Piknik Privacy Policy
Piknik is a social photo and video-sharing app in which people contribute a shot to a shared Piknik. Contributions are intended to remain hidden from other participants until the Piknik is full and ready for its reveal. This Privacy Policy explains how personal information is handled when you use the Piknik mobile app and the website at pknk.app.
Piknik (“we,” “us,” or “our”) operates the service. For privacy questions, contact support@pknk.app.
1. Information we collect
Depending on which features you use, we may collect or process:
- Account and profile information: Email address, display name, username, profile photo (if supplied), authentication and session information, and account preferences. You can sign in with email (including a one-time code or password) or, where available, Google. If you use Google sign-in, we receive the account details Google shares with us for that sign-in, such as your email address and, when provided, name and profile photo.
- Shots and Piknik content: Photos or videos you choose to capture and contribute; Piknik titles, participation details, invitation or join information, timestamps, and related content or interactions supported by the app.
- Technical and security information: Information needed to operate and secure the service, which may include IP address, device or operating-system information, app version, session identifiers, and service logs.
- Notifications and permissions: If you enable notifications, we may process a push-notification token and your notification preferences. Camera access is requested when you take a shot. Photo-library access is requested only if you choose a profile photo from your device. We do not request access to your contacts or precise location.
- Support communications: Information you provide when contacting us about support, privacy, or safety concerns.
We do not currently use third-party advertising, analytics, or crash-reporting SDKs that collect advertising IDs or similar tracking identifiers for ads. If that changes, we will update this policy.
2. How we use information
We use information as needed to:
- Register and authenticate accounts, maintain sessions, and manage profiles.
- Create Pikniks, manage invitations and participation, receive contributions, and deliver the reveal to eligible participants.
- Operate notifications or account communications when those features are enabled.
- Respond to requests, enforce service rules, investigate abuse, and maintain service security and reliability.
- Meet applicable legal obligations and respond to valid legal requests.
We do not sell your personal information. We do not use your shots for unrelated advertising or targeted marketing, and we do not treat submitting a shot as permission to use it for those purposes.
3. Who can see your content
Pikniks may be invite-only or open, with different participation and discovery settings. A Piknik title, creator or participant details, and other activity information may be visible to people who have access to that Piknik or to its public listing, depending on the settings and available features.
Shots are designed to remain hidden from other participants until the Piknik is full. Once the reveal is available, eligible viewers can see the contributed content. People who can view content may still be able to capture or share it outside Piknik using their device; we cannot prevent every such action.
A one-time or disappearing viewing experience in the app does not by itself mean that all copies have been immediately erased from servers or backups. See Section 6 for retention details.
4. Sharing and service providers
We disclose information only as needed to run Piknik or where permitted or required by law. For example:
- Other users: Profile and Piknik-related information, and revealed shots, are shared according to the relevant Piknik’s visibility and access rules.
- Infrastructure and authentication: We use Supabase for authentication, database, and media storage. Sign-in with Google, where available, is handled through Google’s authentication services together with our auth provider.
- Push notifications: When notifications are enabled, delivery may involve Expo’s push service and, on Android, Google Firebase Cloud Messaging.
- Website hosting: The public website at pknk.app is hosted on GitHub Pages.
- Legal and safety reasons: We may disclose information where required by applicable law, or where reasonably necessary to protect users, the service, or others.
Information may be processed outside your province or country, depending on where our providers operate and store data, and may be subject to the laws of those places.
5. Security
We use reasonable administrative and technical safeguards intended to protect personal information, including account authentication, access controls for user contributions, and encryption in transit. Media access for reveals uses time-limited signed URLs. No networked service or storage system is completely secure.
6. Retention and deletion of Piknik content
We retain personal information only for as long as needed to operate Piknik, provide the features you use, maintain security and reliability, and meet legal or operational requirements.
Watching a reveal once is an in-app experience control: after you complete a reveal, the app is designed so you cannot replay that Piknik’s clear media. That does not mean the underlying files are instantly or permanently wiped from every server, backup, or log. Temporary access links for reveals expire after a limited time. Unfilled Pikniks may close when their deadline passes; related records may still be retained for a period afterward.
If you want specific content or your account data deleted, contact support@pknk.app. We will review the request and delete or de-identify information we no longer need to keep, subject to any information we must retain for legal, security, or abuse-prevention reasons.
7. Your privacy choices and account deletion
You can control what you submit to Piknik and manage device permissions and notification settings through your device and in the app’s Settings. The Privacy Policy is also available in the app under You → Settings → Privacy Policy, and at https://pknk.app/privacy.html. You may ask to access, correct, or delete personal information associated with your account by emailing support@pknk.app.
Account deletion: You can request deletion of your account and associated data in either of these ways:
- In the app: Open You → Settings → Delete account, confirm the prompt, and send the prefilled deletion request.
- On the web (no app install required): Visit https://pknk.app/delete-account.html and follow the instructions, or email support@pknk.app from the address used for your Piknik account (or otherwise identify that account clearly).
We may ask you to verify that you own the account before completing a request. Any data that must be retained for lawful reasons will be disclosed and handled appropriately.
8. Children’s privacy
Piknik is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided personal information to us, contact support@pknk.app and we will take appropriate steps to delete it.
9. Changes to this policy
We may update this Privacy Policy to reflect changes to Piknik, our information practices, or applicable requirements. The latest version will be available at https://pknk.app/privacy, with a revised “Last updated” date. Where required, we will provide additional notice or obtain consent.
10. Contact us
For questions, access or correction requests, privacy complaints, or deletion requests, contact:
Piknik
Email: support@pknk.app
Website: https://pknk.app