Privacy Policy

Last updated: 26 October 2026

This is a translation for your convenience. In case of differences, the German version applies.

Pickeed is built to collect as little data as possible: plans are private by default, we show no ads and we do not analyse your messages. This page explains exactly which data we process, why and where it is stored. This policy follows the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR).

1. Controller

2. Which data we process

Account and sign-in

Your email address, the name you choose and the language you use for Pickeed. To sign in, we send you a six-digit code; we only store a check value of it, it is valid for 10 minutes and can be used once. After signing in, a session cookie keeps you signed in as long as you use Pickeed at least every 30 days. A password is optional (see «Account, password and profile»).

Plans and group chat

What you and your group enter in a plan: name, place, dates, messages, suggestions, votes, wish lists, lists of what to bring, tasks, budget and cost details, yes and no replies. Only members of the plan can see this content. For public events, the name, place, time and description are public – the group chat remains visible to members only.

Invitations

Invitation links and QR codes contain a random key that we only store as a check value. Personal invitations can be revoked and do not open a second access when forwarded.

Calendar (optional)

If you connect your calendar, we only read when you are busy. We do not take over the titles, places or attendees of your appointments. We store your calendar address encrypted. Reading and writing are separate permissions, and nobody can consent on behalf of someone else. You can disconnect at any time in your profile.

Company spaces

For company spaces we process the company name, teams, roles and which employees belong to them. Company plans are separate from private plans; the company does not see its employees' private plans.

Providers

Providers store a profile, offers and images. We count per day how often an offer was viewed or suggested – without storing who it was. Bookings are made directly with the provider, not in Pickeed.

Preferences and diet (optional)

In your profile you can enter preferences (e.g. Italian, cinema) and dietary requirements (e.g. vegan, gluten-free, halal). Pickeed uses them to suggest suitable restaurants and activities to your groups. Dietary requirements may allow conclusions about health or religion; we only process them because you enter them yourself, only for these suggestions, and the group never sees who they come from. Preferences only count once three members of a plan have answered. You can change or delete both at any time in your profile.

Ratings and surveys

After an event you can give 1–5 stars, say whether you would go again and add a short comment. Only the group sees this; Pickeed only shows the average once there are at least two ratings, and comments appear with your name. In surveys by the organisers you answer with your name or – if the survey is anonymous – without it: we then only store that you have answered, separately from your answers and without any link to them; results are only shown once there are at least three answers, and not even we as operator can tell who answered what. If you delete your account, we delete your ratings and named answers.

Account, password and profile

You sign in with a code by email or – if you set one – with email and password. We never store the password in plain text, only as a scrypt hash with its own salt; nobody at Pickeed can read it. We count failed sign-in attempts for 15 minutes to slow down guessing. You stay signed in as long as you use Pickeed at least every 30 days. «About me», home town and birthday are optional. Only people you share a plan or an organisation with can see «About me» and your birthday, the birthday only with day and month. Only you can see your home town; Pickeed only uses it on the server to suggest fair meeting points. When you delete your account, we delete this information too.

Signing in with Google or Apple is optional. Pickeed redirects you to Google or Apple; you sign in there and allow us to receive your name, email address and an account identifier. Nothing else – no contacts, no calendar, no password. With «Hide My Email» we only receive a forwarding address from Apple. The privacy policies of Google or Apple also apply to the sign-in. We delete the link together with your account.

Photos in a plan

Members of a plan (including guests without an account) can upload photos. They are only visible to the members of that plan and are only delivered to signed-in members – there are no public links. The app shrinks photos before uploading; our server also removes all photo data such as location (GPS), camera and date. The Pickeed team has no access to photos in plans. We delete photos with the plan and with the account of the person who uploaded them; your own photos are included in your data export. One year after a plan, Pickeed reminds its members once («One year ago today»).

Weather for outdoor plans

If a plan is marked as «outdoors», our server requests the weather forecast from Open-Meteo (Open-Meteo.com). For this we only send the plan's location (e.g. «Bern») or coordinates derived from it, rounded to about one kilometre – no information about you or your group. We store the forecast for at most two days. Weather data: Open-Meteo (CC BY 4.0).

Fair meeting point

If you have entered a home town in your profile, Pickeed uses it approximately to suggest places in Idea Pick that are about equally far for everyone. For this our server determines rough coordinates (rounded to about one kilometre) from the place name via Open-Meteo; only the place name is sent. We only store place names with their rough coordinates, never who lives where. Nobody sees distances, coordinates or other people's home towns – not in profiles either; it only applies once at least three members have entered a home town.

