Privacy Policy — PinPint

    Plain English summary: PinPint stores your account details, the pubs you've visited, your ratings, your friends list, and your messages. We use this data only to run the app. We don't sell your data. Messages are stored securely and are only accessible to the people in the conversation. You can delete your account and all your data at any time from the Settings page.
  

Who we are

PinPint is an Irish pub tracking and social app operated as a personal project based in Ireland. PinPint is the data controller for the personal data described in this policy.

For any privacy-related queries, contact us at the details in the Contact section below.

What data we collect

We collect only what is necessary to provide the PinPint service:

Data	Why we collect it	Legal basis
Email address	To create and manage your account	Contract
Display name & profile photo	To identify you to friends on the map	Contract
Pub visit data	To show your visited pubs on the map and in your passport	Contract
Ratings & pint prices	To show your pub ratings and price logs	Contract
Friends list	To show friends' activity on your map	Contract
Messages	To power the in-app chat between friends	Contract
Pub suggestions	To review and add new pubs you suggest	Legitimate interest
Device & browser info	Basic analytics via Google AdSense	Consent

We do not collect your precise GPS location. The map uses your city selection only.

How we use your data

Your data is used exclusively to provide the PinPint service. Specifically:

To create and maintain your account
To display your visited pubs, ratings and passport on the map
To show your friends' pub activity on your map (only to each other)
To enable messaging between friends
To review and approve pub suggestions you submit
To serve relevant ads through Google AdSense

We do not use your data for profiling, automated decision-making, or any purpose other than running the app.

Messages & privacy

Messages sent between users are stored in our database, hosted by Supabase (EU region). Access to messages is restricted by Row Level Security policies, meaning:

Only the sender and recipient of a message can read it
No other user can access your messages through the app
Messages are not used for advertising or shared with third parties

      Operator access: As required under Irish and EU law, PinPint as the platform operator has administrative access to the database. This access is used only where required by law (e.g. a valid legal request from An Garda Síochána) or to investigate a reported abuse or safety concern. We do not routinely read user messages.
    

If you delete your account, all your messages are permanently deleted from our database.

Who we share data with

We do not sell your personal data. We share data only with the following service providers, strictly to operate the app:

Provider	Purpose	Location
Supabase	Database & authentication hosting	EU (Frankfurt)
Netlify	Website hosting	EU / US
Google AdSense	Advertising	US (GDPR compliant)
Google Maps API	Pub geocoding (address → coordinates)	US (GDPR compliant)

All providers are either based in the EU or operate under GDPR-compliant data transfer mechanisms.

Advertising

PinPint uses Google AdSense to display advertisements. Google may use cookies and your browsing data to serve ads relevant to you. This is subject to Google's own privacy policy at policies.google.com/privacy.

You can opt out of personalised advertising at adssettings.google.com.

We do not share your PinPint account data (pub visits, friends, messages) with Google AdSense.

How long we keep your data

Account data — kept for as long as your account is active
Pub visit & rating data — kept for as long as your account is active
Messages — kept until you or the other user deletes their account
Pub suggestions — kept for 90 days after review (approved or rejected)
All data — permanently deleted within 30 days of account deletion

Your rights under GDPR

As an Irish/EU user you have the following rights regarding your personal data:

Right of access — you can request a copy of all data we hold about you
Right to rectification — you can correct inaccurate data via Settings
Right to erasure — you can delete your account and all data via Settings → Danger Zone
Right to restriction — you can ask us to stop processing your data
Right to portability — you can request your data in a machine-readable format
Right to object — you can object to processing based on legitimate interest

To exercise any of these rights, contact us at the details below. We will respond within 30 days as required by GDPR.

You also have the right to lodge a complaint with the Data Protection Commission Ireland at dataprotection.ie if you believe your data has been mishandled.

Cookies

PinPint uses the following cookies:

Cookie	Purpose	Type
Supabase auth token	Keeps you logged in between sessions	Essential
pinpint-theme	Remembers your light/dark mode preference	Functional
Google AdSense cookies	Serves relevant advertisements	Advertising

You can control non-essential cookies through your browser settings. Blocking advertising cookies will not affect your ability to use PinPint.

Contact us

For any privacy questions, data requests, or concerns, contact us:

✉️

PinPint Privacy

Email: danielhowley@outlook.ie
We aim to respond to all privacy requests within 30 days.
For urgent concerns or legal requests, please mark your email "URGENT — Privacy".

    Changes to this policy: We may update this privacy policy from time to time. When we do, we'll update the "Last updated" date at the top of this page. Continued use of PinPint after changes constitutes acceptance of the updated policy.
  