Join waitlist

Terms of Service

Last updated 14 August 2026

These terms are the agreement between you and us for using Picto. They are meant to be read, so they are as short as they can be while still covering what matters: what you get, what you owe, what you are responsible for sending us, and what happens when something goes wrong.

By creating an account or by installing the picto SDK in an app that sends us data, you agree to them.

Contents
  1. What Picto is
  2. Your account
  3. Acceptable use
  4. What you send us is your responsibility
  5. Plans, fees and billing
  6. Limits of the service
  7. Suspension and termination
  8. Intellectual property
  9. No warranty
  10. Limitation of liability
  11. Changes to these terms
  12. The rest of it
  13. Governing law and contact

  1. What Picto is

    Picto is a session-replay and diagnostics service for Flutter apps. The SDK records what your app draws, uploads it to our servers, and the dashboard lets you replay those sessions and review the exceptions, dropped frames and repeated-tap events they contain.

    "We" and "us" mean [legal entity name]. "You" means the person or company with the account, and includes anyone you let use it. "The service" means the SDK, the API, the dashboard and this website.

    We change the service as we build it. Features may be added, changed or removed. We will not remove something you are paying for without telling you in advance, leaving you free to cancel under section 5.

  2. Your account

    You need an account to use the dashboard. You must be at least 18, or old enough to enter a contract where you live, whichever is higher. If you are signing up for a company, you are confirming you are allowed to bind it to these terms.

    Give us accurate details and keep them current. You are responsible for what happens under your account, for keeping your password to yourself, and for the people you invite as collaborators.

    Each client app you create gets an API key. That key is what lets an app upload to us, and it ships inside your app binary, so treat it as recoverable by anyone who has your app rather than as a secret. You can rotate it from the dashboard at any time; anything uploaded with a key you did not rotate is treated as yours.

  3. Acceptable use

    Do not use Picto to:

    • Break the law, or help anyone else break it.
    • Record people covertly where the law where they are requires you to tell them, or to ask them first.
    • Deliberately send us special-category personal data — health, biometric, financial-account or government-identifier data — or anything covered by a regime we have not told you we can handle, such as PCI DSS or HIPAA.
    • Attack the service: probe it for vulnerabilities without asking us first, work around its rate limits or quotas, try to reach another customer's data, or load it in a way designed to degrade it for others.
    • Resell the service, or wrap it in a competing session-replay product, without our written agreement.

    If you find a security problem, tell us before you tell anyone else and we will not come after you for having looked.

  4. What you send us is your responsibility

    This is the most important clause here, so it is stated plainly. You decide what your app records and uploads. We store it and show it back to you; we are your processor, not the controller, for anything about your end users.

    The recorder does not capture on-screen text as characters — that is structural, and the Privacy Policy explains both the mechanism and its one narrow exception. But several channels carry strings your app gives us directly, and those are not filtered, redacted or masked by us at all: exception messages and stack traces, tags you set, the end-user identifier you pass to Picto.identify, and — if you opt into network capture — request URLs.

    If your app puts an email address into an error message, we receive that email address. Reviewing what your app sends, excluding what should not be captured, and having a lawful basis and a privacy notice covering it are all yours to do.

    You confirm that you have the rights and the lawful basis to send us everything you send us, and that you have told your end users what your app records, to the extent the law where they are requires it. You will indemnify us against third-party claims arising from data you sent us in breach of this section.

    You keep ownership of your data. We use it to run the service for you, and for nothing else — we do not sell it, share it for advertising, or train machine-learning models on it.

  5. Plans, fees and billing

    Paid plans are billed through Lemon Squeezy, who are the merchant of record for every Picto purchase. Your payment details go to them, not to us — we never see your card number. Their own terms and privacy notice apply to the payment itself, and the invoice comes from them.

    Each plan includes a monthly allowance of recording minutes, and each carries a buffer above it so a busy month does not cut you off without warning. Current plans, prices and allowances are on the pricing page and are part of these terms.

    Subscriptions renew automatically each period at the then-current price until you cancel. You can cancel at any time through the billing portal linked from your dashboard settings. Cancelling stops the next renewal; it does not refund the period you are in, and you keep access until that period ends. Fees already paid are non-refundable except where the law requires otherwise.

    If a payment fails or a subscription lapses, we may stop accepting uploads and restrict dashboard access until it is resolved. Prices can change; we will tell you before a change affects a renewal, and you can cancel before it takes effect.

    Prices exclude taxes unless stated otherwise at checkout.

