Privacy Policy · PinPint

    Plain English summary: PinPint stores your account details, the pubs you've visited, your ratings, your friends list, and your messages. We use your personal data only to run the app, and we don't sell it. The drink prices people log are published and may be licensed to others, always without anybody's name or account. Messages are stored securely and are only accessible to the people in the conversation. The mobile app also uses your location while it is open to show what is nearby, and it carries no ads or trackers of any kind. We count how PinPint is used, as totals, with nothing stored on your device, and you can turn that off in Settings. You can delete your account and your data at any time from the Settings page; the prices you logged stay, with nothing linking them to you.
  

Who we are

PinPint is an Irish pub tracking and social app operated as a personal project based in Ireland. PinPint is the data controller for the personal data described in this policy.

For any privacy-related queries, contact us at the details in the Contact section below.

What data we collect

We collect only what is necessary to provide the PinPint service:

Data	Why we collect it	Legal basis
Email address	To create and manage your account	Contract
Display name & profile photo	To identify you to friends on the map	Contract
Pub visit data	To show your visited pubs on the map and in your passport	Contract
Ratings & pint prices	To show your pub ratings and price logs; and the prices, with no name attached, to publish and license price figures	Contract, and legitimate interests for the publishing and licensing
Friends list	To show friends' activity on your map	Contract
Messages	To power the in-app chat between friends	Contract
Pub suggestions	To review and add new pubs you suggest	Legitimate interest
Feedback & reports about a pub	To read what you tell us about the app or a pub, such as one that has closed, and to reply. Carries your account email if you are logged in, or one you choose to leave	Legitimate interest
Contact name & phone number (pub owners only)	To check a claim that you run a pub before you can manage its listing. Read by us, never shown publicly	Contract
Gender (optional)	Aggregate insight into who uses PinPint. Never shown against an individual, and never shared	Consent
Usage counts (app and website)	To see how many people use PinPint and what they use it for, so we know what to build. When you are signed in: the days you opened PinPint, the pubs whose pages you opened, and that you shared something or followed a crawl link, once a day each, with whether it was iPhone, Android or the website. No times, no location, no device details. When you are signed out, only an anonymous count. You can turn it off in Settings	Legitimate interests
Approximate & precise location (app)	To show the pubs and prices nearest you, rank the cheapest pint around you, pick your leaderboard town, and attach a check-in to the right pub. Used while the app is open; not stored as coordinates	Contract
Check-ins (app)	To show how busy a pub is right now	Contract
Push notification token (app, optional)	To send a notification to your device if you turn notifications on	Consent
Pub price form: your name, your role at the pub and your email address, if you send us your pub's prices	To check the prices with you before they are shown. Seen only by PinPint, never shown on the map	Legitimate interests

On this website we do not collect your precise GPS location; the map uses your city selection only. The mobile app uses your device location while it is open, described in section 06.

How we use your data

Your personal data is used only to provide the PinPint service. Specifically:

To create and maintain your account
To display your visited pubs, ratings and passport on the map
To show your friends' pub activity on your map (only to each other)
To show your friends which pubs you follow, and you which pubs they follow (only to each other)
To publish your passport at pinpint.io/@yourhandle: your name, photo, short bio, home town and the pubs you have marked visited, with your ratings. An account made from 20 October 2026 starts public, with a handle made from your name, and you are told so when you sign up; an account made before then stays private unless you turn it on. You can change your handle or make your passport private at any time in Settings, Profile and sharing. Your notes, what you paid and your email are never on it
To enable messaging between friends
To review and approve pub suggestions you submit
To publish and license price figures, and the prices under them, with no name, account or anything else that identifies you attached (section 5A of the terms)

We do not use your data for profiling, automated decision-making, or any purpose other than running the app.

Messages & privacy

Messages sent between users are stored in our database, hosted by Supabase (EU region). Access to messages is restricted by Row Level Security policies, meaning:

Only the sender and recipient of a message can read it
No other user can access your messages through the app
Messages are not used for advertising or shared with third parties

      Operator access: As required under Irish and EU law, PinPint as the platform operator has administrative access to the database. This access is used only where required by law (e.g. a valid legal request from An Garda Síochána) or to investigate a reported abuse or safety concern. We do not routinely read user messages.
    

If you delete your account, all your messages are permanently deleted from our database.

