Protecting User Data & Privacy
In the past few weeks, there’s been a lot of concern about how iPhone apps take and store user data. This concern has risen to the highest levels of American government with Congress recently asking 34 companies (including yours truly) to detail formal approaches to user data. We want to share some of our answers with you - because we are steadfast in our commitment to asking before we take, and taking only things you want us to have.
:: Did you have a privacy policy in place for your iOS app at the end of February 2012? ::
Yes, our Privacy Policy was available on our website before the app even launched on Apple’s App Store. Our Privacy Policy and Terms of Use are available to all our users through our website at http://www.piictu.com/privacy and http://www. piictu.com/tos repectively.
:: Has your iOS app at any time transmitted information from or about a user’s address book? If so, which fields? Also, please describe all measures taken to protect or secure that information during transmission and the periods of time during which those measures were in effect. ::
In old versions of the app, users would be able to mention Address Book contacts as a way to invite them to the app. The only information being passed were email addresses of the contacts being invited. This was done through an SSL connection, and at no time were the addresses shared with third parties. Also, at no time were those emails address stored in our system.
Since version 1.3.1, the app asks users for permission before accessing their Address Book. If the user agrees, only email addresses from the user’s Address Book are sent, and the same security measures as before are taken.
:: Have you at any time stored information from or about a user’s address book? ::
No.
:: To the extent you transmit or store any address book information or any of the information, please describe all notices delivered to users on the mobile device screen about your collection and use practices both prior to and after February 8, 2012 ::
After February 8th, 2012 we started asking users for access to their address book during the initial signup flow. The text displayed says “In order to find your friends, we need to send address book information to Piictu’s servers using a secure connection” and users have the options to accept or decline.
[Note] So that’s where Piictu stands on user data & privacy. We are committed to protecting your data and ensuring that things you do share with us are never stored. To follow up with any further questions or concerns, please email jason@piictu.com - he’s always up for talking security with you!