pict.

Privacy Policy for pict.

Last updated: June 6, 2026

This Privacy Policy explains how the pict. iOS and iPadOS app ("pict.", "the app", "we", "us") handles information when you use it. pict. is developed by Tyrell Marchant. If you have any questions about this policy, contact us at [email protected].

TL;DR

• pict. does not require you to create an account or provide any personal information to play.
• When you first launch the app, we create an anonymous account on our backend (Supabase) so your scores can appear on global leaderboards. This account is not tied to you personally unless you choose to claim it.
• The only personal information we collect is an email address, and only if you choose to "claim" your account (via email or Sign in with Apple) so you can sync across devices.
• We do not sell your data. We do not use third-party advertising or tracking SDKs.
• You can permanently delete your account and all its data from inside the app at any time.

Information we collect

1. Automatically on first launch

When you launch pict. for the first time, we create an anonymous account on our backend (Supabase). This account is identified only by a randomly generated user ID and an auto-generated display name (which you can change in the Profile tab). It is not linked to your Apple ID, name, email, or any other personal identifier.

2. Gameplay data

When you complete a puzzle that contributes to a leaderboard (the Daily Ranked puzzle in the Today tab, a weekly Ranked pack, or a monthly Mural campaign tile), we send the following to our backend:

• Your anonymous user ID
• Your chosen display name
• The puzzle identifier
• Your score, completion time, mistakes, and hints used
• The date/time of the solve

We use this information solely to compute leaderboards and to validate that scores were not tampered with.

Practice play (the Practice tab) is local-only and is not sent to our backend.

3. Optional account claim (email or Sign in with Apple)

If you choose to "claim" your anonymous account from the Profile tab — typically because you want to sign in on another device — you can do so two ways:

• Email: we collect your email address and send you a one-time login code (email OTP).
• Sign in with Apple: Apple provides us an identifier and, if you permit it, an email address. If you use Apple's "Hide My Email" feature, we only ever receive Apple's private relay address, not your real email.

We use this information only to authenticate you and sync your progress. We do not send marketing email and we do not share it with third parties.

4. Data stored on your device

The app stores gameplay state on your device using Apple's SwiftData framework. This includes your in-progress puzzles, your Practice bests, your streak, your hint balance, and your appearance preference. This data lives only on your device and is removed when you delete the app.

5. Information we do not collect

pict. does not collect or use:

• Your contacts, calendar, photos, microphone, camera, or location
• Health, fitness, or motion data
• Advertising identifiers (IDFA)
• Browsing history outside the app
• Third-party analytics or advertising SDKs (the app does not bundle any)

How we use information

We use the information described above only to:

• Provide core app functionality (your puzzles, scores, and progress)
• Compute and display leaderboards
• Authenticate you if you choose to claim your account via email or Sign in with Apple
• Diagnose and fix bugs and crashes (Apple may provide aggregated, anonymized crash reports through TestFlight and App Store Connect)

We do not use your information for advertising, profiling, or sale to third parties.

How information is stored and protected

• Anonymous account data and gameplay records are stored on Supabase, our backend provider, in encrypted databases. See Supabase's privacy practices for details on their security.
• Local app data is stored in iOS's standard sandbox using SwiftData and is protected by iOS device-level security.
• We use industry-standard encryption (TLS) for data transmitted between the app and our backend.

Children's privacy

pict. is suitable for general audiences and does not knowingly collect personal information from children under 13. Because no personal information is required to use the app, no such information should be collected in normal use. If you believe a child under 13 has provided personal information (for example, an email address through the optional account claim), please contact [email protected] and we will delete it.

Your choices and rights

• You can use pict. entirely without providing an email or any personal information by simply not claiming your account.
• You can change your display name at any time from the Profile tab.
• You can delete your local data at any time by deleting the app.
• You can permanently delete your account and all associated data — your profile, solves, scores, and leaderboard entries — from inside the app at Profile → Delete account. This is immediate and cannot be undone. You can also email [email protected] to request deletion.

Depending on where you live (for example, in the EU/UK under GDPR, or in California under CCPA), you may also have the right to access, correct, port, or delete personal information we hold about you, and to object to or restrict certain processing. To exercise any of these rights, email [email protected].

Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top will reflect the latest revision. Significant changes will be communicated in the app or in TestFlight release notes.

Contact

If you have questions or requests about this Privacy Policy, contact:

Tyrell Marchant
[email protected]