Privacy Policy
Last updated: 8 June 2026
Initial version — wording may be updated as the product evolves.
This policy explains what data PitiPiwPiw collects, why, and the choices you have. We try to collect only what the product genuinely needs to work.
What we collect and why
Email address — to sign you in. We use passwordless “magic-link” sign-in, so we send a one-time link or code to your email. Delivery is handled by our email provider (Resend).
Content you create — the text, photos, and the one voice or video note you add to a sticker. This is stored so your published page can be opened later by whoever scans the QR. Remember that a published page is public to anyone with its QR or link (unless you enable secret-code protection), so please don’t include anything private or sensitive.
Payment information — when you buy a sticker pack, payment is processed by Stripe. Your card number never reaches our servers; we only receive a confirmation and limited details (such as the last digits and status) needed to fulfil the order.
Technical and usage data — basic cookies for your sign-in session, a privacy token for code-protected pages, and your time-zone, plus scan/open events on published pages (used to show the “your gift was opened” notification).
Where your data is stored
Account data and page content are stored in a managed PostgreSQL database and object storage (Supabase) hosted in the European Union. Backups may be retained for a limited period.
Who we share it with
We do not sell your data. We share it only with the service providers needed to run PitiPiwPiw, acting as our processors: Stripe (payments), Resend (sign-in and transactional email), and Supabase (database and media storage). We may also disclose data where required by law.
How long we keep it
We keep your account and content while your account is active. Published pages are designed to last, so they remain available until you delete the page or your account. When you delete your account, we remove your personal data and content within a reasonable period, except where we must retain limited records (for example, for tax or anti-fraud reasons).
Your choices and rights
You can delete your account and content from the app. Depending on your location, you may also have the right to access, correct, export, or restrict the processing of your data. To make a request, contact us at support@pitipiwpiw.com.
Children
PitiPiwPiw is not directed to children under 13 (or the minimum age in your country). We do not knowingly collect data from them.
Changes to this policy
We may update this policy as the product evolves. We will change the “last updated” date above, and for significant changes we will provide a more visible notice.
Contact
Questions about this document? Email support@pitipiwpiw.com.
Operator details
This service (“PitiPiwPiw”) is operated by [legal entity and registration details to be added]. Governing law and jurisdiction: to be confirmed. This section will be updated with full operator details.