Pinjoy Privacy Policy

What Pinjoy Does

Pinjoy is a personal place library. You save restaurants, cafés, parks, hotels, museums, viewpoints and any other real-world places you want to remember — from Apple Maps, by searching nearby, or from a recommendation someone shared with you. You can add private notes, private ratings and private photos, organise places as Recommended, Planned or Visited, and share a place or a collection with someone else.

Pinjoy has no user account, no server of ours, no analytics service, no advertising service and no third-party tracking SDK. It is built entirely on Apple's own frameworks: SwiftUI, SwiftData, CloudKit, MapKit, Core Location, PhotoKit and the Keychain.

Data Collected by Igney

Igney receives no personal data through Pinjoy.

Pinjoy does not send your places, notes, ratings, photos, location or any other information to Igney. There is no Igney account to create, no Igney server that stores your library, and no way for us to see what you have saved.

There is one thing Igney does receive, and it does not come from the app: if you write to us, we get your email address and whatever you put in the message. See Support Correspondence below.

Where Your Data Lives

Everything you create in Pinjoy is stored on your device and, if you use iCloud, synced to your own private iCloud database. That covers:

• The places you save, and their names, addresses, coordinates and categories
• Your private notes and your private ratings
• Whether a place is Recommended, Planned or Visited, and when you visited it
• Photos you attach to a place ("memories")
• A reference to a Photos album you have linked to a place
• App preferences such as your sort, filter and grouping choices

iCloud Sync

If you are signed in to iCloud and have iCloud Drive enabled, Pinjoy syncs your library to your own private iCloud database so it appears on your other devices. This uses Apple's CloudKit in the private database of your personal iCloud account. Everything in the list above syncs this way, including the photos you attach to places.

Your private CloudKit database belongs to you. Igney operates no server that receives any of it and has no access to it through Pinjoy — there is no Igney account, no Igney key and no Igney console that could reach it. Your iCloud account itself is your relationship with Apple, governed by Apple's privacy policy rather than this one.

If you do not use iCloud, Pinjoy keeps everything on the device.

Location

Pinjoy asks for location access only while you are using the app, and only to search for places near you from the Add tab. Your location is used to run that search and to sort the results by distance.

When you search nearby, the search request goes to Apple through MapKit, because Apple Maps is what finds the places. That is Apple's processing under Apple's privacy policy, not ours — the search never passes through Igney and we receive nothing from it.

Pinjoy does not track you in the background, does not record a location history, does not keep your coordinates as a trail, and does not use location for advertising or analytics. You can decline location access and still use every other part of the app; nearby search is the one feature that stops working.

Photos

Pinjoy uses Apple Photos in two separate ways, both optional.

Photos you attach to a place. When you add a photo to a place, you pick it through Apple's photo picker. The picker runs outside the app and hands Pinjoy only the photo you chose, so this needs no access to your photo library at all. That photo is resized, stored with the place, and syncs through your private iCloud database like the rest of your library.

A photo you take in Pinjoy. You can also take a photo for a place with the camera, which asks for camera permission the first time. The shot is resized and stored with the place exactly like a picked photo — it is not added to your Apple Photos library, and like everything else it never reaches Igney.

A Photos album you link to a place. You can link one album from your photo library to a place. Pinjoy stores only a reference to that album — its identifier and its title — never a copy of it. The photos themselves stay in Apple Photos and are read only to display them when you open the album inside Pinjoy.

These are the only two reasons Pinjoy asks to read your photo library, and linking an album is the one feature that stops working if you decline. Pinjoy does not scan your photo library and does not read photos you have not pointed it at.

Saving a Studio collage or slideshow (see Studio below) asks separately for permission to add to your photo library. That is a different, narrower permission: it lets Pinjoy deposit the file you asked it to save, and grants no ability to read anything already there.

Studio

Studio turns places you have saved into a collage or a slideshow video.

Everything is made on your device. Pinjoy reads the places and photos already in your own library, draws them into an image or encodes them into a video locally, and writes the result to a file inside its own sandbox — not a shared or synced location, and excluded from iCloud/device backup. No part of this reaches Igney, and no network request is made at any point.

