Privacy Policy

1. Who we are

Pinzzo is operated by Pinzzo. For any privacy questions or to exercise the rights described below, contact us at [email protected].

If you are in the European Economic Area (EEA) or UK, Pinzzo is the data controller for the personal data described in this policy under the General Data Protection Regulation (GDPR) / UK GDPR.

2. What data we collect

2.1 Account information

Username, email address, profile photo, and bio. Authentication credentials are managed by our authentication provider and are never stored by us in plain text.

2.2 Location data

Location is central to how Pinzzo works, and we collect it in several distinct ways with different levels of precision:

• Pin location: when you create a pin, we store its exact GPS coordinates permanently, tied to that pin.
• Discovery location: when you attempt to discover a pin, your device sends your current GPS coordinates to our server to verify physical proximity. This is used only to confirm the discovery.
• Nearby-pin browsing: when viewing the map, your approximate location is used to query pins near you. Pins you have not yet discovered are only ever shown to you as fuzzed/approximate positions — we never send you another pin's exact coordinates until you've verified your presence there.
• Optional real-time presence ("nearby friends"): if you explicitly enable this feature in settings, your device periodically reports your current location while the app is open, solely to determine whether mutual followers who have also enabled the feature are nearby. This is off by default, only shared with mutual followers, only active while the app is in the foreground, and only ever surfaces as a "nearby" indicator — never an exact distance, direction, or coordinate.

We do not track or store your location in the background when the app is closed.

2.3 Content you create

Photos, videos, audio recordings, and text you attach to pins, comments, reactions, messages, and trails.

2.4 Communications

Messages exchanged with mutual followers, including any media attached (including view-once media — see §4 on retention).

2.5 Usage and device data

App version, device type and OS version, crash logs, general interaction data, IP address, and approximate location derived from IP for basic service delivery.

2.6 Purchase data

If you subscribe to Pinzzo Premium, purchase and entitlement data is processed through Apple's App Store, Google Play Billing, and our subscription management provider, RevenueCat. We receive confirmation of your subscription status but not your full payment card details, which are handled entirely by Apple/Google.

3. How we use your data

We use the data above to:

• Operate the core discovery mechanic (verifying proximity, unlocking content, computing fuzzed locations).
• Maintain your profile, follower relationships, levels, streaks, and leaderboards.
• Deliver push notifications for things like milestone achievements, messages, and nearby-friend alerts you've opted into.
• Detect and prevent abuse, including GPS spoofing detection, rate-limiting, and moderation of reported content.
• Process subscription payments and manage entitlements.
• Improve the app and fix bugs.
• Comply with legal obligations.

4. Data retention

• Pins, comments, reactions: retained until you delete them or delete your account.
• Discovery records: retained to power levels, streaks, "on this day" memories, and leaderboards, for as long as your account exists.
• View-once messages: the underlying media file is deleted from our storage shortly after it has been viewed (within 24 hours), not merely hidden from future views.
• Real-time presence data ("nearby friends"): treated as stale and ignored after a few minutes; the underlying record is periodically purged and is never kept as a historical trail.
• Wrapped/annual recap snapshots: retained so you can revisit past recaps, until account deletion.
• Account data: retained until you delete your account, after which it is deleted or anonymized within 30 days, except where we are required to retain it for legal, tax, or fraud-prevention purposes.

5. Who we share data with

We do not sell personal data. We share limited data with the following categories of service providers, each acting under their own privacy terms:

• Our database and file storage, hosted on infrastructure we operate directly.
• Map tile provider: map requests (which can include approximate location) are sent to our map rendering provider to display the map.
• Push notification provider: used to deliver push notifications; processes device tokens for this purpose.
• Subscription management provider: processes subscription/entitlement data, and shares relevant data with Apple and Google as the platforms actually processing payment.
• Apple App Store / Google Play: handle all payment processing for subscriptions; we never see your full payment details.
• GIF search: if you use the in-app GIF picker, your search terms are sent directly to that provider from your device.
• Law enforcement or legal process: where required by law, or to protect the rights, safety, or property of Pinzzo, our users, or the public.

6. Your rights

If you are in the EEA, UK, or another jurisdiction with similar protections, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion of your data ("right to be forgotten").
• Restrict or object to certain processing.
• Request a portable copy of your data.
• Withdraw consent at any time where processing is based on consent (e.g. the optional nearby-friends feature).
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us at [email protected]. We will respond within the timeframe required by applicable law.

7. Children's privacy

Pinzzo is not intended for use by anyone under 16 years old. We do not knowingly collect personal data from children under this age. If we become aware that we have, we will delete it promptly.

8. Security

We use industry-standard measures to protect your data, including encrypted connections (HTTPS/TLS) between the app and our servers, and server-side validation of sensitive actions (such as pin discovery) so that private data is never exposed to unauthorized users at the API level. No system is completely secure, and we cannot guarantee absolute security.

9. Location data — our design approach

Because location is central to Pinzzo, we've designed the system so that:

• Other users' exact locations are never sent to your device unless you've verified your physical presence there, or — for a follower's full location history — unless you follow each other back.
• The optional real-time "nearby friends" feature is off by default and never reveals precise distance or direction.

10. International users

Pinzzo is a global service. If you use Pinzzo from outside the country where our servers are hosted, your data will be transferred to and processed there, and potentially processed by service providers located in other countries as described in §5.

11. Changes to this policy

We may update this policy from time to time. We will notify you of material changes through the app or by email before they take effect.

12. Contact us

Questions about this policy or your data: [email protected]