PrivacyPrivacyPolicyPolicyPrivacyPolicy

• No account to create. Pico never asks for an email address, phone number or password.
• No servers of ours. We do not receive, store or process your financial data at any point.
• No analytics, no advertising, no tracking. No third-party SDKs are linked into the App.
• Nothing about you or your ledger is ever sent to us or to anyone else; with iCloud Sync on, your books go only to your own private iCloud. Apart from that and Apple's App Store checking prices and your Pico Plus status, the one automatic request downloads a public rate table and uploads nothing.
• Three permissions. Face ID or Touch ID for App Lock, and the camera for a receipt, are asked only when you use those features. Notifications start quietly at first launch with no prompt (Notification Center only, no sound or banner); Pico asks for banners and sound only when you turn on the daily reminder or the evening check, start a free trial, or tap Open Shortcuts in a Quick Capture guide.
• Spends logged by Siri, Apple Pay, a bank text or a receipt are read on your device. Only the spend is kept, never the message. Pico cannot read your messages or your Wallet on its own.
• Your data is exportable to a single file, at any time, without asking us.

For the purposes of the EU/UK General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA), and India’s Digital Personal Data Protection Act, 2023 (DPDP Act), NIXE Labs is the party responsible for this App.

In practice our role is unusually limited. Because the App transmits nothing to us, we do not hold, and cannot produce, any personal data generated by your use of it. Where this policy describes rights of access, correction or deletion, those are exercised by you on your own device rather than by a request to us.

• CONTACTnixe.cxt@gmail.com
• BUNDLE IDnixelabs.Pico
• PLATFORMiOS 26.1 or later · iPhone and iPad

Everything you enter into Pico is stored in a local database on your device. It is written by the App and read by the App. The categories of information involved are listed below not because we receive them, but so you know exactly what lives in the file you own.

We collect no personal data through the App. This is not a policy commitment layered on top of a data pipeline; there is no pipeline. There is no NIXE Labs server for Pico to talk to, and the App has no code that would send your ledger anywhere but your own iCloud (section 06). The requests it does make are described in section 05, and all of them only ever download.

Apple requires every App Store app to publish a privacy manifest. Pico’s declares tracking as false, an empty list of tracking domains, and an empty list of collected data types. The only declared API use is the system preference store, for the App’s own settings, and reading file dates, which the App uses to know how old its own files are.

An earlier version of this policy said the App made no network requests at all. That stopped being true, so this section replaces it. Pico now reaches the network in four places, and none of them is a service of ours that receives anything from the App. None of them carries your ledger, an identifier we could use, or anything else about your finances.

Why the rates request exists at all

The European Central Bank publishes a reference rate for each currency once per business day, for public use. Pico reads that file so a book kept in more than one currency can convert without you typing every rate by hand. It is a published table that is identical for everybody who reads it, so downloading it says nothing about who downloaded it.

Pico contacts exactly one address for this and it is written into the App as a fixed value, so no future edit can quietly point it elsewhere. The connection uses a session that keeps nothing between launches, refuses cookies and sends no credentials. If the request fails, or you are offline, the App carries on with the rates it already has and does not tell you about it.

What still does not happen

• No market data feed. Prices for shares, funds and metals are still typed by you and stamped with the date you typed them. There is no price provider in the App, and every figure derived from a price carries its date so nothing pretends to be live.
• No server of ours. NIXE Labs runs no service for this App. The only addresses of ours in the App are links to our website, which your browser opens when you tap them; the App itself never contacts them.
• No upload to anyone else. Every connection above is a download. Your transactions, balances, people, trips and notes are read from your device and written back to it, and leave it only through iCloud Sync, to your own private iCloud database (section 06).
• No background traffic of ours. Pico registers no background refresh task. While the App is closed, the only traffic is Apple's: iCloud sync, and, when Siri or a Shortcuts automation wakes Pico to log a spend, the App Store checking your Pico Plus status. Pico reads and saves the spend on the device and sends nothing to us.
• Nothing sent to read your spending. Bank texts, Apple Pay details, receipts and the words Siri passes to Pico are understood on your device, by Pico's own rules and, on devices with Apple Intelligence, Apple's on-device model. Pico sends none of it to Apple's servers or to us. Siri's own handling of your voice is covered by Apple's privacy policy.

