End Users License Agreement

Effective Date : 08/10/2025

Terms of Service - Pickey.ai

Disambiguation

Data: Refers to any kind of information that a user can generate, use, share or remove on the PicKey.ai platform or otherwise. This may include user personal data, credentials, pictures, virtual objects, pointclouds, etc.

PicKey.ai, Neural Heaven Inc: “The Company”, “we”, “us” refers to the password management product and all of the services offered including and not limited to mobile apps, web apps, virtual environments, passwords, etc.

Pictorial/Photographic Memory: Refers to the mechanism by which the concept of visual remembrance is established - in both living organisms and in computer systems. The implementation, accuracy, time taken, storage and other parameters may be different for each of these systems and the concept may be used to explain how artificial intelligence systems work.

Service: The PicKey.ai apps, website, and browser extensions.

Neural Heaven, Inc., A Delaware C Corporation.

Mailing address: 651, N. Broad St., Suite 201, Middletown, DE 19709, United States of America.

Data Policy

  • PicKey.ai does not share or monetize customer data with any other party. Other than a possible exception of data use for law-enforcement (on a specific case basis, subjected to stringent review), no customer data will be shared, distributed, sold or exposed with any other party - be it an organization, a government or a country.
  • We also believe that all IT systems are hackable - given the right motivation and resources. The best way to secure data is by having no digital footprint of it. Writing down data on a piece of paper and removing all digital copies, offers best protection against online hacking attempts (albeit extremely inconvenient).
  • We will not be liable for any system failures, downtimes, hack attempts, cybersecurity and/or IT incidents and/or loss of data.

1. Data Collection & Use

  • Data Collected: Pickey uses the following types of personal data for Password management

    • User Account Data: Email address
    • Authentication Data: Photographs or images used for login, environment images and /or pointclouds (if the user’s surroundings or objects are part of the password), and metadata (e.g. timestamps, device info, location if “place recognition” is used).
    • Credentials or Vault Data: Passwords (which are encrypted) and secure notes
    • Device and Technical Data: IP address, device type, OS, app version, and cookies
    • Usage Data: Logs of user interactions (when they logged in, features used) for security or analytics.
  • Purpose of Collection for Each Data Type:

    • Email – used for account login, communication (e.g. sending notifications, security alerts or updates), and marketing if applicable (with consent/opt-out options).
    • Usage logs – used for security monitoring, fraud detection, or improving the service.
    • Analytics data – used to understand usage patterns or improve user experience, etc.
  • Personal data will only be used for the purposes disclosed and with user consent, and will not be used in new ways without additional consent.

  • Pickey app offers the option to use Apple’s Face ID as another factor for secure login. The biometric data is never collected, stored, or transmitted by us. Authentication is handled entirely by your device’s operating system, and our app only receives confirmation that authentication was successful.

User consent for Face ID opt-in is taken (by checking a box acknowledging they agree to facial recognition).

  • Any images or biometric data provided by the user will not be used for profiling, marketing, or AI model training without their consent. There is an opt-out option if the users do not want to allow their data to be used to help improve our algorithms.

2. Data Storage, Retention, and Security Practices

  • Storage Locations and Methods:

    • User data and images are stored securely on our servers located in the United States and India. Some encrypted image data is stored in cloud storage solutions AWS and Azure.
    • Passwords, images, and related data are stored encrypted. MagicPass passwords are never stored anywhere.
  • Data Retention Schedules:

    • Account data is retained while the account is active and removed or anonymized within 2-7 days of account deletion.
    • Logs are kept and not purged and used for security monitoring, fraud detection, or improving the service.
    • Certain data will be kept for legal obligations (payment, subscription history, backups, etc.).
  • Data Security Measures:

    • Encryption: All sensitive data like passwords, images is encrypted both in transit (using TLS/HTTPS) and at rest.
    • Access Controls: Only authorized personnel can access user data, and those personnel are bound by confidentiality.
    • Industry Standards: Regularly updated with security protocols in place - Including but not limited to AES-256 encryption, Hash functions, Elliptic Curve cryptography, Transit - TLC1.3 protocol, bcrypt.
    • Testing and Monitoring: Our systems are monitored for security and periodic assessments are conducted.
  • While we strive to protect your data, in the event of a security breach we will notify you without undue delay as soon as we get to know and will take necessary steps to remediate the incident.

