Privacy Policy — Pickex
_Last updated: 1 August 2026_
Pickex ("the app") is operated by Paul Kohlendorfer (see "Contact / Impressum" below), the controller under the EU General Data Protection Regulation (GDPR).
Pickex is private by design. It helps you find and delete photos of a specific person on your own device. This policy explains what is — and isn't — processed.
In short
- Your photos and the face data used to find matches are processed **entirely on your device**. They are never uploaded, transmitted, or seen by us or anyone else.
- The only data that leaves your device is what's needed to process and restore your one-time purchase, handled by Apple and by RevenueCat.
- No account, no login, no advertising, no cross-app tracking.
1. Data processed on your device only (never transmitted)
- Photos & images: Pickex scans your photo library locally, on your device, using on-device machine learning to find photos of the person you select.
- Face data: To match photos, the app computes mathematical representations ("embeddings") of faces on your device. These are kept only in a local cache on your device and are never uploaded. We never receive them.
- Your name & app settings: stored locally on your device only.
We (the developer) have no access to any of the above. Deleting the app removes this local data.
2. Data processed off your device
a) Payments — Apple
When you buy the one-time unlock, the payment is processed by **Apple** under Apple's own privacy policy. We never receive or store your payment details.
b) Purchase management — RevenueCat
We use RevenueCat, Inc. (our processor) to validate and restore purchases. For this, RevenueCat processes:
- your purchase history for this app, and
- a pseudonymous app-user identifier plus device/technical information (e.g. country, device model, OS version).
This is used only to deliver and restore your purchase and to understand aggregate sales. It is not used for advertising and does not track you across other apps or websites.
- Legal basis: performance of a contract (Art. 6(1)(b) GDPR) to deliver your purchase; legitimate interests (Art. 6(1)(f)) in fraud prevention and understanding sales.
- RevenueCat privacy policy: https://www.revenuecat.com/privacy/
3. What we do NOT do
- We do not collect or upload your photos or face data.
- We do not use advertising or third-party tracking/analytics.
- We do not sell your data.
- We do not require an account or your email to use the app.
4. Retention
On-device data stays until you delete it or remove the app. Purchase records held by RevenueCat/Apple are kept as long as needed to provide the service and to meet legal and accounting obligations.
5. Your rights (GDPR)
You have the right to access, rectify, erase, restrict or object to processing, and to data portability. To exercise these rights regarding purchase data, contact us below. You may also lodge a complaint with a supervisory authority — in Austria, the Datenschutzbehörde (www.dsb.gv.at).
Because photos and face data never leave your device, we cannot access or provide them — they remain solely under your control on your device.
6. Children
Pickex is not directed at children under 16.
7. Changes
We may update this policy; the "last updated" date above will change accordingly.
8. Contact / Impressum (§ 5 ECG)
Paul Kohlendorfer
Kreuzweg 17, 4600 Wels, Austria
Email: kohlendorfer.paul@gmail.com