Both the European Central Bank and Apple will see an ordinary internet request arrive, which necessarily includes the IP address your device is using at that moment. That is true of every request any app on your device makes, we have no part in it, and neither request carries anything that would tie the address to you or to your finances. Their handling of it is covered by their own policies, not this one.

If you are signed into iCloud on your device and iCloud Sync is on in Pico’s Settings, under Data (it is unless you switch it off), Pico mirrors your books to a private CloudKit database inside your own Apple Account. This is what lets your data appear on a second device and survive a new phone.

What this means for us

A private CloudKit database belongs to the Apple Account holder. NIXE Labs cannot read it, list it, or recover it. We do not receive a copy, a key, or a notification that it exists. If you contact us about a lost book, we will not be able to retrieve it for you, because it was never ours to hold.

What this means for Apple

Apple operates the storage and transport, under the Apple Account terms and Apple’s own privacy policy, the same arrangement that already covers your iCloud Photos or Notes. Switching off iCloud Sync in Pico’s Settings and reopening Pico, or turning off iCloud for Pico in iOS Settings, stops the mirroring; the App continues to work entirely on device.

Pico ships three widgets, part of Pico Plus: net worth, what is left to spend this week, and a square for each day’s spending. There is also an Add Expense button for Control Center and the Lock Screen, which shows no figures and only opens the App. A widget runs as a separate small program from the App itself, and iOS does not let it read the App’s database directly. So when Pico goes into the background it writes a short summary into a storage area the two share: net worth, the month’s income and expenses, the totals lent and borrowed, this week’s allowance and each day’s spending total. Totals only, never your individual entries.

That summary stays on your device, inside the App’s own sandbox, and it is not mirrored to iCloud and not sent anywhere. It is written whether or not you have added a widget, because the App cannot know when one appears.

You can ask Pico for a daily nudge to log what you spent, and Pico can tell you about spends it caught. Every Pico notification is local: your own iPhone or iPad schedules it and shows it. None travels over the network, and we cannot send you one.

The first time you open Pico, it asks iOS for quiet delivery. iOS shows no prompt for this: Pico’s notifications go only to Notification Center, with no sound or banner, and each one lets you keep them or turn them off. Pico asks for full permission (banners and sound), with the usual iOS prompt, only when you turn on the daily reminder or the evening check, start a free trial, or tap Open Shortcuts in a Quick Capture guide. You can change or withdraw either in iOS Settings at any time.

What Pico can send

• Daily reminder. Off until you turn it on. It says only that it is time to log today's spending, with no amounts, balances or account names.
• Evening check. On unless you turn it off in Settings › Quick Capture. When spends caught by Quick Capture are waiting, one notification at your reminder time (9 pm unless you change it), for up to three evenings, with how many are waiting, their total and a Confirm all button. With it off, each Apple Pay or bank-text spend that waits for your check gets its own notification, with its amount and shop. A Siri request cut off before Pico heard everything gets its own notification straight away, even with the evening check on.
• Weekly recap. On unless you turn it off in Settings › Quick Capture. Sunday at 7 pm: the week's total, how many entries, and the category most of it went on.
• Trial reminder. If you start a free trial and allow notifications, one reminder two days before the first charge, with the date and the price.

After Confirm all, if some spends could not be added, a short note says how many, with no amounts. Unless App Lock is on, the evening check, a caught spend’s own notification and the weekly recap can show amounts, a shop or payee, or a category on your Lock Screen, and a caught spend’s own notification can also name the card, or the last digits of the account, that Pico needs you to pick. With App Lock on they show none of these, only how many spends or entries there are. Confirming a spend from a notification needs your device to be unlocked. You can turn the evening check and the weekly recap off in Settings › Quick Capture, and any of Pico’s notifications off in iOS Settings.

