Legal
Privacy Policy
Effective date: 17 March 2026
MyPicasso is operated by Tyrone Lasarow, South Africa. We are committed to protecting your personal information and that of your children. This Privacy Policy explains what information we collect, how we use it, and your rights under South African law including the Protection of Personal Information Act 4 of 2013 (POPIA).
1. Information We Collect
Information you provide directly:
- Full name and email address when you register
- Your children's first names and dates of birth
- Photos and images of your children's artwork
- Delivery name, address, and phone number when placing an order
- Payment information (processed by PayFast — we never see your card details)
Information collected automatically:
- Device type and operating system
- App usage data and crash reports (used only to improve the service)
- IP address and approximate location (country level only)
2. How We Use Your Information
We use your personal information only for the following purposes:
- To create and manage your MyPicasso account
- To store and display your uploaded artwork within the app
- To build and print your personalised art books
- To process and deliver your orders
- To send you transactional emails (order confirmations, delivery updates)
- To respond to your support queries
- To improve and maintain the MyPicasso platform
We will never:
- Sell your personal information to any third party
- Use your children's images for advertising or marketing
- Share your data with any third party except as required to deliver the service
3. Children's Privacy
We take the privacy of children extremely seriously. Images uploaded to MyPicasso are:
- Stored in a secure, private cloud environment
- Accessible only to the account holder
- Never shared publicly, indexed by search engines, or used for any purpose other than printing your book
- Never used for advertising, AI training, or any commercial purpose
MyPicasso is intended for use by parents and guardians aged 18 and over. We do not knowingly collect personal information directly from children.
4. Data Storage and Security
- Your data is stored securely on Supabase servers with industry-standard encryption
- All data transmission is encrypted using SSL/TLS
- Access to your data is restricted to authorised personnel only
- We retain your data for as long as your account is active
- If you delete your account, all your personal data and uploaded images will be permanently deleted within 7 business days
5. Sharing Your Information
We only share your information with third parties where necessary to provide the service:
- PayFast — to process your payments securely
- Our print partner — to print and produce your book order
- Our courier partner — to deliver your order to your address
- Supabase — our secure cloud infrastructure provider
All third parties are required to handle your data securely and in accordance with applicable law.
6. Your Rights Under POPIA
As a South African resident you have the right to:
- Access the personal information we hold about you
- Request correction of inaccurate information
- Request deletion of your personal information
- Object to the processing of your personal information
- Lodge a complaint with the Information Regulator of South Africa
To exercise any of these rights, contact us at support@mypicasso.co.za.
7. Cookies
Our website uses essential cookies for authentication and session management only. We do not use tracking or advertising cookies.
8. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or in-app notification. The effective date at the top of this page will always reflect the latest version.
9. Contact and Complaints
For any privacy-related queries or complaints, email us at support@mypicasso.co.za.
You also have the right to contact the Information Regulator of South Africa:
Website: www.inforegulator.org.za
Email: inforeg@justice.gov.za
Contact us: support@mypicasso.co.za