Pictansu

Pictansu

Privacy Policy

Effective date: · Sloth Lab Inc.

This policy explains how Pictansu (“the App”), operated by Sloth Lab Inc. (“we”, “us”), handles your information. The short version: your photos never reach us. They stay encrypted on your device and, if you choose, in your own cloud storage. Outside your device, the App contacts RevenueCat to check your lifetime unlock, and the cloud storage you choose if you turn on backups. If you choose Google Drive, you also sign in with Google.

No account, no server

Pictansu has no user accounts and we run no server that receives your photos or personal data. You do not sign up, and we do not know who you are.

What we collect

We run no server and receive no personal data ourselves. The only data collected through the App goes to RevenueCat, our service provider: a pseudonymous record with no name or email attached (see “Purchases” below). The App has:

  • No account, and no name or email sent to us
  • No analytics or usage tracking
  • No advertising IDs and no ads
  • No crash reporting
  • No access to your location or contacts

Your photos and videos

Photos, videos and their metadata (such as file names, albums and dates) are encrypted on your device using XChaCha20-Poly1305 (libsodium). Your encryption key is derived from your PIN or recovery code with Argon2id. Your files and keys are never sent to us, and we cannot decrypt them. Your photos and videos never leave your device, except as end-to-end encrypted backups to your own cloud storage if you turn them on.

The App uses photo library access to list your library in its own picker on your device so you can choose what to import, to import the items you select, to save items you export and, if you confirm, to delete the originals after they have been encrypted and verified. Items you don't select are not stored or sent anywhere. Face ID / fingerprint unlock is handled by your device's operating system; the App never receives your biometric data.

Backups to your own cloud

Backups are optional. If you turn them on, encrypted backup files go only to the cloud storage you choose:

  • Google Drive — using the drive.file permission, which lets the App see only the files it created. It cannot see your other Drive files.
  • iCloud Drive — in the App's own iCloud folder.

Backups are encrypted before they leave your device, so neither we nor your cloud provider can read your photos, videos or their names, albums and dates. A few details stay readable without your recovery code, so the App can show what a backup holds: when it was made, the device type (iOS or Android), the number of items, the total size, each encrypted file's size and random name, and a random vault ID. Storage of those files is subject to Google's or Apple's privacy policy.

Google Sign-In (only for Google Drive backup)

You never need a Google account to use Pictansu. Only if you choose Google Drive as your backup location do you sign in, on Google's own sign-in screen. Google handles that sign-in under Google's privacy policy, and its sign-in software may process details such as your name, email address, account ID, and device and usage data.

The App uses your email address only to show which account is connected. It stays in the App's memory on your device: Pictansu does not save it or send it to us. Google's sign-in software keeps you signed in on this device. You can remove the App's access at any time in your Google Account.

Purchases

In-app purchases are processed by Apple (App Store) or Google (Google Play). We never receive your payment details.

To confirm your lifetime unlock, the App uses RevenueCat, a purchase-verification service acting on our behalf. RevenueCat starts when the App launches, so it receives data even if you never buy anything:

  • A random app user ID created on your device
  • Your purchase history, if any (the store receipt: which product was bought and when)
  • Technical details sent with each request: device brand or model, operating system version, app version, language settings and store country
  • On iPhone and iPad, Apple's identifier for vendor: a device ID shared by apps from the same developer on that device. It is not the advertising ID. On Android, RevenueCat's software sends no device identifier in this App
  • Your IP address, as with any internet connection

RevenueCat does not receive your name, email, photos or any vault content. This record is pseudonymous: it has no name attached, but it does use an ID. We do not use it for tracking, analytics or advertising. See RevenueCat’s privacy policy.

Crash reporting in the future

If we ever add anonymous crash reporting, we will update this policy and disclose it here first, before it is turned on.

Data retention and deletion

We hold no personal data about you on any server of ours. Apart from your own backups and what Google keeps for your sign-in, the only record outside your device is the pseudonymous record at RevenueCat, kept while it is needed to confirm purchases. It can exist even if you never bought anything.

  • On your device: deleting the App deletes the local vault data. Export anything you want to keep first.
  • In your cloud: backups in your Google Drive or iCloud Drive are under your control and are deleted by you there.
  • RevenueCat record: email us your App Store or Google Play order ID and we will delete the matching record from RevenueCat. If you never bought anything there is no order ID, and because the record has no name or email we usually can't match it to you.

Step-by-step instructions: Data deletion.

Children

The App is not directed at children under 13 (or the minimum age in your country). We ask for no name, email or other details that identify a child. The only data collected is the pseudonymous RevenueCat record described above.

Your rights

Depending on where you live (for example under the GDPR or CCPA), you have rights to access, correct, export or delete personal data. Pseudonymous data can count as personal data under those laws. We hold no data ourselves that identifies you. To ask about or delete your RevenueCat record, contact us with your store order ID.

Changes to this policy

If we change this policy, we will update it on this page and change the effective date. Material changes, such as adding crash reporting or a new service provider, will be posted here before they take effect.

Contact

Sloth Lab Inc. — admin@slothlab.app