  6. Limits of the service

    Session recordings are deleted 30 days after upload, automatically and permanently. This is a property of the service, not a setting. There is no extended-retention option, no export-before-expiry process, and no way for us to recover a recording once the job has run. If you need a session for longer than 30 days, capture what you need from it inside that window.

    Exceptions, jank events and rage-tap events are kept for as long as your account exists, and are not covered by that 30-day deletion.

    We do not offer a service level agreement, an uptime commitment or a guaranteed support response time. We keep no backups, so an outage that damages stored data may lose it permanently. The service today runs on a single machine in one region; maintenance and failures both mean downtime. If your business needs guarantees on any of this, talk to us about an enterprise agreement before you rely on us — under these terms, you do not have them.

    Rate limits apply to uploads and to account endpoints, and we may change them to protect the service.

  7. Suspension and termination

    You can stop at any time: cancel your subscription, or delete your account yourself from the Account section of the dashboard. Deleting your account cancels any paid subscription first, then removes every organization you own and everything in it — permanently, with no grace period and nothing for us to restore from. The Privacy Policy explains exactly what is removed and what survives.

    If you own an organization that other people collaborate on, deleting your account destroys their recordings too, and they are neither asked nor notified. The dashboard names each organization and its collaborator count before you confirm. If you want the organization to outlive your account, remove your data from it or hand it over another way before deleting — we cannot recover it afterwards.

    We may suspend or terminate your account if you break these terms, if your payment fails and stays unresolved, or if your use is harming the service or other customers. Except where the breach is serious or we are legally required to act immediately, we will tell you first and give you a reasonable chance to fix it.

    We may also discontinue the service entirely. If we do, we will give you at least 30 days' notice to the email on your account, and refund the unused portion of any prepaid fee.

    On termination your right to use the service ends and your data is deleted. Sections 4, 8, 9, 10 and 13 survive.

  8. Intellectual property

    We own Picto — the SDK, the service, the dashboard, this website, and everything in them except your data. These terms give you a personal, non-exclusive, non-transferable right to use the service while your account is in good standing, and nothing more. You may not copy it, reverse-engineer it, or use our name or logo without permission, beyond what the law allows regardless.

    Open-source parts of the SDK are covered by their own licences, which take precedence over this section for those parts.

    If you send us feedback, we can use it to improve the service without owing you anything for it. We will not identify you as its source without asking.

  9. No warranty

    The service is provided "as is" and "as available". To the fullest extent the law allows, we disclaim all warranties, express or implied, including merchantability, fitness for a particular purpose, and non-infringement.

    We do not warrant that the service will be uninterrupted, that it will be free of errors, that recordings will be complete or faithful to what your users saw, or that your data will not be lost. Replay is a reconstruction, and it can differ from what the device actually showed.

    Some jurisdictions do not allow these exclusions, so parts of this section may not apply to you.

  10. Limitation of liability

    To the fullest extent the law allows, neither of us is liable to the other for indirect, incidental, special, consequential or punitive damages, or for lost profits, lost revenue, lost goodwill, or lost or corrupted data, however caused.

    Our total liability arising out of or relating to these terms or the service, across all claims combined, is capped at the greater of the fees you paid us in the 12 months before the event giving rise to the claim, or one hundred US dollars.

    Nothing here limits liability that cannot be limited by law — including for fraud, for death or personal injury caused by negligence, and for anything else a court will not let us exclude. Your indemnity in section 4 is not subject to this cap.

  11. Changes to these terms

    We may update these terms. For a material change we will email the address on your account at least 30 days before it takes effect, and continuing to use the service after that date means you accept it. If you do not, cancel before then and the old terms govern the period you already paid for.

    Smaller corrections take effect when the date at the top of this page changes.

  12. The rest of it

    These terms, together with the Privacy Policy and the plan you purchased, are the whole agreement between us about the service and replace anything said before.

    If a clause turns out to be unenforceable, the rest stays in force. Not enforcing something once does not waive it. You may not transfer this agreement without our consent; we may transfer it as part of a merger, acquisition or sale of the business.

    We are not liable for failures caused by things genuinely outside our control, including failures of our hosting or payment providers.

    We are independent contractors. Nothing here creates a partnership, agency or employment relationship, and nobody other than you and us has rights under this agreement.

  13. Governing law and contact

    These terms are governed by the laws of [governing law jurisdiction], and the courts of [exclusive forum] have exclusive jurisdiction over any dispute, without regard to conflict-of-laws rules. If you are a consumer, this does not take away rights you have under the law where you live.

    Formal notices go to [legal entity name], [notice address]. Everything else can go to [support contact email].