What happens to the result is entirely your choice:

• Save to Photos puts the file in your own photo library, using the add-only permission described above.
• Share hands the file to Apple's standard share sheet. From there you choose the destination yourself — Instagram, TikTok, Facebook, Messages, AirDrop, or anywhere else installed on your device. Pinjoy has no account with any of those services, contains no code from them, and learns nothing about where you sent it or whether you sent it at all.

Building and previewing a collage or slideshow is free. Saving and sharing the result are part of Pinjoy Plus (see Pinjoy Plus below). Exports stay on your device — Pinjoy keeps the 3 most recent collages and 3 most recent slideshows so you can reopen, re-save, or re-share one later from the Studio picker's Recent row, and older ones are removed automatically as new ones are made. You can delete a kept export yourself at any time from that row.

Pinjoy Plus

Pinjoy Plus is a one-time in-app purchase that unlocks up to 20 photos on each place (instead of 5) and the saving and sharing of Studio collages and slideshows.

The purchase is made through Apple's App Store, on your Apple Account. Igney never sees your payment details — Apple handles the payment and keeps the record of it, and Apple's privacy policy governs that transaction. Pinjoy checks whether you own Pinjoy Plus by asking the App Store on your device; nothing about the purchase is stored in your library, sent to Igney, or synced anywhere by Pinjoy, and the App Store restores it on any device signed in to the same Apple Account.

If you stop owning Pinjoy Plus (a refund, say), the photos you already added stay exactly where they are — you simply can't add more than five to a place until it is restored.

Saving from Apple Maps

Pinjoy installs a share extension so you can send a place to it from Apple Maps. When you do, the extension receives the place Apple Maps handed it — name, address, coordinates and similar public venue details — and writes it into a storage area shared between the extension and the app, so the app can pick it up the next time you open it. That area is inside Pinjoy's own sandbox on your device. Nothing in this step makes a network request or reaches Igney.

Sharing Places with Other People

When you share a place or a collection, Pinjoy creates a link containing only the public identity of the place: its name, address, coordinates, city, country, category and its Apple Maps link.

Your private notes, your private ratings, your photos, your linked albums, your visit status and your visit dates are never included in a shared link. The link goes wherever you send it — Messages, email, or anywhere else — and that is entirely your choice. The person who receives it, and the app you send it through, get exactly the place details listed above. No Igney server creates those links, stores them, or sees them opened.

Data Sharing

Igney does not share your Pinjoy data with anyone, because your library never reaches us — there is nothing for us to pass on, and no third party receives anything from us.

The sharing that does happen is sharing you start yourself, described in Sharing Places with Other People above. You choose the place or collection and you choose the recipient. Igney is not a recipient, and no Igney infrastructure is involved.

Data Sale

Pinjoy does not sell your data. Igney does not sell personal data.

Third-Party Services

Pinjoy contains no third-party frameworks of any kind — no analytics SDKs, no advertising SDKs, no crash-reporting services, no attribution or marketing SDKs. There are no third-party dependencies in the app at all.

The only external services involved are Apple's own, and only where you would expect them: iCloud/CloudKit for syncing your own library, MapKit for finding and opening places, PhotoKit for the photos you choose, and the App Store for the Pinjoy Plus purchase. Your use of those is governed by Apple's privacy policy.

Security

Pinjoy relies on the protections the platform provides: the app sandbox, your device passcode and its encryption, and the security of your iCloud account. No app can promise that data is impossible to reach, and this one does not.

Support Correspondence

If you write to us — at privacy@igney.com or any other Igney address — we receive your email address, your name if you give one, and whatever you put in the message. We use it to answer you, to look into whatever you have raised, and to keep Pinjoy working properly. We do not add you to a mailing list and we do not use your message for marketing.

This is the only personal data Igney processes in connection with Pinjoy, and it reaches us because you chose to write, not because the app sent it. The legal basis is set out under Your Rights Under GDPR below.

You can ask us to delete your correspondence at any time by writing to privacy@igney.com.

Support correspondence is kept while it remains useful for handling your enquiry and any related follow-up, and is deleted when it is no longer needed for that purpose.

Our mail is hosted by Simply.com A/S in Denmark, under a data processing agreement that commits to processing within the EEA. Your message is not transferred outside the EEA.

Data Retention and Deletion

Igney holds none of your Pinjoy library, so there is none of it for us to retain or delete. Support correspondence is the exception and is covered in the section above.

On your device: deleting Pinjoy removes the app's data from that device.

