Who we are
Pico Software is a trading name of Pina Colada Software Limited, a company registered in England (Company No. 9605428). For the purposes of UK GDPR and EU GDPR, Pina Colada Software Limited is the data controller of the very small amount of personal data described in this policy — and in every case we can manage, the answer to "what do you hold about me?" is "nothing".
This policy applies to our website, our software products and services, and our mobile apps, including our Android app distributed via Google Play. Questions about any of it? Email contact@pico-software.com — a human reads and answers every message.
What we never do
Most privacy policies are long because the companies behind them do a lot with your data. Ours is short for the opposite reason. The following are not aspirations — they are statements of fact about how this business runs:
- No cookies. We don't set cookies or anything like them — no local-storage trackers, no fingerprinting, no tracking pixels. That's why you'll never see a cookie banner on our site: there is nothing to consent to.
- No analytics. We do not use Google Analytics, or any other analytics, telemetry or session-replay tool, on our website or in our apps.
- No tracking or profiling. We don't follow you across pages, sites or devices, and we don't build advertising or behavioural profiles of anyone, ever.
- No advertising. No ad networks, no retargeting, no "personalised content" driven by surveillance.
- No harvesting for later. We do not collect, aggregate or mine user data for later processing, product decisions or profit. There is no data warehouse. There is no "later".
- No selling or sharing. Your data is never sold, rented, shared or traded with advertisers, data brokers or any other third party.
We'll be blunt about our views: we are deeply opposed, on ethical grounds, to the modern habit of quietly storing and harvesting people's data so it can be analysed, targeted or profited from later. We don't think it's a fair trade, we don't think it's any way to treat people, and we refuse to run our business that way — even where it might be profitable to do so.
The only personal data we hold
There are exactly three situations in which any personal data connected to you can exist on our systems:
1. If you are a paying customer
When you buy hardware, software or services from us, we hold the minimum required to take your payment, deliver your order, meet our accounting and tax obligations, and honour your warranty and support: typically your name, billing and delivery address, email address, and a record of what you bought and when. Your card details are handled entirely by our PCI-DSS-compliant payment processor — we never see or store your card number.
2. If you email us
We keep your message and reply address only for as long as it takes to help you, then we delete the correspondence. We do not add you to mailing lists, and we don't file enquiries away for future marketing unless you ask us to.
3. If you are neither of those
We store nothing about you. No name, no email address, no identifiers, no browsing history, no device fingerprint, no account. There is nothing to leak, nothing to sell and nothing to subpoena.
Why we hold it, and for how long
Under the UK GDPR and EU GDPR, our legal bases are as narrow as our data:
- Performance of a contract — processing your order, payment, delivery and warranty (paying customers only).
- Legal obligation — keeping the invoice and accounting records that UK company and tax law requires of us (paying customers only), typically for six years after the relevant accounting period, after which they are destroyed.
- Legitimate interests — replying when you contact us (deleted once the conversation is over).
That's it. There is no other processing, no marketing list, and no "service improvement" telemetry — because we don't collect the data it would run on.
Third parties
The only third parties who ever touch anything are the provider that hosts this website (to keep it online) and our payment processor (to take your payment, under their own privacy policy and PCI-DSS obligations — we receive only the details needed for your invoice and our accounts). We share nothing with anyone else, because we hold nothing worth sharing — and we wouldn't share it even if we did.
Security
The most reliable security measure in existence is not storing data in the first place, so that is our primary control: we hold almost none. The payment and accounting records we must keep are stored with access restricted to the people who need them to do your accounts. In the unlikely event a breach ever affected the little we hold, we would tell you directly and promptly.
Your rights
Data protection law gives you rights over personal data, and because we hold so little, exercising them is easy: email contact@pico-software.com and we will confirm what, if anything, we hold about you, and correct or erase it. In practice, if you are not a paying customer, the honest answer will be "nothing at all". You have the right to:
- access the personal data we hold about you;
- have it corrected if it is wrong;
- have it erased ("right to be forgotten");
- restrict or object to its processing;
- receive a copy of it in a portable format;
- and to complain to the Information Commissioner's Office (ico.org.uk), the UK's data protection regulator — or, if you are in the EU, your national supervisory authority.
Our apps — including our Android app
The Android app we distribute via Google Play collects no personal data: no analytics SDKs, no advertising SDKs, no trackers, no telemetry, and no account creation. Anything you view, create or configure with our software stays on your device, under your control, and is gone when you uninstall it. Our "no data collected" declaration in Google Play's Data safety section is not a rounding-down — it is literally true.
Why privacy is the point
Data privacy, data ownership and data sovereignty are not a compliance exercise for us — they are the reason Pico Software exists. The very essence of the hardware and software we build is to give end users better control over their own data: on-premise AI systems that keep your prompts, documents and models inside your building, on your hardware, under your rules. We believe you should own your data, know exactly where it lives, and be able to take it — or destroy it — whenever you like.
Having built a business on that belief, quietly harvesting data from our own website would be more than a policy failure — it would betray the whole point of the company. So we don't.
Children
Our website, apps and software are not directed at children, and we knowingly collect no personal data from children — or from anyone else. If you believe a child has sent us personal data (for example in an email), contact us and we will delete it immediately.
Changes to this policy
If this policy ever needs to change — for example because the law changes — we will update this page and the date at the top. What will not change is the substance: we will never introduce cookies, analytics, tracking or advertising, and we will never start collecting data we don't need. If something ever forces our hand, we will explain it here in plain English rather than bury it in a longer document.
Contact
Questions about this policy, or about what we hold on you? Email contact@pico-software.com — a human reads and answers every message.
Pico Software · trading name of Pina Colada Software Limited · Registered in England, Company No. 9605428 · contact@pico-software.com