Last updated: 5 October 2026
My Picco (also displayed as MyPicco) is a business application that connects authorised users to their organisation’s warehouse and business systems through a configured PiccoMonkey service. This policy explains how information is handled by the Android and iOS/iPadOS apps and by Evo-Soft Ireland Ltd. in connection with it.
1. Who we are and who controls your information
My Picco is provided by Evo-Soft Ireland Ltd. (“Evo-Soft”, “we”, “us” or “our”). You can contact us about privacy at:Evo-Soft Ireland Ltd.
4 Bruach na Laoi, Union Quay
Cork, T12TX68, Ireland
Email: privacy@evosoft.ie
Customers manage the servers and business systems used with My Picco. Your employer or the organisation providing your access normally determines which business information is processed, why it is used, who can access it and how long it is retained. That organisation is normally the data controller for this information. Its privacy notice applies alongside this policy.
Evo-Soft receives automatic support diagnostics from My Picco as described below. Business screens and submitted field contents continue to go to your organisation’s configured server. We are the data controller for the diagnostics we receive and information you send directly to us for support or privacy enquiries. If a customer authorises us to access its personal data when providing technical support, we handle that data on its behalf under the applicable support and data-processing arrangements.
2. Information handled by the app
- Connection settings: the server hostname or IP address, TCP port and scanner ID entered in Settings. The scanner ID is a configured identifier for your business-system session; it is not your phone’s hardware serial number or advertising ID.
- Session information: a small message-sequence value used to coordinate requests with the server. The receiving server also sees the network IP address used for your connection.
- Business information and input: the screens, field values, identifiers and commands exchanged with your organisation’s server. Depending on its configuration, these may include operator or login codes, item numbers, barcodes, quantities, stock information, order references and personal information contained in business records.
- Support information: if you contact Evo-Soft, we receive the contact details, correspondence and any screenshots or other information you choose to provide. Please avoid sending passwords or unnecessary personal information.
The app receives business information from the configured server and sends your submitted input and commands back to that server. It does not independently select which business records you may view; those decisions are made by your organisation’s systems and access controls.
Automatic support diagnostics include the configured server hostname or IP address, TCP port, scanner ID, a generated installation identifier, session and operation identifiers, timestamps, app and operating-system versions, device manufacturer/model, device category, network-access state, connection and operation outcomes, timings, camera-scan outcomes and managed exception types/method names. The diagnostic endpoint also receives the network IP address used for the upload. Diagnostics exclude passwords, business-screen and field contents, raw barcode values, camera images, location and advertising identifiers. The current RF protocol does not identify login outcomes explicitly, so the app reports authentication as unknown and does not infer a user ID from input fields.
3. Why information is used
My Picco uses connection and session information to establish and maintain the requested connection. It uses business information to display screens and submit the actions you perform. Without the required connection details, and any login information required by your organisation, the relevant service cannot be used.
Your organisation is responsible for identifying and explaining the lawful basis for processing personal data in its business systems.
For support diagnostics and enquiries sent directly to Evo-Soft, we rely on our legitimate interests in supporting our software, diagnosing connection and reliability problems, answering requests and resolving service issues, subject to your rights and interests. We rely on legal obligations where processing is necessary to handle statutory privacy requests or comply with applicable law. If we need to rely on consent for a separate purpose, we will explain that purpose and how to withdraw consent.
The app does not use personal data for advertising, cross-app tracking or automated decisions about individuals. Your organisation is responsible for explaining any decision-making performed by its connected business systems.
4. Who receives information
Business information is exchanged with the endpoint configured by you or your administrator and the business systems connected to it. Your organisation’s authorised users and service providers may have access according to its permissions and arrangements.
Information sent directly to Evo-Soft may be accessed by authorised personnel and service providers supporting our business email, IT and support services where needed to handle the enquiry. We may disclose information where legally required. We do not sell personal information handled through My Picco or use its business-screen content for advertising.
The app automatically sends connection, operation and managed-error diagnostics to Evo-Soft over HTTPS. It has no advertising or cross-app tracking integration. Diagnostics are used for technical support and reliability. Android, Google Play, Apple, your device manufacturer or your organisation’s device-management service may separately process information under their own settings and privacy notices. For example, Google Play may make anonymous app-quality reports available to Evo-Soft through Android vitals, based on information from users who have agreed to share it with Google. Apple may also share crash reports and app usage statistics through App Store Connect when you choose to share analytics with app developers in your device settings. These platform reports can help us diagnose reliability and performance issues. Any screenshots or recordings you make are subject to the storage and sharing choices you make for them.
5. Storage, retention and deletion
The app saves connection settings, your keyboard preference, message-sequence values and a generated installation identifier in its local application preferences. They remain until changed or until the app’s local data is cleared. The app does not write business-screen contents or entered login values to its own persistent storage or maintain an offline business database.
Business screens and input are processed in memory while the app runs. Briefly backgrounding the app can retain an idle session and entered values in memory so you can continue on return. Leaving the server workflow, closing the app window, or losing the connection closes the session and clears the displayed server screen. This does not delete information already submitted to the server.