In iCloud: deleting the app does not remove the copy already synced to your private iCloud database — that is your data in your account, and it will return if you reinstall Pinjoy on a device signed in to the same iCloud account. To remove it, delete the Pinjoy data for your iCloud account in Settings → [your name] → iCloud → Manage Account Storage, or delete your places inside the app before removing it.

Permissions: you can withdraw location or photo access at any time in Settings → Pinjoy.

Children's Privacy

Pinjoy is not directed at children under 13, and Igney does not knowingly collect personal data from children. Because Igney receives no personal data through Pinjoy, there is none collected from a child through the app either. If a child writes to us, that message is support correspondence and is handled as described above.

Changes to This Policy

If Pinjoy changes in a way that affects this policy, we will update this page and change the effective date at the top. Material changes — in particular, any future version that introduces an account or sends anything to an Igney server — will be described here before or when that version is released.

Your Rights Under GDPR

Igney ApS is a Danish company, so European data protection law applies to us.

Data controller

Igney ApS
CVR 46552334
Denmark
privacy@igney.com
igney.com

Legal basis for processing

Igney receives no personal data through Pinjoy, so there is no processing by Igney of anything the app holds, and nothing there that would need a legal basis. The data the app holds is on your own device and in your own iCloud account, under your control, and we have no access to it.

The one case where we do process personal data is if you contact us. If you send us an email, we process your email address and whatever you write in order to reply to you, to investigate the problem you have raised, and to keep Pinjoy reliable. The legal basis is our legitimate interest in doing those things (GDPR Article 6(1)(f)).

Retention: support correspondence is kept while it remains useful for handling your enquiry and any related follow-up, and is deleted when it is no longer needed for that purpose.

International data transfers

Pinjoy sends nothing to Igney, so the app creates no international transfer.

The one place the question arises is our support mailbox. Mail sent to privacy@igney.com — and to our other addresses — is hosted by Simply.com A/S, a Danish provider, under a signed data processing agreement whose geographic clause commits to processing within the EEA, and Simply.com confirms in writing that customer personal data is not transferred to third countries. So writing to us does not transfer your data outside the EEA, and there is no transfer safeguard to name because there is no third-country transfer.

Your use of iCloud and Apple Maps is your own relationship with Apple, and any transfers involved there are covered by Apple's privacy policy rather than by us.

Automated decision-making

Igney does not use your personal data for automated decision-making or profiling that produces legal effects or similarly significant effects for you. Pinjoy sorts, filters and groups your own places on your own device — by distance, by category, by city or country, by the status you gave them — and none of that reaches us or is seen by us.

Your rights

Under GDPR you have the right of access, rectification, erasure, restriction of processing, data portability, objection, and withdrawal of consent. Here is what each means in practice for Pinjoy:

• Access, rectification, erasure, restriction, portability — Igney holds none of your Pinjoy library, so as far as your places go there is nothing for us to give you, correct, erase or restrict. These rights do apply to any support correspondence you have sent us: write to privacy@igney.com and we will give you a copy of it or delete it. Your library itself is yours — you read and edit it in the app, and delete it by deleting your places or the app (see Data Retention and Deletion above for iCloud). Portability is not something Igney performs for you, because Igney holds nothing to port; what the app itself can produce from your library is a shared place link (Sharing Places with Other People) and a Studio collage or slideshow (Studio), both created on your device and sent only where you send them.
• Objection — you can object to our processing of your support correspondence, which is the processing that relies on legitimate interests. In practice that means asking us to stop and to delete what you have sent, and we will. There is no other Igney processing of your personal data to object to.
• Withdrawal of consent — location and photo access are permissions you grant to the app, and you can withdraw either at any time in Settings → Pinjoy. Declining or withdrawing location affects only nearby search; declining photo reading affects only linking an album; declining photo adding affects only saving a Studio collage or slideshow to your library, and you can still share it instead. The rest of Pinjoy works either way.

Write to privacy@igney.com with any request and we will answer it.

Right to complain

If you believe your data protection rights have been breached, you can complain to the Danish supervisory authority:

Datatilsynet
Carl Jacobsens Vej 35
2500 Valby
Denmark
dt@datatilsynet.dk
+45 33 19 32 00
datatilsynet.dk

Contact

Questions about this privacy policy:

Email: privacy@igney.com
Website: igney.com