Privacy Policy
Last updated: March 26, 2026
1. Introduction
PinMapp ("we", "us", or "our") operates the PinMapp mobile application (the "App"). This policy explains what personal data we collect, how we use it, how we protect it, and your rights regarding it. By using the App you agree to this policy.
2. Information We Collect
2.1 Account Information
Email address and password (stored as a secure hash by Firebase Auth) when you register with email.
Your Google account name and profile photo when you sign in with Google.
Username, bio, and visited countries you provide in your profile.
Social media handles (Instagram, YouTube, TikTok, X) if you choose to add them.
2.2 Content You Post
Travel photos you upload, stored in Firebase Storage.
Place names, coordinates (latitude/longitude), and descriptions of locations you pin on the map.
Comments you post on photos.
Direct messages you send to other users.
2.3 Activity Data
Likes on photos and comments.
Follows and blocks of other users.
Tags on photos linking your account to a photo.
Reports you submit on photos or profiles.
2.4 Device Location
When you place a pin on the map, the App requests access to your device's GPS location to auto-fill the coordinates of your chosen spot. Location is accessed only during that interaction — it is not tracked continuously or in the background. Only the coordinates you confirm are stored (as part of the Place record in our database). You may deny location permission and enter coordinates manually.
2.5 Device Permissions
The App requests the following permissions:
Camera / Photo Library — to select or take a travel photo for upload.
Location (GPS) — to auto-fill coordinates when pinning a new place (see 2.4).
Notifications (Android 13+) — to deliver push notifications for likes, comments, tags, and messages. You can revoke this at any time in device settings.
No permission is required for core browsing. You can use the map, feed, and profile features without granting camera or location access.
2.6 Technical and Diagnostic Data
Firebase automatically collects certain technical data to help us operate and improve the App. This includes:
App open/close events and session duration.
Device model, operating system version, and language.
Crash reports and stack traces (via Firebase Crashlytics).
Firebase Cloud Messaging (FCM) token for push notification delivery.
This data is associated with an anonymous installation ID, not your name or email. For full details, see Google's Privacy Policy at policies.google.com/privacy.
2.7 Local Device Storage
The App stores certain preferences locally on your device using Android SharedPreferences. These include dark mode setting, default filters, hidden photo IDs, and notification toggles. This data never leaves your device and is cleared when you sign out or delete the app.
3. How We Use Your Information
Provide core app features: map, photo feed, profiles, messaging.
Send push notifications for likes, comments, tags, and messages (based on your preferences).
Scan uploaded photos for inappropriate content via Google Cloud Vision API (see Section 4).
Manage premium features and free trial eligibility.
Show profile analytics (view counts, top posts) to premium users.
Prevent abuse through blocking, suspension, and reporting systems.
Authenticate your identity and maintain account security.
Process one-time premium upgrade payments via Google Play Billing.
4. Photo Moderation
Uploaded photos are automatically scanned by Google Cloud Vision API to detect adult, violent, or explicit material. Photos that exceed our safety thresholds are removed from storage and marked as hidden. You will receive a push notification if your photo is flagged. The photo's metadata record is retained in our database so you can upload a replacement. We do not manually review photos unless a report is submitted by another user.
5. Data Sharing
We do not sell your personal data. We share data only with the following third-party service providers, each acting as a data processor on our behalf:
Firebase (Google LLC) — authentication, database, file storage, and push notifications.
Google Maps Platform — displaying maps and resolving place information from coordinates.
Google Cloud Vision — automated photo content moderation.
Google Play Billing (Google LLC) — payment processing for premium upgrades.
We do not share your data with advertisers, data brokers, or any unrelated third parties.
6. International Data Transfers
The App is built on Google Firebase, which stores and processes data on servers that may be located in the United States or other countries outside your country of residence.
Google ensures these transfers comply with applicable data protection laws through Standard Contractual Clauses and other approved mechanisms. For details, see Google's Privacy Policy at policies.google.com/privacy.
7. User-Controlled Privacy
Hide photos: You can hide any of your photos from the public feed at any time. Hidden photos are stored locally on your device.
Block users: Blocking prevents a user from seeing your content and hides their content from you.
Profile analytics visibility: Premium users can choose whether their top posts statistics are visible to profile visitors (Settings → Account → "Show my stats to others").
Social links: Only shown on your profile if you choose to add them.
Notification preferences: You can disable any category of push notification in Settings → Notifications.
8. Data Retention
Account and profile data — retained until you delete your account.
Photos and places — retained until you delete them or delete your account.
Comments and likes — retained until deleted by you, or until account deletion.
Direct messages — retained after your account is deleted so the other party keeps their conversation history; your messages display as "Deleted User".
System notifications (likes, comments, tags) — automatically deleted after 7 days.
Profile view records — retained while your account is active.
Technical/diagnostic data — retained per Google Firebase's standard retention periods (typically 90 days for Crashlytics, 14 months for Analytics).
9. Account Deletion
You can delete your account from Settings → Account → Delete Account. Upon deletion:
Your profile, photos, stored files, places, likes, comments, follows, blocks, and feedback records are permanently deleted.
Direct message threads are preserved for other users (your messages show as "Deleted User").
Server-side data where you are a referenced target (follows, blocks, notifications, tags) is automatically cleaned up.
Account deletion is permanent and cannot be undone.
To request account deletion outside the app, contact us at pinmapp.support@gmail.com.
10. Children's Privacy
PinMapp is not directed at children. You must be at least 13 years old to use the App (or 16 in certain EU member states that have set a higher age of digital consent under GDPR Article 8). We do not knowingly collect personal data from children below the applicable minimum age. If you believe a child has created an account, please contact us immediately so we can remove their data.
11. Security
We protect your data through:
Firebase Authentication for secure sign-in (passwords are never stored in plain text).
Firestore and Storage security rules that restrict data access to authorised users only.
HTTPS encryption for all data in transit.
Despite these measures, no internet-based system is completely secure. We cannot guarantee absolute security and are not responsible for breaches caused by events outside our reasonable control.
12. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
For all users
Access — request a copy of the data we hold about you.
Rectification — correct inaccurate data (most data can be edited directly in the App).
Erasure — request deletion of your data (use in-app account deletion or contact us).
Portability — request your data in a structured, machine-readable format.
Objection — object to certain types of processing.
GDPR (EU/EEA users)
We process your data on the following legal bases:
Contract performance — to provide the App's features you signed up for.
Legitimate interests — for abuse prevention, security, and service improvement.
Consent — for optional features such as push notifications (which you can withdraw at any time).
You have the right to lodge a complaint with your national data protection authority.
CCPA (California users)
We do not sell your personal information as defined under the California Consumer Privacy Act. California residents have the right to know what personal information is collected, request deletion, and opt out of any future sale (none currently occurs).
13. Changes to This Policy
We may update this policy when we add new features or change how we handle data. We will notify you of significant changes via an in-app notice at least 14 days before the change takes effect. The "Last updated" date at the top of this page always reflects the current version. Continued use of the App after a change takes effect constitutes acceptance of the updated policy.
14. Contact
For privacy questions, data requests, or complaints, contact us at:
Email: pinmapp.support@gmail.com
You can also use the Contact Us form in Settings → About.