Privacy Policy – Picksy
Last updated: February 2026
1. Data Controller
Picksy is operated by Reshape Agency ("Controller", "we").
Contact email: info@reshape.agency
2. Scope
This Privacy Policy explains how we collect, use, store, and protect personal data when you use the Picksy mobile application.
3. Data We Collect
- Account information (email address, authentication credentials)
- User-generated product reviews (product name, store, price, description, rating)
- Uploaded product photos
- User-created categories
- Technical data necessary for app functionality (device type, app version)
Advertising data
We use Google AdMob to display banner advertisements to free-plan users.
AdMob may collect device identifiers and usage data to serve non-personalized ads.
See Google's Privacy Policy for details.
We do not use analytics tools at this time.
We do not sell personal data.
4. Purpose and Legal Basis (GDPR Art. 6)
- Performance of a contract – to provide the Picksy service
- Legitimate interest – security, fraud prevention, service improvement
- Legal obligation – where required under EU or national law
5. Data Storage and Processors
Data is stored using secure cloud infrastructure, including services provided by Amazon Web Services (AWS), such as secure object storage (e.g., S3).
All processors act under a Data Processing Agreement (DPA) and process data solely on our documented instructions in accordance with GDPR.
6. International Transfers
If data is processed outside the European Economic Area (EEA), we ensure appropriate safeguards such as Standard Contractual Clauses (SCCs).
7. Data Retention
Personal data is retained for as long as the user account remains active or as required by applicable law. Users may request deletion at any time.
8. Your Rights (GDPR Articles 13–22)
- Right of access
- Right to rectification
- Right to erasure
- Right to restriction of processing
- Right to data portability
- Right to object
- Right to lodge a complaint with a supervisory authority
You may request deletion of your Picksy account and all associated personal data by visiting:
Account Deletion Request.
We will process deletion requests within 30 days of verification.
9. Security Measures
We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk.
10. Children's Privacy
The app is not intended for individuals under 16 years of age.
11. Changes to This Policy
We may update this Privacy Policy. Updates will be published on this page.