private groups, invite members and share photos within those groups.
1. Controller and contact
Service controller: PicFil / Yapiko.
Privacy and support contact: development@yapiko.com.
2. Data we may process
- Account and authentication data: user identifier, phone number, username, profile picture and technical data required to sign in or verify the account.
- Group data: group name, description, dates, location or coordinates associated with the group, members, roles, invitations, group status and activity needed to administer the group.
- Photos and shared content: images uploaded by users, technical file metadata, storage references, thumbnails, data associated with the group gallery and, when the feature requires it and the user allows it, location metadata included in photos.
- Contacts: when the user grants permission, PicFil may read device contacts to help with invitations or resolve whether a contact already uses PicFil. We may temporarily store contact-derived information on the device to improve the performance of that feature.
- Notifications: push notification tokens, preferences or technical data needed to send relevant alerts.
- Technical and security data: operational logs, technical identifiers, errors, app version, device or information needed to keep the service secure and stable.
3. Purposes
- Create and manage accounts.
- Create groups, add members and manage permissions.
- Upload, display, delete and sync shared photos.
- Send invitations, reminders and notifications related to groups.
- Resolve contacts in a limited way to improve the invitation experience.
- Apply product limits, security, abuse prevention, incident review and content or account moderation when needed.
- Diagnose errors, improve performance and maintain service availability.
4. Device permissions
PicFil may request camera, photos/gallery, location, media location, contacts and notification permissions to provide app features. The user can manage these permissions from the device settings.
5. Legal basis
Depending on the context, processing may be based on performance of the service requested by the user, consent for optional device permissions, legitimate interest in security and stability, or compliance with applicable legal obligations.
6. Data sharing and providers
PicFil may use technical providers to provide the service, including Firebase/Google Cloud, Expo/EAS and Apple or Google push notification services. We do not sell personal data.
7. Shared content, reports and moderation
Photos and other content shared by a user in a private group may be visible to other members of that group according to the permissions available in PicFil.
We may review, restrict, remove or retain information related to content, accounts or groups when necessary to investigate reports, prevent abuse, protect users, enforce our terms or comply with legal obligations.
If a user believes that a photo, group, profile or behavior infringes rights, contains personal data without authorization, is illegal or breaches our terms, they can report it to development@yapiko.com.
8. Retention
We retain data for as long as necessary to provide the service, comply with legal obligations, resolve incidents or protect security. Some deletion actions may take time to be reflected due to technical processes, caches or backups.
Deleting an account from the app deletes or detaches associated information to the extent provided by the service, including profile, group memberships and photos uploaded by that account when technically applicable. Limited information may remain for the time necessary for security, legal compliance, incident resolution, abuse prevention, backups or technical logs.
9. Rights
Where allowed by applicable law, the user may request access, rectification, deletion, objection, restriction or portability of their data using the contact indicated in this policy.
The user may also request account or data deletion by writing to development@yapiko.com, especially if they cannot access the app. You can also see Delete account and data.
10. Minors
PicFil is not intended for minors who are not old enough to consent to the use of digital services under applicable law.
11. Security
We apply reasonable technical and organizational measures to protect data, including access rules, authentication, storage controls and limitation of sensitive logs.
12. Changes
We may update this policy to reflect changes in PicFil, legal requirements or service improvements. The published version will apply at each time.
13. Language
PicFil may make this policy available in several languages. For the initial launch in Spain, the Spanish version is the reference version. In case of conflict between translations, the Spanish version will prevail unless applicable law requires otherwise.