Español

Privacy Policy

Last updated: September 17, 2026

This Privacy Policy explains how PicFil processes personal data to allow users to create private groups, invite members and share photos within those groups.

1. Controller and contact

PicFil is currently published and operated by YAPIKO SOFTWARE HOUSE, S.L. (Spanish tax ID B87088746), the controller of the personal data described in this Privacy Policy.

Registered address: Calle Monaco 33, 28232 Las Rozas, Madrid, Spain.

Privacy and support contact: info@yapiko.com.

2. Data we may process

• Account and authentication data: user identifier, phone number, username, profile picture and technical data required to sign in or verify the account.
• Group data: group name, description, dates, location or coordinates associated with the group, members, roles, invitations, group status and activity needed to administer the group.
• Photos and shared content: images uploaded by users, technical file metadata, storage references, thumbnails, data associated with the group gallery and, when the feature requires it and the user allows it, location metadata included in photos.
• Contacts: when the user grants permission, PicFil may read device contacts to help with invitations or resolve whether a contact already uses PicFil. We may temporarily store contact-derived information on the device to improve the performance of that feature.
• Notifications: push notification tokens, preferences or technical data needed to send relevant alerts.
• Technical and security data: operational logs, technical identifiers, errors, app version, device or information needed to keep the service secure and stable.
• Product analytics data, only with consent: a pseudonymous app-instance identifier, screens visited, sessions, country or approximate location, device information and events indicating completion of flows such as onboarding, creating or joining a PicFil, invitations, uploads or Smart Match. We do not send names, phone numbers, photos, precise coordinates, PicFil names or identifiers, or invitation codes.
• Product feedback: answers that the user voluntarily submits through in-app surveys and limited context needed to interpret them, such as their role and ranges for the number of photos or members. These answers are stored separately from Firebase Analytics.

3. Purposes

• Create and manage accounts.
• Create groups, add members and manage permissions.
• Upload, display, delete and sync shared photos.
• Send invitations, reminders and notifications related to groups.
• Resolve contacts in a limited way to improve the invitation experience.
• Apply product limits, security, abuse prevention, incident review and content or account moderation when needed.
• Diagnose errors, improve performance and maintain service availability.
• Understand, only with consent, how PicFil is used, measure its main flows and improve the product.
• Collect and analyze voluntary feedback to assess new features, pricing and product priorities.

4. Device permissions

PicFil may request camera, photos/gallery, location, media location, contacts and notification permissions to provide app features. The user can manage these permissions from the device settings.

5. Legal basis

Depending on the context, processing may be based on performance of the service requested by the user, consent for optional device permissions, legitimate interest in security and stability, or compliance with applicable legal obligations. Product analytics is based on consent: refusing it does not limit PicFil and consent can be withdrawn in Settings. The user's voluntary submission of a feedback answer is the basis for processing that answer.

6. Data sharing and providers

PicFil may use technical providers to provide the service, including Firebase/Google Cloud, Expo/EAS and Apple or Google push notification services. When the user consents, we use Google Firebase Analytics for product analytics while keeping advertising uses and personalization denied. We do not sell personal data.

7. Shared content, reports and moderation

Photos and other content shared by a user in a private group may be visible to other members of that group according to the permissions available in PicFil.

We may review, restrict, remove or retain information related to content, accounts or groups when necessary to investigate reports, prevent abuse, protect users, enforce our terms or comply with legal obligations.

If a user believes that a photo, group, profile or behavior infringes rights, contains personal data without authorization, is illegal or breaches our terms, they can report it to info@yapiko.com.

8. Retention

We retain data for as long as necessary to provide the service, comply with legal obligations, resolve incidents or protect security. Some deletion actions may take time to be reflected due to technical processes, caches or backups.

Analytics data is retained according to the period configured in GA4 and Google's applicable policies. When consent is withdrawn, PicFil stops collection and resets the local Analytics app-instance identifier; aggregate reports already produced may not make it possible to later separate one person's contribution.

Product-feedback answers are retained for as long as needed to evaluate and develop the product. They may then be deleted or retained in aggregate form without being linked to an account.

Deleting an account from the app deletes or detaches associated information to the extent provided by the service, including profile, group memberships and photos uploaded by that account when technically applicable. Limited information may remain for the time necessary for security, legal compliance, incident resolution, abuse prevention, backups or technical logs.

9. Rights

Where allowed by applicable law, the user may request access, rectification, deletion, objection, restriction or portability of their data using the contact indicated in this policy.

The user may also request account or data deletion by writing to info@yapiko.com, especially if they cannot access the app. You can also see Delete account and data.

10. Minors

PicFil is not intended for minors who are not old enough to consent to the use of digital services under applicable law.

11. Security

We apply reasonable technical and organizational measures to protect data, including access rules, authentication, storage controls and limitation of sensitive logs.

12. Changes

We may update this policy to reflect changes in PicFil, legal requirements or service improvements. The published version will apply at each time.

13. Language

PicFil may make this policy available in several languages. For the initial launch in Spain, the Spanish version is the reference version. In case of conflict between translations, the Spanish version will prevail unless applicable law requires otherwise.