Privacy Policy

This policy describes what the Pinpund mobile app (“Pinpund”, “we”) collects, why, and what you can do about it. It covers the iOS and Android apps and this website.

What we collect

• Your Google account basics. When you sign in with Google we receive your name, email address and profile picture. That is the whole of it. We do not request access to Gmail, Drive, Contacts, Calendar or any other Google service.
• Your profile. The avatar you pick inside the app, and your display name.
• Location. Only while you are using the app, and only to work out which shops are near you. Pinpund does not track your location in the background.
• A notification token. A device identifier issued by Apple or Google so we can send you app notifications. It is removed when you sign out.
• Crash and error diagnostics. When something goes wrong we collect the technical details of the failure (device model, operating system version and a stack trace) to fix it.

What we do not do

• We do not sell your personal data.
• We do not share it with advertisers, and Pinpund has no ads.
• We do not build advertising profiles or track you across other apps and websites.

Who processes it

We use a small number of service providers to run the app. They process data on our instructions only:

• Supabase: the database, sign-in and file storage behind the app. Your account and profile are stored here.
• Google: Google Sign-In for authentication and Firebase Cloud Messaging to deliver notifications.
• Sentry: crash and error reporting.

We do not pass your details to the shops listed in the app. Pinpund shows you how to contact a shop; if you get in touch, whatever you share with them is between you and them.

Reporting and blocking

If you report something, we record what you reported, the reason you chose, anything you added, and a copy of the reported content taken at that moment — so the report still means something after the content is deleted. We record who filed it, because a pattern of reports matters and because we may need to reply to you.

If you block somebody, we record that you blocked them, and it is also filed as a report so our team sees it. The person you blocked is not told, and does not see that anything changed.

Reports are kept while the account exists and for as long as we need them to act on repeated behaviour. They are visible only to the Pinpund team.

How long we keep it

Account and profile data is kept while your account exists. Crash diagnostics are kept for a limited retention period and then discarded. Delete your account and we remove your personal data, except where we are required to keep records for legal or accounting reasons.

Your choices

• Permissions. Location is optional and is requested only when a feature needs it. You can refuse or revoke it in your device settings; the rest of the app carries on working.
• Notifications. Turn them off in your device settings at any time.
• Disconnect Google. Remove Pinpund’s access from your Google Account permissions page.
• Access or deletion. Email us and we will provide a copy of your data or delete your account.

Children

Pinpund is not intended for children under 13, and we do not knowingly collect their personal data. If you believe a child has given us data, contact us and we will remove it.

Changes

If we change this policy we will update the date at the top of this page, and for significant changes we will tell you in the app.

Contact

Questions, access requests or deletion requests: pinpund.app@gmail.com.