1. The short version

We collect what we need to run Pinnofy: your account details, what you post, how you interact with the app, and the payment information our providers need. We use it to show you a feed that works, to keep people safe, to pay creators, and to keep the service running.

We do not sell your personal data. Your direct messages are end-to-end encrypted. You can export your data, change your privacy settings, and delete your account from Settings.

2. Information you give us

• Account details: name, email address, username, password (stored hashed by our authentication service), and date of birth so we can apply age rules.
• Profile details: profile photo, cover photo, display name, bio, links, and any interests you pick during onboarding.
• Content you create: polls and their options and images, posts and media, comments and replies, stories including sticker answers, Spotlight clips, live streams, and your votes.
• Messages: the encrypted content of your direct messages, plus attachments and the metadata needed to deliver them, such as who is in a conversation and when a message was sent or read.
• Support and safety data: support tickets, reports, appeals, and copyright notices you file, including the contact details in a copyright notice.
• Payment details: handled directly by our payment providers. We receive confirmation of a payment, a subscription or a payout, and identifiers such as a customer or account id, but not your full card number.

3. Information created as you use Pinnofy

• Activity: polls and posts you vote on or view, reactions, saving, sharing, reposting, follows, blocks and mutes, search terms, and which parts of the app you open.
• Device and technical data: device type, browser or app version, operating system, language, approximate location derived from an IP address unless you turn location features off, and error or crash reports.
• Sign-in and security data: login events with device and approximate location, used to spot suspicious access and keep your account safe.
• Storage on your device: a session token so you stay signed in, your theme and language choices, and small local caches that make the app faster.

4. How we use your information

• to provide the service, including your feed, notifications, messages, calls, stories, live features, and profiles
• to personalise your feed, recommendations and taste profile, and to rank trending and Spotlight content
• to keep the service safe, including detecting spam, scams, fake accounts, vote manipulation and policy violations
• to send notifications you asked for, and service messages such as security alerts and receipts
• to process payments, tips, subscriptions, advertising funds, and creator payouts
• to answer support requests, appeals and legal notices
• to measure how the app is used so we can fix and improve it
• to meet legal, tax and accounting obligations, and to enforce our Terms

5. Automated checks and artificial intelligence

We use automated systems, including third party AI models, to screen text and images for content that may break our rules. A screen that flags content can stop a post from publishing, or hide reported content while a person reviews it.

We use automated systems to detect spam, fake accounts, vote manipulation, duplicate media and abusive messaging patterns. Automated systems can make mistakes. You can appeal any moderation decision through the Appeals page, and a person reviews that appeal. We do not permanently close an account on an automated decision alone.

Some features use AI to generate suggestions, rankings or summaries. Those outputs are estimates and should not be treated as advice.

6. What we share

• With other people using Pinnofy, according to the visibility you choose. Your username, display name, profile photo, bio, follower counts, and your public content are visible to others. Your votes are shown on polls you vote on unless a poll is anonymous; your messages, email address and date of birth are not shown to other users.
• With service providers who process data for us: our hosting, database and authentication platform, our payment providers (Stripe and Base44 Payments / Wix Payments) for purchases, tips, subscriptions and payouts, our email delivery service, our music metadata provider for story music, and our GIF search provider.
• With authorities or other parties where we are legally required to, where we need to in order to protect someone from serious harm, or to establish or defend legal claims. We aim to be transparent about legal requests, and to give notice where we are allowed to.
• With a buyer or successor if the service, or part of it, is sold or merged. Your data would remain subject to this policy unless you are told otherwise.
• We do not sell your personal data, and we do not share it with third party advertising networks. Ads on Pinnofy are served from our own systems using data we hold.

7. Direct messages and calls

Direct messages are encrypted on your device before they are sent, and stored in encrypted form. The keys that let your account read your own chats are stored in your account so that every device you sign in from can decrypt them. Other users cannot read your messages, and in normal operation we cannot read their content.

We hold the metadata needed to deliver messages and keep the service working: who is in a conversation, group membership, who sent a message and when, whether it was read, attachments, and call records showing who called whom and whether the call connected. Calls themselves are not recorded.

8. Cookies and local storage

We use cookies and local storage for signing you in and keeping your session valid, remembering your settings such as theme and language, and caching data so screens load quickly. A cookie consent banner lets you choose, and you can clear this data from your browser at any time.

Blocking session storage will sign you out. We do not use third party advertising cookies or cross-site tracking pixels.

9. How long we keep information

• Account and profile data: while your account is open, then removed or anonymised when you delete your account.
• Content: while it is posted. Stories expire after 24 hours and move to your private archive, and deleted content is removed from the service within about 30 days, apart from copies already shared or cached elsewhere.
• Messages: while you keep them, and while the conversation exists.
• Financial records: payments, tips, subscriptions, payouts and invoices are kept for around 7 years to meet tax and accounting rules.
• Safety records: reports, appeals, enforcement decisions and copyright notices are kept so we can handle repeats and counter-notices.
• Security and technical logs: kept for a limited period for fraud prevention and troubleshooting.

10. Your choices and your rights

• Access and export: download your data from Settings, under Account, and export the information you have created.
• Deletion: delete your account from Settings, under Account. There is a short grace period before deletion completes.
• Correction: edit your profile and settings at any time, and report anything you cannot fix with the Help and Support form.
• Personalisation: turn personalised recommendations and personalised ads on or off in Settings, and reset your taste profile.
• Notifications: choose which notifications you get, and whether they arrive by email or push.
• Sharing: control who can see posts, polls and stories, keep stories to Close Friends, block or mute accounts, and hide content you do not want to see.
• Do not sell or share: we do not sell personal data. The "Do Not Sell My Info" page records your choice for advertising and analytics purposes.
• Depending on where you live, you may also have rights to object to processing, restrict processing, port your data, and complain to a data protection authority. Contact us through Help and Support to exercise any right, and we will verify your identity before acting.

11. Children

Pinnofy is not for children under 13, and we do not knowingly collect personal data from them. Where local law sets a higher age for social services, such as 16 in parts of the EEA, we apply that age, and younger users need parental consent where required.

If we learn that a child below the applicable age gave us personal data, we delete the account and the data. A parent or guardian can report this through Help and Support.

12. How we protect your data

Traffic to Pinnofy is encrypted in transit, and direct messages are end-to-end encrypted. Access to production data is limited to the accounts that need it, database rules restrict which records each signed-in person can read or write, and sensitive operations such as payouts and moderation require elevated permissions.

We use rate limiting, image and text screening, duplicate-media detection, and login monitoring to reduce abuse. No system is perfectly secure. If we become aware of a breach affecting your personal data, we will notify you and the relevant authorities as required by law.

13. Where your data is processed

Pinnofy is a global service and our providers run infrastructure in several countries, so your data may be processed outside the country you live in. Where data moves across borders we rely on appropriate safeguards, such as standard contractual clauses with our providers.

14. Other sites and services

Pinnofy contains links to other sites, advertiser pages and embedded content. Those services have their own privacy policies, and we are not responsible for how they handle your data. Connecting a third party service from Settings or Settings is done under that provider's terms.

15. Changes and how to contact us

We may update this policy as the app changes or as the law changes. When a change is material we will announce it in the app and update the date at the top of this page.

For any privacy question, request or complaint, use the Contact Support form, or write to us through the Help Centre. If you are asking about your own data, sign in first so we can match the request to your account.