Privacy Policy

Last updated: April 15, 2026

Who we are

Pictofy is an AI-powered pictogram generator. We are the data controller for the personal data we process. Contact: support@pictofy.app.

What we store

  • Account information: Email address, password (encrypted)
  • Purchase history: Credit purchases and transactions (via Stripe)
  • Generated pictograms: Prompt, style, image URL, metadata
  • Character images: Uploaded photos for the character feature (can be deleted)

What we do NOT store

  • Payment card details (handled by Stripe)
  • IP addresses (only temporarily for free generation, deleted after 90 days)
  • Tracking cookies (we do not use third-party cookies)

Data processors

We use the following services to deliver Pictofy:

  • Supabase (EU) — Database, authentication, file storage
  • Stripe (USA, EU SCCs) — Payment processing
  • OpenAI (USA, DPA) — AI prompt processing (data NOT used for training via standard API)
  • Replicate (USA, DPA) — AI image generation (data NOT used for training via API)
  • Vercel (USA/EU) — Web hosting
  • Resend (USA) — Transactional emails

Photo uploads (character feature)

When you upload a photo for the character feature:

  • The photo is only stored as a character reference — it is not used for any other purpose
  • It is sent to AI models (Replicate) to generate stylized pictograms
  • The generated pictogram is stylized and cannot be used for facial recognition
  • Pictograms created with the character feature are never used for marketing or shared publicly
  • You can delete your characters and associated photos at any time
  • Account deletion removes all uploaded photos

Community and marketing

Pictograms generated without the character feature may be featured in our gallery, marketing materials, or as examples of the service. Pictograms generated with the character feature (based on your own photo) will never be used for these purposes.

Children's data (GDPR Art. 8)

Pictofy is not designed for direct use by children under 16, but the tool is commonly used by adults (parents, educators, speech therapists) to create pictograms for children. We do not knowingly collect personal data from children.

  • Only adults can create a Pictofy account. By creating an account you confirm that you are at least 16 years old.
  • If you upload a photo of a child to the character feature, you must have legal guardianship or consent from the guardian.
  • Pictograms generated with the character feature are always private and never shared publicly.
  • You can delete uploaded photos and generated pictograms relating to a child at any time.
  • If you discover that a child has created an account, contact support@pictofy.app and we will remove the account.

Your rights (GDPR)

You have the right to:

  • Access your data — contact us for a complete overview
  • Rectify incorrect data — update your profile or contact us
  • Delete your account and all associated data — use "Delete account" in settings
  • Export your data — contact us for a data extract
  • Withdraw consent — stop using the service and delete your account

Data retention

  • Account information: as long as you have an active account
  • Generated pictograms: as long as you have an active account
  • IP logging for free generation: deleted after 90 days
  • On account deletion: all data removed within 30 days

Contact

Questions about your data? Write to support@pictofy.app.