Meeting reminders

For regular meetings, Pickeed sends reminders in the group chat and by email about upcoming meetings and missing replies. We store which reminder was sent when, so that none arrives twice. You can turn off email reminders in your profile.

App notifications (optional)

If you allow notifications on your phone, we store a device identifier so that we can send you updates about your plans. You can turn this off at any time in your device settings. The notifications are delivered via the Apple Push Notification service (iPhone) or Google's Firebase Cloud Messaging (Android); they receive the device identifier and the short notification text (e.g. plan name and the start of a message).

Reporting and blocking

If you report content (e.g. a message or a public event), we store who reported it, the reason, your details and an excerpt of the reported content including the author's name, so that we can review the report. We delete processed reports after 12 months at the latest. If you block someone, we store this so that their messages stay hidden for you; the person is not notified. You can undo this at any time in your profile.

App waiting list (optional)

If you join the waiting list on the home page, we store your email address, whether you are interested in iPhone or Android, your language and the time. You first receive an email with a confirmation link; without confirmation we delete the entry after 7 days. After confirmation we only write to you once the app is available for your phone, and then delete the entry. You can unsubscribe at any time using the link in every email. We send these emails through the same email service as the sign-in codes.

Contact form

If you write to us via the contact form (on the website or in the app), we store the topic, your name (optional), email address, message, language and time, whether you wrote via the app or the browser and – only if you come via «Report a problem» and don't remove it – the address of the page (without plan names or chats). If you are signed in, we link the message to your account and your role (e.g. company admin or provider) so that we can help you faster. To prevent abuse we store a check value of your IP address (not the IP itself). We forward the message by email to info@pickeed.com and send you a short confirmation (without your text); the emails go through the same email service as the sign-in codes. We use the details only to answer your request and delete the stored message after 12 months. Our reply and your email thread remain in our mailbox.

Referrals

For your personal referral link we store a random code. If someone creates a new account via your link, we store that it came via you and count whether it becomes active (timestamps only, no content). To prevent abuse we store check values of the IP address and browser (not the IP itself) and delete them after 90 days. You only see numbers, not names; the referred person doesn't see who referred them.

If you request a reward, we store the account holder's name, country and IBAN in order to transfer the amount to you. We store the IBAN only in encrypted form; it is shown masked and in full only to authorised team members for the transfer, and every such view is logged. If a request is declined, we delete the IBAN immediately; open requests are deleted with your account. Paid payouts are kept for 10 years because of the statutory retention obligation for business records.

If you take part in an event campaign (e.g. at a fair), we store which campaign you take part in, since when and whether you joined yourself or our team added you, and, for referrals made during the campaign, which campaign they belong to. To check for abuse, authorised team members see per participant which new accounts came via their link during the campaign (name, email address, time, whether active, number of accounts from the same address as a check value); every such view is logged. We delete your participation with your account.

If you have a reward paid out in cash at the Pickeed stand, we store country, amount and currency and, as a receipt, the place, time, paying team member, any note, and whether and when you confirmed or disputed receipt. Like paid payouts, we keep this for 10 years because of the statutory retention obligation for business records, even if you delete your account.

Identity verification and fraud protection for events with tickets or a contribution

Anyone offering a public event with a ticket price, contribution, payment options or ticket link verifies their identity via Stripe Identity. At Stripe, you photograph an official ID document and take a selfie; Stripe compares the two. Pickeed does not receive ID images, the selfie, the ID number or the date of birth. We only store your verified first and last name, the time of the check and Stripe's reference for the check. Only authorised members of the Pickeed team see the verified name, for example to compare it with the account holder of an IBAN you entered; publicly, only the «Identity verified» badge appears. Stripe keeps the verification data according to its own retention rules. If you delete your account, we delete the name and verification status immediately and ask Stripe to delete the verification data – except during an ongoing fraud investigation; in that case the data stays at Stripe until the case is resolved. As long as identity verification is not set up, the Pickeed team reviews such events manually.

To protect against fraud, we check ticket and payment links (e.g. for short links or lookalikes of well-known brands) and – if set up – with Google Safe Browsing; Google only receives the link address. We record changes to payment details in the log (account numbers shortened only) and inform the participants. «Fraud / payment» reports can temporarily hide an event; reporters learn the outcome, the organisers don't learn who reported.