Who we share data with

We do not sell your personal data. We share data only with the following service providers, strictly to operate the app:

Provider	Purpose	Location
Supabase	Database & authentication hosting	EU (Frankfurt)
Netlify	Website hosting	EU / US
Formspree	Delivers the feedback, suggest a pub and report a closed pub forms to our inbox	US (GDPR compliant)
OSRM	Walking routes between the stops of a pub crawl. Carries the stops' coordinates and your IP, no account data	EU (Germany)
Expo (EAS)	Push notification routing and over-the-air update checks (app)	US (GDPR compliant)
Apple / Google push services	Delivery of notifications to your device (app)	US / EU
OpenFreeMap / OpenStreetMap	Map tiles (app). Carries your IP and map area, no account data	EU

All providers are either based in the EU or operate under GDPR-compliant data transfer mechanisms.

The mobile app

The PinPint apps for iPhone and Android use the same account and the same database as this website, so everything above applies to them too. The app differs from the website in a few ways that matter for your privacy, and this section is the complete list of them.

Location

The app uses your device location, but only while the app is open, and only on the screens that need it: the map, Explore, the leaderboard, and when you tap the locate button or check in. It is used on your phone to work out which pubs are nearest you, which pint is cheapest nearby, and which town's leaderboard to show. Your coordinates are not uploaded and not stored. There is no background location: the app cannot see where you are when it is closed.

The one thing that is recorded from a location is a check-in, and a check-in stores which pub and the time, never a trail of where you have been.

Check-ins

Tapping "check in here" adds one row to our database: the pub, the time, and whether you have chosen to let friends see it. That choice is off by default. Check-ins feed the "live right now" count shown on a pub, which is a total and never a list of names, unless you have turned on friend visibility, in which case accepted friends who are also there can see that you are. You can stop checking in at any time, and your check-ins are deleted with your account.

Notifications

If you turn notifications on in Settings, the app registers a push token with our database and with Expo's push service, which hands it to Apple or Google so a notification can reach your phone. The token identifies the app on your device, not you. Turning notifications off, or uninstalling the app, removes it.

Pub crawls

Anybody signed in to PinPint can send you a message from your public page. If they are not your friend it arrives as a message request: you see it in Chat under Message requests, and they cannot send more than three messages until you accept. Delete a request and it is hidden from you, they are not told, and nothing more from them is shown or notified. Blocking someone stops them reaching you at all.

A crawl you build or join is stored with its stops, the people on it, and the group thread for the night. Messages in a crawl thread are visible to everyone on that crawl and to nobody else. You can leave a crawl at any time, and an organiser can delete one. Deleting your account removes you from every crawl; a crawl you created stays for the rest of the group without your name on it, and messages you posted stay in the thread but stop being attributed to you, so the others can still follow the night.

Reporting and blocking

You can report a profile, a message or an event, and you can block another user. A report is sent to us and is read; we act on reports about safety or abuse within one day. A block is symmetric, meaning neither of you can see the other anywhere in the app, and it is not announced to the person blocked. Reports are kept as a moderation record even if you later delete your account.

No ads, no trackers

      Neither the app nor this website carries advertising. The app has no analytics or tracking software from anybody else. It does not use an advertising identifier and never asks to track you across other apps or websites.
    

Counting how PinPint is used

We count four things ourselves, in our own database, in both the app and this website: that PinPint was opened, that a pub's page was opened, that something was shared, and that a crawl link was followed. We do this to see how many people use PinPint and which parts of it are worth building on. No outside analytics company is involved and the counts are never sold or shared.

If you are signed in, a count is kept against your account once a day: the day, which of the four it was, the pub if it was a pub's page, and whether you were on iPhone, Android or the website. It holds no time of day, no location and nothing about your device. If you are signed out, a shared counter goes up by one, and the pub's own counter if it was a pub's page, and nothing about you is kept at all. Nothing is stored on your phone or in your browser for any of this: no cookie and no identifier.

We read these only as totals, such as how many people opened the app this week. A pub that has claimed its listing sees the same kind of total for its own page: how many people opened it each week, and how many of those have been to another pub in its town. Never who. You can stop it for your account at any time: Settings, Privacy, Help improve PinPint. With that off, nothing is recorded or counted for you. The counts are deleted with your account.

Settings kept on your phone

Your theme, your notification choice and your check-in visibility setting are saved on the device only. They are never sent to us.

Deleting your account

The same as on the website: open Settings, then under Danger zone, "Delete my account". It erases your account and your data: your passport, your check-ins, your friends, your notification token, and the account itself. Three things are anonymised rather than erased, so that other people's records still make sense: the drink prices you logged stay on the map with nothing linking them to you, a crawl you created stays for the group without your name, and a message you posted in a crawl thread stays but is no longer attributed to you. A report you filed is also kept, without your name, as a moderation record. Removing the app from your phone on its own does not delete anything; use the in-app option. If you no longer have the app, pinpint.io/delete-account.html has the other ways to do it.