Android backup and device-transfer support is enabled. Depending on your device, account and administrator settings, saved app preferences and pending diagnostic files may be included in a system backup or transferred to another device. These copies are managed through the relevant device or backup service.
You can remove current local app data using Android’s app settings and choosing “Clear storage” or “Clear data”, or by uninstalling the app. Backups may retain or restore settings; manage those separately through your device or backup account. Removing the app does not delete your organisation’s business records or user account.
On iPhone and iPad, saved preferences and pending diagnostic files are held inside the app’s sandboxed container. Depending on your settings, they may be included in iCloud or computer backups and restored to a device from a backup.
You can remove local app data on iPhone or iPad by deleting the app in Settings > General > iPhone/iPad Storage > My Picco > Delete App, or from the Home Screen. Backups may retain or restore settings; manage these through your iCloud or backup settings. Deleting the app does not delete your organisation’s business records or account.
iOS may offer to save passwords you type into a password field to your Passwords app or iCloud Keychain. This is an Apple system feature you control; My Picco does not store passwords itself.
Your organisation determines retention and deletion of server records, logs and backups. Contact its administrator or privacy contact about those records. My Picco does not create a separate Evo-Soft user account.
Evo-Soft retains received diagnostics and support and privacy correspondence for as long as needed to resolve the enquiry, maintain necessary service records and meet applicable legal requirements. Relevant factors include whether an issue remains open, continuing support needs, and any legal obligation or dispute requiring retention. Contact us for details relevant to your enquiry.
Pending diagnostics are stored in a local queue limited to 10 MiB and 2,000 event files. Acknowledged uploads are removed locally. Entries older than seven days are removed when the app next performs queue maintenance; older entries can also be removed sooner to stay within the limits. Uploads retry while the app is running and internet access is available. The last accepted camera barcode is held only in memory and cleared on login reset, session end or a new connection. The local queue limit does not determine retention of copies already received by Evo-Soft.
6. Security of the connection
The current app communicates using the legacy PiccoMonkey TCP protocol. This connection does not itself provide TLS encryption. Password masking on a screen does not encrypt network traffic.
Your administrator must arrange appropriate encrypted protection, such as a correctly configured VPN protecting the connection, before credentials or other personal information are transmitted. The app does not set up or verify that protection. Ask your administrator which connection method to use, and protect your device with appropriate access controls.
Local settings and pending diagnostics are held in the app’s storage area under the operating system’s access controls. Diagnostic uploads use HTTPS with certificate validation; this is separate from the legacy business-server connection. Access to information provided directly to Evo-Soft is limited to the purposes described in this policy. No system can guarantee absolute security.
7. Device permissions and future features
The app uses network access to communicate with the configured server. If you select an editable field and tap the Scan barcode icon in the toolbar, the app asks for camera access (once, or again if you have turned it off) and shows a live camera view to read one barcode or QR code. The barcode is decoded on your device. Camera images are not saved, recorded, logged or sent to us, to your organisation or to any other party, and the camera stops when the scanner closes or the app goes to the background. Only the decoded text is placed into the field you chose; nothing is sent to the server until you use one of the screen’s own actions, and links in QR codes are never opened. If you refuse camera access you can still type values, and you can change the permission later in your device settings. The app does not request access to your microphone, location, contacts, SMS messages or photo library, and it does not provide Bluetooth-device discovery. If future features change how personal information or device permissions are used, we will update this policy and provide any required notices and permission requests before that use.
On iPhone and iPad, iOS may ask for local network access when the configured server is on your local network. The app uses this permission only to connect to the server you configured. If you decline, connections requiring that permission will fail; you can change it in Settings > Privacy & Security > Local Network. Camera permission can also be changed in your device settings; you can continue typing values without it.
8. Where information is processed
The location of business data depends on the servers and providers selected by your organisation. Ask it about processing locations and any international transfers. Android and iOS backups and other platform services have their own processing arrangements.
Information supplied directly to Evo-Soft is also covered by our company Privacy Notice, including its information about processing locations. Contact privacy@evosoft.ie for details of relevant providers and any international-transfer safeguards applying to information we hold about you.
9. Your privacy rights
Where applicable under data protection law, you may request access to, correction or deletion of your personal information; restriction of processing; or a portable copy. You may also object to processing based on legitimate interests. These rights depend on the circumstances and are subject to legal conditions. Where processing relies on consent, you may withdraw it without affecting earlier lawful processing.
For information controlled by Evo-Soft, email privacy@evosoft.ie. We may need proportionate information to verify your identity and will handle requests within the applicable statutory time limits. For customer-managed business records, contact your organisation; we can help identify the appropriate route if you are unsure.
You may complain to the Irish Data Protection Commission, or another competent data protection authority, including the authority where you live or work in the European Economic Area.
10. Children, website use and policy changes
My Picco is intended for authorised business users and is not directed at children. If you believe a child has provided personal information directly to Evo-Soft through a support enquiry, please contact us.
This policy concerns the My Picco app. Visiting our website may involve separate website processing described in our company Privacy Notice and any applicable cookie notice.
We may update this policy as the app, our practices or applicable requirements change. The date above identifies the latest revision. We will provide additional notice where required for material changes.