Quick Capture lets Pico log a spend from Siri, from Apple Pay, from your bank’s text messages, or from a photo of a receipt. All of it happens on your device. Siri, Apple Pay and bank texts can each be switched off in Settings › Quick Capture; a receipt is read only when you scan, choose or drop one. On iPad, Siri and receipts work the same way. The Apple Pay and bank-text automations run on the iPhone that receives the payment or message, so Pico on iPad does not offer them.

On-device intelligence

Pico first reads what it is given with its own fixed rules. On devices with Apple Intelligence, it may also ask Apple’s on-device model to fill in what the rules could not, such as the shop on a messy receipt. That model runs on your device. Nothing is sent to Apple or to us, and an amount the rules found always wins over the model’s.

Waiting for review

Spends caught this way can either be saved straight away or wait in a list on your device until you check them. That list is kept only on the device that caught them, is not synced to iCloud, and anything you do not review is removed after 30 days. Entries you confirm are stored like any other entry: on your device, and in your own iCloud if sync is on.

App Lock is optional and off until you switch it on. When it is on, Pico asks iOS to authenticate you on cold start and whenever the App returns from the background, and it redacts the App Switcher preview so balances are not visible in the multitasking view.

Biometric data is handled entirely by iOS and never reaches the App. Your face or fingerprint template stays in the Secure Enclave; Pico receives only a yes or no. We store no biometric information, and there is nowhere for us to store it. The other permissions the App can use are the camera, asked only when you scan a receipt, and notifications: quiet delivery from first launch with no prompt, and full permission only when you turn on something that needs it (section 08).

You can attach a picture to an account card. It is chosen through Apple’s system photo picker, which runs outside the App: Pico is handed the single image you selected and is not granted access to your photo library. The image is downsized and stored in your ledger alongside the account, and follows the same path as everything else: your device, and your iCloud if sync is on.

Pico carries four outbound links, and none is loaded by the App. Tapping one opens the page in a Safari view inside Pico, which runs as its own separate program, or in your browser app. Either way the browser does its own browsing, and Pico cannot read the page, the address bar, or anything you type into it. No part of your ledger goes with you.

If you choose to file feedback, the App can prepare a short diagnostics line for you to paste in: the App version and build, your iOS version, and the hardware model string such as iPhone17,2. It deliberately does not include the device name (which is usually a person’s own name), any identifier, or anything from your ledger. Opening the board copies it to your clipboard, and Pico says so. Nothing is sent: it reaches the board only if you paste it into a post yourself.

Pico can write your entire library to a single JSON file: every ledger, account, transaction, budget, recurring rule, savings goal, holding and exchange rate. Where that file goes is entirely your choice: Files, iCloud Drive, AirDrop, email, another app.

Once it leaves the App it is an ordinary document with your financial history in it, unencrypted and readable by anything that can open a text file. Treat it the way you would treat a bank statement. Importing offers a choice of replacing your current data or merging into it; replacing takes a safety copy first.

We hold nothing, so we have no retention period to declare. Your data lasts exactly as long as you keep it.

Under the GDPR, the UK GDPR, the CCPA/CPRA and the DPDP Act you have rights of access, correction, deletion, portability and objection, among others. Because your data never reaches us, these are satisfied directly and immediately inside the App rather than by a request to a company.

If you believe we have handled something wrongly you may complain to your local supervisory authority. In India that is the Data Protection Board; in the EU or UK it is your national data protection authority. We would rather you wrote to us first at nixe.cxt@gmail.com.

Pico is a general-audience budgeting tool and is not directed at children. We do not knowingly collect personal information from anyone, children included, since we collect none at all. If a child uses the App on a family device, their entries stay on that device and in that Apple Account under the same terms as anyone else’s.

