Privacy Policy

Who we are

PicToss is made by Halil Berkay Şahin, trading as TheCodeVolt (“we”, “us”). For the personal data described on this page, we are the data controller under the EU General Data Protection Regulation (GDPR) and Turkey's Law No. 6698 on the Protection of Personal Data (KVKK). You can reach us at info@thecodevolt.com.

What stays on your phone

To find duplicates and clutter, PicToss needs access to your photo library. Everything it works out stays on your iPhone:

• thumbnails and previews of your photos, used while you review them and never saved as separate files
• details about each photo or video: its size, date, dimensions, length, and whether it's a screenshot or a favorite
• image fingerprints (short codes that let PicToss spot exact duplicates) and a sharpness score for blur detection
• your keep and toss decisions, the trash, the three counters, monthly seals, your streak and the daily swipe count
• your settings

All of this lives in a local database inside the app. We can't see it. If you back up your iPhone to iCloud or a computer, that backup can include the database, and it stays between you and Apple.

PicToss doesn't recognize faces and doesn't read the location stored in your photos.

What leaves your phone

Purchases: Apple and RevenueCat

When you buy PicToss Pro, Apple takes the payment. We never see your card details or your Apple ID.

PicToss uses RevenueCat (RevenueCat, Inc., United States) to confirm purchases and unlock Pro. The app connects to RevenueCat when it starts and when you open the Pro screen, buy or restore, and it does so for free users too, so it can show prices and check whether Pro is active. RevenueCat receives:

• a random app user ID that RevenueCat creates on your phone (it starts with $RCAnonymousID). We don't link it to your name or email, and reinstalling the app creates a new one
• your App Store receipt and transactions: which product you bought, its price and currency, and the purchase and renewal dates
• technical details: device type, iOS version, app version, locale and currency code

Like any server the app connects to, RevenueCat also sees your IP address. RevenueCat processes this data for us as a data processor and stores it in the United States. No photos, photo details or decisions are ever sent to RevenueCat.

Sources: RevenueCat privacy policy, RevenueCat's App Store privacy guidance, how RevenueCat creates anonymous IDs.

Usage analytics and crash reports

Version 1.0 sends none. The app contains Google's Firebase libraries for usage analytics and crash reporting, but in version 1.0 they aren't connected to any Firebase project, so they send nothing.

If a later version starts sending usage data or crash reports, we'll update this policy before that version is released.

Emails you send us

If you write to info@thecodevolt.com, we receive your email address and whatever your message contains. We use it only to answer you.

Links that open outside the app

Links to the App Store, Apple's subscription settings or this website open in Apple's apps or your browser, under their own privacy terms.

What we don't do

• We don't upload your photos, and we don't run a server that could store them.
• We don't ask you to create an account.
• We don't show ads, and the app contains no advertising or attribution SDKs.
• We don't read your advertising identifier (IDFA) and don't track you across other companies' apps or websites.
• We don't sell or share your personal data.

Notifications

If you allow notifications, PicToss schedules its reminders on your iPhone itself. They're local notifications: there's no push server, and nothing is sent to us. You can turn them off in the iPhone Settings app under Notifications.

Photo access and deleting photos

iOS lets you give PicToss full access to your library or access to selected photos only. With limited access, PicToss sees and cleans only the photos you picked. You can change this any time in the iPhone Settings app.

PicToss deletes photos only after you tap Empty trash and confirm the iOS prompt. The photos then stay in Recently Deleted for about 30 days. If you use iCloud Photos, deleting a photo removes it from every device signed in to your Apple ID.

Why we may process this data

• Purchase data handled by RevenueCat: to show Pro prices, unlock Pro after you buy or restore, and keep purchases safe from fraud. The legal bases are performing our contract with you (GDPR Art. 6(1)(b), KVKK Art. 5(2)(c)) and our legitimate interest in a working purchase system (GDPR Art. 6(1)(f), KVKK Art. 5(2)(f)).
• Support emails: our legitimate interest in answering you (GDPR Art. 6(1)(f), KVKK Art. 5(2)(f)).

Data stored outside Turkey and the EU

RevenueCat stores the purchase data described above on servers in the United States, so that data leaves Turkey and the EU when the app connects. Nothing else PicToss handles is transferred abroad by us.

How long data is kept

• Data on your phone: until you delete the app.
• RevenueCat: as long as it's needed to keep your purchase working and to meet RevenueCat's legal obligations, or until we delete your record at your request.
• Support emails: as long as we need them to help you, and no longer than 24 months after your last message.
• Apple keeps its own purchase records under its own policies.

Deleting your data

• Delete the app to remove everything PicToss stored on your phone. Your photos stay where they are.
• Older iPhone backups may still hold a copy until they're replaced.
• Purchases belong to your Apple ID, not to PicToss. If you reinstall, tap Restore purchases to get Pro back.
• To have your RevenueCat purchase record deleted, email us your App Store order ID (it's in Apple's receipt email). Deleting the record doesn't cancel a subscription, so cancel it first in Settings > your name > Subscriptions.

Your rights

Depending on where you live, the GDPR or the KVKK (Article 11) gives you the right to:

• know whether we process your personal data and get a copy of it
• learn why it's processed and who receives it, in Turkey or abroad
• have wrong data corrected, and have data deleted
• restrict or object to processing, and get your data in a portable format (GDPR)
• have third parties who received your data told about a correction or deletion (KVKK)
• object to a result that goes against you and comes only from automated analysis (KVKK)
• claim compensation if unlawful processing caused you damage (KVKK)

Email info@thecodevolt.com to use any of these rights. We answer within 30 days, free of charge. Because PicToss has no accounts, we may ask for your App Store order ID to find a purchase record. You can also complain to the Turkish Personal Data Protection Authority (KVKK) or to the data protection authority in your EU country.

Children

PicToss isn't directed at children under 13, and we don't knowingly collect personal data from them. The app has no account or sign-up and asks no one's age. If you think a child has sent us personal data, for example in an email, write to us and we'll delete it.

Security

Your photos and the PicToss database are protected by your iPhone's own security, including your passcode and the device encryption. Connections to Apple and RevenueCat are encrypted (HTTPS). If we learn of a breach that affects your data, we'll tell you and the authorities as the law requires.

This website

pictoss.thecodevolt.com sets no cookies and loads no analytics, ad or tracking scripts. Its fonts and images come from this domain only. The site is hosted by Vercel, which processes standard request data, such as your IP address, browser type and the page you asked for, to deliver the site and protect it from abuse.

Changes to this policy

When we change this policy, we update the effective date at the top. If a change affects what data leaves your phone, we'll publish it here before the app version that needs it is released.

Contact

Halil Berkay Şahin (TheCodeVolt), info@thecodevolt.com