Privacy Policy
Last updated: October 9, 2026 · This is a translation of the Korean version. If the two differ, the Korean version applies.
Summary
- Your photos are never transmitted. All analysis happens on your computer.
- There are no accounts. You never sign up or log in.
- The server knows only the minimum needed to issue and verify licenses: purchase email, license key, a hash of the device identifier, and the device name.
- The app sends anonymous usage statistics about which features are used. You can turn this off in settings; photos, file names and email addresses are never included. The website carries a Meta pixel to measure advertising.
- If the app freezes or hits an error it sends an error report. You can turn this off in settings; photos, file paths and email addresses are removed before sending.
In this policy, the "Company" means LJ Labs LLC, the Wyoming, USA company that makes PickyShot.
1. Information the app processes
Photo files, capture metadata (EXIF), analysis results, and the star ratings, color labels and rejects you assign are stored only on your computer. The Company cannot access this information. The AI models used for analysis are bundled in the app, so no external calls are made. Original photo files are never modified.
2. Information the server collects
| Item | When | Why |
|---|---|---|
| Email address | Passed from Stripe when you pay for a pass | Sending the license key, responding to inquiries |
| License key, pass status, plan and expiry date | On payment and refund | Verifying that the pass is valid |
| Stripe customer and payment identifiers | On payment | Applying refunds |
| Hash (SHA-256) of the device identifier | When a key is registered or checked | Limiting simultaneous devices (3) |
| Device name (computer name) | When a key is registered | So you can tell devices apart in the app's device list |
| App version, time of last check | On pass checks (at most hourly) | Automatic release of long-unused devices (60 days) |
| Whether paid features have been used | After analysis is first run beyond the free limit | Determining refund eligibility (Refund Policy) |
| Access logs (IP, time) | On server requests | Default logs of the hosting provider; security and abuse response |
The device identifier is never stored in its original form, only as a hash salted with a fixed string; the device cannot be traced back from this value.
"Whether paid features have been used" is a single yes/no. The number of photos analyzed, file names, folder paths and photo contents are never transmitted. The time the app reported it is recorded once by the server's own clock and never changes afterwards.
3. Error reports
Error reports from the app and server use Sentry (Functional Software, Inc., USA). The app sends a report when it freezes or hits an error; you can turn this off under Settings › Error reports (on by default since 0.2.8; earlier versions defaulted to off). A report contains the error message and where it occurred, and the following are removed before sending: file paths and folder names, license keys, email addresses, device identifiers, signed tokens and payment identifiers. Photos are never included under any circumstances.
4. App usage statistics (PostHog)
To learn which features are used, the app sends anonymous usage statistics to PostHog, Inc. (USA). What is sent: events such as app launch and exit, folder opened and closed with the time spent, analysis completed, paywall shown and which of its buttons was clicked, how the license window was opened, checkout started or given up, license registered, export done and the number of ratings, rejects and hidden faces; a random install identifier created on first launch; the app version and operating system. Photos, file names, folder paths, computer name, email address and device identifier are never sent, and photo counts are sent only as ranges (e.g. 301–1,000). When you register a license, a hash of the key is linked to the install identifier so it connects to the purchase record. Without an internet connection, events are kept on the device and sent when a connection is available.
You can turn this off under Settings › Usage statistics. Nothing is sent after that.
5. Advertising measurement on the website (Meta pixel)
The website pickyshot.com carries a Meta (Facebook/Instagram) pixel to measure advertising. Page views, download page visits, download button clicks or download-link email requests, checkout starts and completed payments (product and amount) are sent to Meta, which links visitors to the people who saw an ad using cookies, IP address and browser information. Email addresses, license keys and photos are never sent. Meta processes this information under its Privacy Policy, and you can turn off personalized ads in the "Ad preferences" of Facebook and Instagram. The app contains no tracking code of any kind.
6. Third parties and processors
| Company | Role | Information shared |
|---|---|---|
| Stripe, Inc. | Payment seller (MoR) | Payment and billing information (the Company does not receive card details) |
| Vercel Inc. | Website and server hosting | Access logs |
| Neon Inc. | Database | The license information in section 2 |
| Resend | Sending license key and download-link emails | Email address, license key |
| Functional Software, Inc. (Sentry) | Error reports | The error information in section 3 |
| GitHub, Inc. | Distribution of installers and updates | Download request records |
| PostHog, Inc. | App usage statistics | The events in section 4, install identifier, app version, operating system, hash of the license key |
| Meta Platforms, Inc. | Advertising measurement on the website | The visit, click and payment events in section 5, cookie identifiers, IP address, browser information |
The Company is a US company, and the servers of the companies above are also located outside Korea (mainly in the US and Europe). The personal information of users in the Republic of Korea is therefore transferred and stored overseas within the purposes above. If you do not want this transfer, you can use the free tier without purchasing a pass. The Company does not sell personal information, and does not provide it for advertising beyond the measurement in section 5.
7. Retention
- License and pass information: 5 years after the pass ends (accounting, tax and dispute handling)
- Device registration records: the device name is deleted when the registration is released; the release history is kept for 1 year to prevent abuse
- Access logs: 30 days
- Error reports: 90 days
- App usage statistics: 2 years
- Information collected by the Meta pixel: retained by Meta under its policies
8. Your rights
You may request access, correction, deletion or suspension of processing. Email support@pickyshot.com with the email address you paid with; we reply within 2 business days and act within 10 days. Transaction records that must be retained by law cannot be deleted during that period. Deleting the app also deletes the analysis results stored on your computer.
9. Security
All communication is encrypted with HTTPS. License tokens are signed with the server's secret key, which exists only in server environment variables. Database access is restricted to server functions.
10. Children
The Service is not directed at children under 14, and if we learn that a user is under 14 we delete the information without delay.
11. Changes to this policy
When this policy changes, the new text and its effective date are posted on this page. Material changes are posted 30 days before they take effect.
12. Privacy contact
| Company | LJ Labs LLC |
|---|---|
| Address | 30 N Gould St, Sheridan, WY 82801, USA |
| support@pickyshot.com |
Users in Korea may report or consult on privacy infringements at the Personal Information Infringement Report Center (privacy.kisa.or.kr, dial 118).