Effective date: May 26, 2026
1. Information We Collect
When you use PicPenny (the "Service"), we may collect the following types of information:
- Account Data: Email address, display name, and third-party login identifiers (Google, Facebook, Apple) provided during registration.
- Document Images: Photos or scanned files you upload for OCR recognition and document management, including the image files themselves and the OCR text extracted from them.
- Device & Usage Data: Device model, OS version, app version, and basic usage logs for service quality analysis (does not include personally identifiable information).
- Advertising ID: When you watch rewarded ads, Google AdMob may collect advertising IDs to serve relevant ads. Data handling follows Google's Privacy Policy.
2. How We Use Your Information
We use the collected information for the following purposes:
- Providing document OCR text recognition and categorization
- Managing your account, quota, and usage history
- Improving service quality and user experience
- Delivering rewarded ads (via Google AdMob)
- Complying with legal obligations and protecting our legitimate rights
3. Data Sharing & Third-Party Services
The Service integrates with the following third-party services, which may involve data transmission:
- Google AdMob (advertising) — Device advertising ID, governed by Google's Privacy Policy, with SSV (server-side verification) ensuring correct reward crediting.
- Google Gemini API (optional AI classification) — When AI classification is enabled, OCR text is sent to the Gemini API for categorization. You may disable this feature in Settings.
We do not sell, trade, or transfer your personal data to third parties without your consent.
4. Data Storage & Security
- Your document images and OCR text are stored in encrypted storage on Google Cloud (us-central1 region).
- Data in transit is encrypted using TLS 1.3.
- We implement industry-standard security measures to protect your data.
- Passwords are hashed using bcrypt; we cannot recover your original password.
5. Data Retention
- Your account data is retained until you delete your account.
- Uploaded document images are purged from servers within 30 days of deletion.
- We may retain certain records for legal or compliance purposes.
6. Your Rights
You have the right to:
- Access and update your personal data
- Request deletion of your account and associated data
- Disable AI classification (without affecting other service features)
- Revoke third-party login authorizations
To exercise your rights, please contact us using the information below.
7. Children's Privacy
The Service is not designed for children under 13. We do not knowingly collect personal data from children. If we discover such data has been collected, we will delete it immediately.
8. Policy Changes
We may update this Privacy Policy from time to time. Material changes will be notified via in-app notice or email. Continued use of the Service after changes constitutes acceptance of the updated policy.