Ticket sales and payouts

When you buy a ticket, we process the order, number of tickets, amount, time, status (paid, refunded, used) and the identifiers of the payment at Stripe. Only Stripe receives card and TWINT data. In the attendee list, the organisation sees your name, the number of tickets and whether they have been used – never your email address or payment data; other guests only see numbers. For organisations, we store the identifier of the Stripe account and its status; Stripe collects and checks identity, company and bank account. We keep order and payment details as long as accounting and possible disputes require (usually 10 years); if you delete your account, only «Deleted account» is shown there.

Technical data

When you visit the website, our server processes technically necessary details such as IP address, time and requested address in order to deliver the page and prevent abuse. We do not track you and use no analytics or advertising services. To run the service, we store on which days an account was active (no content, only for overall figures and support) and delete this after 400 days or together with the account.

3. Purposes and legal bases

We process data to provide Pickeed to you (contract), to run the service securely and prevent abuse (legitimate interest), and for optional features such as calendar or notifications (your consent, which you can withdraw at any time). Recommendations of offers are based only on the occasion, place and group size of a plan – never on your messages.

4. Cookies and local storage

We set a technically necessary session cookie for signing in and – only if you arrive via a referral link – a cookie with its code until you sign up (at most 60 days). In your browser we also remember your language and which area (private, company, provider) you opened last, and store website files for offline use. There are no advertising or tracking cookies.

5. Where data is stored – service providers

• Infomaniak Network SA, Geneva, Switzerland – server on which Pickeed runs.
• Supabase Inc., USA – operation of the database. The database is located in the data centre in Zurich (Switzerland). Because Supabase is a US company, access from the USA cannot be ruled out; for this we rely on the standard contractual clauses and Supabase's data processing agreement.
• Brevo (Sendinblue SAS, Paris, France) – sending sign-in codes and notices by email. For this, Brevo receives your email address and the content of the email. Brevo does not store the content of our emails; delivery logs are deleted after one month; opens are counted anonymously at most.
• Stripe Payments Europe Ltd., Dublin, Ireland – only for the company subscription and the event subscription: card payment, invoices and cancellation. Stripe receives the name of the company or person, the organiser's email address and the card details; Pickeed never sees card details. Stripe is partly responsible for payment processing itself and may process data in the USA (standard contractual clauses).
• Stripe Connect (Stripe Payments Europe Ltd., Dublin, Ireland) – ticket sales for public events: Stripe processes payments with TWINT and card, manages the organisations' Stripe accounts (including the identity check required by law) and pays out to them. Stripe receives the buyer's name and email address and the payment data or the organisation's details. Stripe is partly responsible for this itself and may process data in the USA (standard contractual clauses).
• Stripe Identity (Stripe Payments Europe Ltd., Dublin, Ireland) – identity verification for organisers of public events with tickets or a contribution: the ID document and selfie are captured and checked at Stripe; Pickeed only receives the result and the verified name. Stripe may process data in the USA (standard contractual clauses).
• Google Safe Browsing (Google Ireland Ltd., Dublin, Ireland) – only if set up: checks ticket and payment links against known fraud and malware sites. Google only receives the link address, no personal data.
• Open-Meteo (Open-Meteo.com) – weather forecasts and place search without an account. Only receives place names or rough coordinates, no information about people.
• Let's Encrypt (Internet Security Research Group, USA) – issues the certificates for the encrypted connection. No data about you is transmitted.

We do not sell data and do not pass it on for advertising purposes.

6. Who at Pickeed has access

For operations and security there is a separate administration area with two-factor sign-in. Actions in this area are logged. The Pickeed team has no general access to private chats there; it only sees what is needed to handle reports and for security.

7. How long we keep data

As long as your account exists. If you delete your account, we immediately remove your email address, name and devices. Contributions to shared plans remain available to the group but appear as «Deleted account». Your own plans without other members are deleted too. We keep encrypted database backups for 14 days; after that, all details are removed there as well.

8. Security

All connections are encrypted (HTTPS). We store sign-in codes, sessions and invitations only as check values, and calendar addresses encrypted. Permissions are checked on the server with every access.

9. Your rights

You can request information about your data, have it corrected or deleted, withdraw consent and – where applicable – object to processing or receive your data in a common format. In your profile you can download your data as a file and delete your account yourself at any time. For anything else, write to info@pickeed.com. You can also lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, if you live in the EU, with your data protection authority.

10. Changes

If the way we process data changes, we will update this policy. We will inform you in Pickeed about significant changes.