Legal
Privacy Policy
This policy explains how Pikamood handles app, website, support, privacy, account, partner, notification, purchase, and advertising-related data.
Pikamood is operated by Brackits in Canada. This policy covers the Pikamood iOS app, pikamood.com, and related support and privacy services.
Information we process
We process account details such as email, display name, login provider, Firebase account identifier, share code, partner link, timezone, and preferences. Features may store mood check-ins, optional notes, activities, relationship questions and answers, notes, hugs, nudges, support requests, reminders, games, date ideas, reactions, status, and selected music metadata.
Mood and relationship content can be sensitive. Shared content is visible to the partner you intentionally link. Pikamood is not end-to-end encrypted.
Firebase and platform services may process installation or device identifiers, push tokens, IP address, request metadata, and security or diagnostic events. Local settings and widget snapshots are stored on the device. The audited app does not directly include Firebase Analytics or Crashlytics, but final production console settings and the release archive must be checked.
Voice check-in requires on-device Apple speech recognition. Pikamood does not persist microphone audio; text you save becomes mood content. App Lock receives only Apple's authentication result. The audited code does not use Contacts, HealthKit, or Core Location. Camera and photo usage descriptions are currently unused and must be reconciled before release.
Song searches are sent to Apple's iTunes Search service. Selected song metadata may be stored and shown to your linked partner.
Advertising, consent, and tracking
The audited target links Google Mobile Ads and contains rewarded-ad scaffolding, but no active banner/interstitial flow, Google UMP consent UI, ATT prompt, or confirmed live rewarded-ad entry point was found. Advertising must remain disabled until the app, disclosures, and consent flow match.
If enabled, Google and its partners may process device or advertising identifiers, coarse location, ad/product interactions, and diagnostics for advertising, measurement, security, and fraud prevention. Where required, Pikamood will present Google UMP choices before requesting ads and Apple's tracking prompt before tracking. These controls are not implemented in the audited build.
Authentication, purchases, and notifications
Email/password, Google Sign-In, and Sign in with Apple use Firebase Authentication and the selected identity provider. Apple processes App Store billing. If purchases are enabled, Pikamood receives signed transaction and product information, not a full card number. Pikos are an in-app virtual balance with no cash value; a production purchase catalog and Remove Ads entitlement were not confirmed in the audited build.
With permission, Firebase Cloud Messaging and Apple Push Notification service deliver reminders and partner updates. Manage these choices in Pikamood and iOS Settings.
Why we use and share information
We use information to operate accounts and partner features, save requested content, deliver notifications, operate Pikos and eligible purchases, personalize presentation, respond to support and rights requests, secure the service, prevent abuse, and meet legal obligations. Legal bases may include contract, consent, legitimate interests, and legal obligations; Brackits must confirm these by region.
We share information with your linked partner as clearly indicated, with vendors that operate the service, at your direction, or when reasonably necessary for safety, enforcement, a corporate transaction, or law. Providers include Google Firebase, Google Sign-In, Google Mobile Ads if retained, and Apple identity, StoreKit, APNs, and iTunes Search services.
Retention, deletion, transfers, and security
We retain information only as reasonably needed for the described purposes. Account profiles, mood and relationship content, partner links, push records, Piko balances and ledgers, and app settings are generally kept while the account is active and are targeted for deletion within 2-3 days after a verified account-deletion request, except for limited retained records described below. Support and privacy-request records may be retained for up to 2 years after closure for audit, follow-up, and rights-request history. Security, fraud-prevention, abuse-prevention, and diagnostic records may be retained for up to 2 years unless needed longer for an investigation, dispute, or legal obligation. Transaction, tax, accounting, refund, chargeback, and purchase-support records may be retained for up to 6 years from the end of the relevant tax year, or longer if required by law, tax authority, dispute, appeal, or legal hold. Backup copies may persist until overwritten or expired in the ordinary backup cycle.
Firebase, Google, Apple, and other service providers may process information in Canada, the United States, and other countries where they or their service providers operate. We use provider terms, contractual safeguards where available, access controls, encryption in transit, platform security controls, and data minimization to protect information. Information processed outside Canada may be accessible to courts, law enforcement, regulators, or government authorities under local law.
Delete in Settings > Privacy & Security > Delete Account. The app attempts to revoke Apple authorization where applicable, unlink a partner, delete Firebase sign-in, and record a backend cleanup request. Firestore/Storage cleanup currently requires verified administrative processing. Apple may retain purchase records.
We use authentication, security rules, scoped server functions, and platform protections intended to reduce unauthorized access. No system is perfectly secure.
Your choices and rights
Depending on your location, you may request access, correction, export, deletion, restriction, objection, consent withdrawal, an opt-out from qualifying targeted advertising/sharing, or an appeal. California and other U.S. state rights and EEA, UK, and Swiss rights apply where their legal requirements are met. We may verify identity and retain limited records where lawful.
Use Settings > Privacy & Security > Request My Data, visit Privacy Choices, or email privacy@pikamood.com.
Children
Pikamood is intended for people aged 13 or older and is not directed to children under 13. The audited app has no age gate. Regional age rules, marketing, and any advertising age treatment require review.
Changes
We may update this policy as the product or law changes. We will update the date and provide additional notice where required.
Contact
Brackits
Canada
privacy@pikamood.com
support@pikamood.com