Legal
Privacy Policy
Effective date: September 11, 2026
This policy describes how Picaposy LLC (“we,” “us”), operated by Cassidy Robinson, handles information in our iPhone app PicaPua (bundle com.hopalong.picapua) and on picaposy.com.
PicaPua has two themes you can switch in the app:
- Pua — Hawaiian lei look. Names include PicaPua, Pua, Haku Pua (Ai), and Hoʻolei. Pua is both singular and plural.
- Posy — English bouquet look. Names include PicaPosy, Posy, posies, Rosey Posy (Ai), and Lei-Over.
Same app, same data practices. Where a button has two labels, both mean the same feature.
PicaPua is built to keep your photos on your phone unless you tap Haku Pua (Ai) or Rosey Posy (Ai) (or Render again on that screen).
1. Who we are
PicaPua is a consumer iPhone app for photographing flowers and arranging them into a lei, crown, or bouquet.
Contact: Cassidy Robinson — dev@picaposy.com
We do not have user accounts. We do not run a social network. We do not sell personal information.
2. Information we handle
On your device (does not go to our servers)
The app stores the following in its private storage on your iPhone:
- flower photos you take or pick
- arrangement data (layout, vase, window backdrop, bloom edits, lei / crown / bouquet settings)
- your theme choice (Pua or Posy)
- saved pua and saved posies, plus preview images
- AI render history stored on the device
- a local count of remaining AI renders and which Apple subscription product is active, if any
- exported files you choose to write to Photos
Hoʻolei / Lei-Over can use the camera or a still photo of a person so you can line up a lei or crown. That person photo is processed on the device (including optional on-device person detection). We do not upload that person photo to Picaposy LLC or to xAI.
The camera and Photo Library are used only after iOS asks you. You can revoke those permissions in iOS Settings.
Pua / Posy (the cut-out arrange path) uses Apple’s on-device Vision tools to cut flower heads. That work stays on the phone. Custom arranges your photos on the device and does not send them anywhere.
We do not operate a PicaPua backend that receives your library. There is no PicaPua or PicaPosy account, profile, or cloud sync in the current app.
When you use Haku Pua (Ai) or Rosey Posy (Ai)
If you tap Haku Pua (Ai) or Rosey Posy (Ai) (or Render again), the app sends a processed image of your arranged flower heads (not your full camera roll, and not the Hoʻolei / Lei-Over person photo) to xAI at api.x.ai so it can generate an image and return it to your device.
That request includes:
- the packed flower image (the layout plate plus original flower photos we send with it)
- a text prompt we supply
- any short tweak you type for that render (for example, “sides smaller, no face”)
- technical data the network needs to complete the call (for example, IP address as seen by xAI)
By default the prompt uses only the flowers you photographed. If you turn on Filler flowers, the prompt may ask xAI to invent extra supporting blooms around yours. If you turn on Greens for an AI render, the prompt may ask for sparse invented foliage.
xAI’s privacy policy governs what they do with that request. We send it only because you tapped Haku Pua (Ai), Rosey Posy (Ai), or Render again.
When you subscribe
Subscriptions are purchased through Apple (StoreKit / App Store). Apple handles your Apple ID and payment method. We do not receive your card number. The app stores on the device which plan is active and how many renders are left this period, using Apple’s transaction identifiers so a renewal is not counted twice.
When you send Feedback
If you send a note from the in-app Feedback screen, that text is posted to picaposy.com and emailed to dev@picaposy.com. It is not your photos.
We do not currently collect
- name, email, or payment card details inside the app (App Store purchases are handled by Apple)
- precise location
- contacts
- advertising IDs
- analytics or crash beacons in the current build
If we add accounts, analytics, or other collection later, we will update this policy before that data is collected.
3. Why we handle it
| Purpose | Legal-style basis |
|---|---|
| Show your photos, leis, pua, and posies in the app | Perform the service you asked for |
| Save and export on your device | Perform the service you asked for |
| On-device cutout (Pua / Posy) | Perform the service you asked for |
| Hoʻolei / Lei-Over overlay and person detection on device | Perform the service you asked for |
| Send a packed image (and optional tweak) to xAI for Haku Pua (Ai) / Rosey Posy (Ai) | Perform the service you asked for |
| Keep a local render allotment from an Apple subscription | Perform the service you asked for |
| Receive a Feedback note you send from the app | Perform the service you asked for |
| Keep the app working and secure | Legitimate interest / contract |
| Respond if you email us | Legitimate interest / your request |
4. Sharing
We share information only as follows:
- xAI — only the AI render request described above, and only if you use that feature
- Apple — device OS, App Store, Photo Library, StoreKit, and on-device Vision, under Apple’s terms
- The law — if we are legally required to, or to protect people from serious harm
- A successor — if Picaposy LLC or the app is sold or transferred, with this policy still applying until you are notified
We do not sell your personal information. We do not share it for cross-context behavioral advertising.
5. How long we keep it
On-device saves last until you delete them or delete the app.
AI requests live on xAI’s systems under their retention rules. We do not keep a copy of those requests on a Picaposy LLC server (we do not run one that stores your library).
If you email us or send Feedback, we keep that correspondence as long as needed to answer you and keep a basic business record.
Apple keeps App Store purchase records under Apple’s policies.
6. Security
We use the phone’s ordinary app sandbox and HTTPS to xAI and to picaposy.com for Feedback. No method is perfect. Do not put secrets, IDs, or sensitive documents into a flower photo. Do not send icky things through Haku Pua (Ai) or Rosey Posy (Ai).
7. Children
The app is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have, email us and we will delete it.
8. Your choices
- Decline camera or Photo Library access (some features will not work)
- Do not tap Haku Pua (Ai) or Rosey Posy (Ai) if you do not want an image sent to xAI
- Leave Filler flowers off (the default) if you do not want extra invented blooms in an AI render
- Turn Greens off if you do not want invented foliage in an AI render
- Do not type a tweak if you do not want that extra text sent with the AI request
- Skip Hoʻolei / Lei-Over if you do not want to photograph a person
- Delete a saved pua or posy in the app
- Delete the app to remove its on-device storage
- Remove exported images from Photos yourself
- Cancel a subscription in iOS Settings → Apple ID → Subscriptions
- Email dev@picaposy.com to ask what we have from your emails or Feedback notes, or to ask us to delete that correspondence
If you are a California resident, you have the right to know, delete, and correct personal information we hold, and to opt out of sale or sharing. We do not sell or share personal information as those words are used in the CCPA. We will not discriminate against you for exercising these rights. To make a request, email us. We may need enough information to find your correspondence.
If you are in the EEA or UK and we later process personal data about you (for example if you email us), you may have rights to access, correct, delete, or restrict that data, and to complain to a supervisory authority.
9. International
The app is offered from the United States. If you use Haku Pua (Ai) or Rosey Posy (Ai), your packed image and any tweak you typed are sent to xAI, which may process them in the United States or other countries where they operate.
10. Changes
We will update this policy when the product’s data practices change. The new effective date will be posted at the top. Material changes will also be noted in the app or on the site when we can.
11. Contact
Picaposy LLC
Cassidy Robinson
dev@picaposy.com