Service providers used by the app

In addition to Supabase, which stores everything above, the app relies on:

Expo (Expo Application Services): routes push notifications, and checks for over-the-air updates on launch. An update check sends a random installation identifier that is not linked to your account. United States, operating under GDPR-compliant transfer mechanisms.
Apple Push Notification service and Google Firebase Cloud Messaging: delivery of notifications to your device, and nothing else.
OpenFreeMap and OpenStreetMap: the map tiles. A tile request carries your IP address and the area of the map you are looking at. It carries no account data.
Formspree: delivers the feedback, suggest a pub and report a closed pub forms to our inbox, the same as on this website. United States, operating under GDPR-compliant transfer mechanisms.
OSRM: draws the walking route between the stops of a crawl. A request carries the stops' coordinates and your IP address, not your own location and no account data.

Neither the app nor this website uses the Google Maps API. The app reads a pub list that ships inside it rather than geocoding addresses.

Legal basis

Location, check-ins, crawls and notification tokens are processed on the basis of our contract with you, to provide the features you have asked for. Reports are processed on the basis of our legitimate interest in keeping the app safe, and where applicable a legal obligation. Usage counts are processed on the basis of our legitimate interest in understanding how PinPint is used and improving it; you can object by turning them off in Settings.

Advertising

PinPint does not show advertising, on this website or in the app. We use no advertising network and set no advertising cookies, and your account data (pub visits, friends, messages) is not shared with any advertiser.

If that ever changes, this page will say so before any advertisement appears.

How long we keep your data

Account data: kept for as long as your account is active
Pub visit & rating data: kept for as long as your account is active
Messages: kept until you or the other user deletes their account
Pub suggestions: kept for 90 days after review (approved or rejected)
Drink prices: kept with nothing linking them to you after your account is deleted. A price already in a published or licensed figure stays in it
Check-ins (app): kept until you delete your account
Usage counts: kept until you delete your account; the anonymous signed-out counter holds no personal data
Push notification token (app): kept until you turn notifications off or uninstall the app
Crawl messages you posted (app): kept in the thread after you delete your account, but no longer attributed to you
Reports you file (app): kept as a moderation record, with your name removed if you delete your account
Pub claims, including the contact name and phone number: kept while the claim stands, and deleted with your account
Invites: if you joined from a friend's invite link, we keep a record that you did and whose link it was, until either of you deletes your account. It is used to count invites and is never shown to anybody
Pub price form, the contact name and email address sent with a pub's prices: kept as the record of where those prices came from, and deleted when you ask us to at the address below. The prices themselves stay on the map, with no name attached
All other data: permanently deleted within 30 days of account deletion

Your rights under GDPR

As an Irish/EU user you have the following rights regarding your personal data:

Right of access: you can request a copy of all data we hold about you
Right to rectification: you can correct inaccurate data via Settings
Right to erasure: you can delete your account and all data from Settings (on the website, the Danger Zone; in the app, the same Danger zone), or by email. pinpint.io/delete-account.html has every way
Right to restriction: you can ask us to stop processing your data
Right to portability: you can request your data in a machine-readable format
Right to object: you can object to processing based on legitimate interest

To exercise any of these rights, contact us at the details below. We will respond within 30 days as required by GDPR.

You also have the right to lodge a complaint with the Data Protection Commission Ireland at dataprotection.ie if you believe your data has been mishandled.

Cookies

PinPint uses the following cookies on this website. The mobile app does not use cookies.

Cookie	Purpose	Type
Supabase auth token	Keeps you logged in between sessions	Essential
pinpint-theme	Remembers your light/dark mode preference	Functional
pinpint-invite	If you open a friend's invite link, remembers their code for up to a week so you are connected when you sign up. It holds nothing about you	Functional

You can control non-essential cookies through your browser settings. PinPint sets no advertising cookies.

Contact us

For any privacy questions, data requests, or concerns, contact us:

PinPint Privacy

Email: danielhowley@outlook.ie
We aim to respond to all privacy requests within 30 days.
For urgent concerns or legal requests, please mark your email "URGENT: Privacy".

    Changes to this policy: We may update this privacy policy from time to time. When we do, we'll update the "Last updated" date at the top of this page. Continued use of PinPint after changes constitutes acceptance of the updated policy.
  