The App relies on the protections iOS already provides, and adds one of its own.

• Device encryption. Your database sits in the App's sandbox container, encrypted at rest by iOS whenever the device is locked with a passcode.
• Sandboxing. No other app can read Pico's storage.
• App Lock. Optional Face ID, Touch ID or passcode gate on launch and on return from the background, with the App Switcher preview redacted and figures hidden from widgets and notifications. Siri asks for your device to be unlocked before it logs a spend.
• Captured spends at rest. The review list is a file iOS encrypts until you first unlock the device after it starts.
• Very little in transit to attack. Apart from iCloud sync, which Apple encrypts in transit (below), the App uploads nothing, so there is no other traffic carrying your data to intercept. There is no API key inside the binary and no server of ours to breach. Apart from Apple's App Store checking prices and your Pico Plus status, the one automatic request it makes is an ordinary HTTPS download of a public file.
• Transport for sync. Handled by Apple's CloudKit, encrypted in transit and at rest under your Apple Account.

No system is perfect, and the honest limit is worth stating: if someone can unlock your device, they can open Pico unless you have turned App Lock on, and an export file you have saved somewhere is only as protected as the place you saved it.

If Pico gains a feature that changes any of the above, we will update this policy, change the “last updated” date, and describe the change in plain terms rather than burying it. A feature that would send your financial data anywhere other than your own iCloud would be opt-in and explained at the point you turn it on.

What changed on 5 November 2026

Pico now runs on iPad as well as iPhone and handles your information the same way on both; section 09 says which Quick Capture sources the iPad offers. On iPad and iPhone Duo you can also drag a receipt photo or PDF onto Pico: it is read on the device, the picture or PDF is not saved, and sections 03 and 09 say where the details wait. Sections 01, 08 and 10 now describe the quiet notifications Pico starts with and when it asks for full permission, and section 08 lists every notification Pico sends, including the evening check and the trial reminder. Section 05 now says when the App Store checks prices and your Pico Plus status, and sections 05 and 12 list all four links that leave the App. Section 12 also says that opening the feedback board copies a diagnostics line to your clipboard, and section 03 lists the few yes/no setup markers kept in your iCloud. The note that closed this section now describes only what Pico does today. Still none of your data reaches us.

What changed on 5 October 2026

Pico gained Quick Capture: logging a spend through Siri, Apple Pay, a bank text or a receipt photo. Section 09 is new and describes it. Section 03 lists the review list, recent Siri requests and capture settings; section 04 now covers the camera; section 08 says which notifications can show an amount. This revision also corrects three statements that had gone stale. Pico has three widgets plus a button, and App Lock now hides their figures. Pico Plus is sold through the App Store. Pico had been described as not registered for remote push, but iCloud sync relies on Apple’s silent change signals. Still none of your data reaches us.

What changed on 10 September 2026

Until this revision, this policy said Pico made no network requests of any kind. That was accurate when it was written. The App has since gained daily exchange rates read from the European Central Bank, a destination search that can ask Apple Maps, home-screen widgets and an optional daily reminder, so the old wording had to go rather than be softened. Section 05 now describes every connection the App can make, sections 07 and 08 cover the widgets and the reminder, and the summary at the top no longer claims an absolute that is not true. Nothing in this revision means more of your data reaches us: the answer there is still none of it.

Pico can answer questions about your spending, budgets and balances through Siri, on your device.

Questions, corrections, or anything on this page that does not match what you observe in the App:

• EMAILnixe.cxt@gmail.com
• SUPPORTnixe.in/pico/support
• WEBnixe.in

This policy is written to be understood, and to be checkable against the App itself. It is provided for transparency and is not legal advice. It is intended to meet the requirements of the GDPR, UK GDPR, CCPA/CPRA and India’s DPDP Act, 2023.