This policy covers two separate things: the website at picotlabs.com, and the Picot desktop application you download from it. They are treated separately below because they behave very differently.
The website
picotlabs.com is a static marketing site. It has no sign-up, no login, and no user accounts. We do not run analytics, advertising, or tracking scripts on it, and it does not set tracking cookies.
The site is hosted on Cloudflare. Like any web host, Cloudflare processes standard technical request data — IP address, user agent, requested URL, timestamp — in order to serve pages, route traffic, and protect against abuse. That processing is governed by Cloudflare’s own privacy terms, and we use it only in aggregate to keep the site up.
The release notes page fetches the public release list from the GitHub API. That request is made by our server, not by your browser, so visiting the page does not expose your IP address to GitHub. Clicking through to a download link does take you to GitHub, at which point GitHub’s privacy terms apply.
The desktop application
Picot is a local desktop GUI for the Pi coding agent. It runs on your machine, requires no account, and has no Picot-operated server behind it. Your projects, chat history, sessions, and settings are stored locally on your own computer. We do not receive them, and we have no ability to read them.
Picot does not collect telemetry, usage statistics, or crash reports, and it does not phone home.
One important caveat: Picot is a front end for a coding agent, and that agent talks to whichever AI model provider you configure it with. When you send a message, the agent transmits your prompt — and whatever file contents it decides are relevant — to that provider over the network. That transmission is between you and your chosen provider, under that provider’s terms and privacy policy. Picot is not a party to it and never sees it. If you are working with sensitive code, review the terms of the model provider you point Picot at.
What we never do
- We do not sell, rent, or share personal data, because we do not collect it.
- We do not build advertising or behavioural profiles.
- We do not require an account, an email address, or a licence key to use Picot.
Your rights
Depending on where you live, you may have rights to access, correct, export, or delete personal data held about you. In practice we hold essentially none: there is no account database to query. Data created by the desktop app lives on your own machine, and you can inspect or delete it yourself at any time. If you believe we nonetheless hold data about you, contact us and we will look into it.
Children
Picot is a developer tool and is not directed at children under 13. We do not knowingly collect personal data from anyone, children included.
Changes to this policy
If this policy changes materially, the effective date above will change and the revision will be visible in the site’s public git history. Continuing to use the site or the app after a change means you accept the revised policy.
Contact
Questions about this policy can be raised as an issue on the project’s GitHub repository.