3. User Rights and Controls

  • Right to Access and Correct: Users have the right to request a copy of the personal data the company holds about them, and to ask for corrections if any data is inaccurate or outdated. You may request access to your personal data or ask us to correct or update it by contacting info@pickey.ai.
  • Right to Deletion: Delete account function is available within the app, which leads to account termination and removal/anonymisation of personal data from active systems, subject to retaining any data required for legal compliance.
  • Right to Data Portability: Users can export all passwords they have provided to Pickey via the export functionality.
  • Right to Object or Restrict: Users can opt-out of certain processing (like data sharing for AI model training).
  • PicKey.ai does not sell your personal information. If we engage in practices deemed a ‘sale’ or ‘sharing’ under applicable law, we will provide a way for you to opt out.
  • How to Exercise Rights: Contact the company for any privacy request at info@pickey.ai. We will take reasonable steps to verify your identity before fulfilling a request.
  • Response Time: Company will respond to user requests within 30 days.

4. Data Sharing and Disclosure to Third Parties

  • Third-Party Service Providers:

    • Cloud hosting providers (e.g., AWS/Azure) - store encrypted data and/or run the application servers.
    • Biometric algorithm for Face authentication (Apple/Android).
    • Payment processor – Stripe and Apple Payments if the user purchases a subscription.
    • Tools like Meta Pixel, Google analytics, and Microsoft Clarity to understand traffic.
  • No Unauthorized Third-Party Disclosure: Personal data is not disclosed to any other entity without user consent.

  • Data Sharing for Legal or Safety Reasons: We may disclose your information if required by law or legal process, or to investigate fraud, security breaches, or threats to safety.

  • International Data Transfers: Depending on your location, your data may be transferred to or stored on servers in other countries. Appropriate safeguards are in place for international transfers of personal data.

  • Third-Party Privacy Policies: Clicks on external links are governed by the third party’s privacy policy.

  • No Third-Party Marketing Sharing: We do not share personal data with third parties for their marketing or advertising purposes without consent.

Governing Law

These Terms shall be governed and construed in accordance with the laws of the State of Delaware, USA without regard to its conflict of law provisions.

Changes To Service

We reserve the right to withdraw or amend our Service without notice. We will not be liable if for any reason certain parts of Service are unavailable.

Amendments To Terms

We may amend Terms at any time by posting the amended terms on this site. Your continued use of the Platform following the posting of revised Terms means that you accept and agree to the changes.

Waiver And Severability

No waiver by Company of any term or condition set forth in Terms shall be deemed a further or continuing waiver of such term or condition or a waiver of any other term or condition.

Reward Policy

Pickey.ai offers rewards and badges when users complete certain stages to strengthen their password safety, app exploration, and security. The company may add, change, or remove rewards at its discretion.

Fair Usage Policy

The Pro and Family Plans allow users to store an unlimited number of passwords, but the Company reserves the right to apply a reasonable and system-determined fair usage limit to ensure service quality. The current fair usage limit is set at 1,000 passwords.

No Use By Children

Service is intended only for those at least eighteen (18) years old. The company does not knowingly collect personal data from minors.

Cookie Policy

We use cookies to store your acceptance to the EULA and terms and conditions. PicKey.ai does not store personal data in cookies.

Content Policy

The Company may host content that could include sensitive themes. If you do not agree with this, you should not access the Service.

Links To Other Websites

Our Service may contain links to third-party websites that are not owned or controlled by Neural Heaven, Inc.

Disclaimer Of Warranty

THESE SERVICES ARE PROVIDED BY COMPANY ON AN “AS IS” AND “AS AVAILABLE” BASIS. COMPANY MAKES NO REPRESENTATIONS OR WARRANTIES OF ANY KIND.

Limitation Of Liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, THE COMPANY AND ITS OFFICERS SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, CONSEQUENTIAL, SPECIAL, EXEMPLARY, OR PUNITIVE DAMAGES.

Copyright Policy

We respect intellectual property rights. It is our policy to respond to any claim that Content posted on Service infringes on copyright or intellectual property rights.

DMCA Notice and Procedure for Copyright Infringement Claims

You may submit a notification pursuant to the DMCA by providing our Copyright Agent with the required information.

Accounts

When you create an account, you confirm you are above the age of 18 and that the information provided is accurate, complete, and current.

Grounds for suspension and termination of account

PicKey.ai reserves the right to suspend or terminate services for any user.

Free Trial

Neural Heaven, Inc may offer a Subscription with a free trial for a limited period. Billing information may be required to sign up for the Free Trial.

Fee Changes

Neural Heaven, Inc may modify Subscription fees with prior notice. Continued use of Service after fee changes constitutes agreement to pay.

Purchases and Refunds

You can view purchases under “Settings > Purchases” and request a refund within 30 days if unsatisfied.