Pinjoy Privacy Policy

What Pinjoy Does

Pinjoy is a personal place library. You save restaurants, cafés, parks, hotels, museums, viewpoints and any other real-world places you want to remember — from Apple Maps, by searching nearby, or from a recommendation someone shared with you. You can add private notes, private ratings and private photos, organise places as Recommended, Planned or Visited, and share a place or a collection with someone else.

Pinjoy has no user account, no server of ours, no analytics service, no advertising service and no third-party tracking SDK. It is built entirely on Apple's own frameworks: SwiftUI, SwiftData, CloudKit, MapKit, Core Location, PhotoKit and the Keychain.

Data Collected by Igney

Igney receives no personal data through Pinjoy.

Pinjoy does not send your places, notes, ratings, photos, location or any other information to Igney. There is no Igney account to create, no Igney server that stores your library, and no way for us to see what you have saved.

There is one thing Igney does receive, and it does not come from the app: if you write to us, we get your email address and whatever you put in the message. See Support Correspondence below.

Where Your Data Lives

Everything you create in Pinjoy is stored on your device and, if you use iCloud, synced to your own private iCloud database. That covers:

• The places you save, and their names, addresses, coordinates and categories
• Your private notes and your private ratings
• Whether a place is Recommended, Planned or Visited, and when you visited it
• Photos you attach to a place ("memories")
• A reference to a Photos album you have linked to a place
• App preferences such as your sort, filter and grouping choices

iCloud Sync

If you are signed in to iCloud and have iCloud Drive enabled, Pinjoy syncs your library to your own private iCloud database so it appears on your other devices. This uses Apple's CloudKit in the private database of your personal iCloud account. Everything in the list above syncs this way, including the photos you attach to places.

Your private CloudKit database belongs to you. Igney operates no server that receives any of it and has no access to it through Pinjoy — there is no Igney account, no Igney key and no Igney console that could reach it. Your iCloud account itself is your relationship with Apple, governed by Apple's privacy policy rather than this one.

If you do not use iCloud, Pinjoy keeps everything on the device.

Location

Pinjoy asks for location access only while you are using the app, and only to search for places near you from the Add tab. Your location is used to run that search and to sort the results by distance.

When you search nearby, the search request goes to Apple through MapKit, because Apple Maps is what finds the places. That is Apple's processing under Apple's privacy policy, not ours — the search never passes through Igney and we receive nothing from it.

Pinjoy does not track you in the background, does not record a location history, does not keep your coordinates as a trail, and does not use location for advertising or analytics. You can decline location access and still use every other part of the app; nearby search is the one feature that stops working.

Photos

Pinjoy uses Apple Photos in two separate ways, both optional.

Photos you attach to a place. When you add a photo to a place, you pick it through Apple's photo picker. The picker runs outside the app and hands Pinjoy only the photo you chose, so this needs no access to your photo library at all. That photo is resized, stored with the place, and syncs through your private iCloud database like the rest of your library.

A Photos album you link to a place. You can link one album from your photo library to a place. Pinjoy stores only a reference to that album — its identifier and its title — never a copy of it. The photos themselves stay in Apple Photos and are read only to display them when you open the album inside Pinjoy. Pinjoy reads your photo library; it never adds to it, changes it or deletes from it.

This second feature is the only reason Pinjoy asks for photo library access, and it is the one feature that stops working if you decline. Pinjoy does not scan your photo library and does not read photos you have not pointed it at.

Saving from Apple Maps

Pinjoy installs a share extension so you can send a place to it from Apple Maps. When you do, the extension receives the place Apple Maps handed it — name, address, coordinates and similar public venue details — and writes it into a storage area shared between the extension and the app, so the app can pick it up the next time you open it. That area is inside Pinjoy's own sandbox on your device. Nothing in this step makes a network request or reaches Igney.

Sharing Places with Other People

When you share a place or a collection, Pinjoy creates a link containing only the public identity of the place: its name, address, coordinates, city, country, category and its Apple Maps link.

Your private notes, your private ratings, your photos, your linked albums, your visit status and your visit dates are never included in a shared link. The link goes wherever you send it — Messages, email, or anywhere else — and that is entirely your choice. The person who receives it, and the app you send it through, get exactly the place details listed above. No Igney server creates those links, stores them, or sees them opened.

Data Sharing

Igney does not share your Pinjoy data with anyone, because your library never reaches us — there is nothing for us to pass on, and no third party receives anything from us.

The sharing that does happen is sharing you start yourself, described in Sharing Places with Other People above. You choose the place or collection and you choose the recipient. Igney is not a recipient, and no Igney infrastructure is involved.

Data Sale

Pinjoy does not sell your data. Igney does not sell personal data.

Third-Party Services

Pinjoy contains no third-party frameworks of any kind — no analytics SDKs, no advertising SDKs, no crash-reporting services, no attribution or marketing SDKs. There are no third-party dependencies in the app at all.

The only external services involved are Apple's own, and only where you would expect them: iCloud/CloudKit for syncing your own library, MapKit for finding and opening places, and PhotoKit for the photos you choose. Your use of those is governed by Apple's privacy policy.

Security

Pinjoy relies on the protections the platform provides: the app sandbox, your device passcode and its encryption, and the security of your iCloud account. No app can promise that data is impossible to reach, and this one does not.

Support Correspondence

If you write to us — at privacy@igney.com or any other Igney address — we receive your email address, your name if you give one, and whatever you put in the message. We use it to answer you, to look into whatever you have raised, and to keep Pinjoy working properly. We do not add you to a mailing list and we do not use your message for marketing.

This is the only personal data Igney processes in connection with Pinjoy, and it reaches us because you chose to write, not because the app sent it. The legal basis is set out under Your Rights Under GDPR below.

You can ask us to delete your correspondence at any time by writing to privacy@igney.com.

Support correspondence is kept while it remains useful for handling your enquiry and any related follow-up, and is deleted when it is no longer needed for that purpose.

Our mail is hosted by Simply.com A/S in Denmark, under a data processing agreement that commits to processing within the EEA. Your message is not transferred outside the EEA.

Data Retention and Deletion

Igney holds none of your Pinjoy library, so there is none of it for us to retain or delete. Support correspondence is the exception and is covered in the section above.

On your device: deleting Pinjoy removes the app's data from that device.

In iCloud: deleting the app does not remove the copy already synced to your private iCloud database — that is your data in your account, and it will return if you reinstall Pinjoy on a device signed in to the same iCloud account. To remove it, delete the Pinjoy data for your iCloud account in Settings → [your name] → iCloud → Manage Account Storage, or delete your places inside the app before removing it.

Permissions: you can withdraw location or photo access at any time in Settings → Pinjoy.

Children's Privacy

Pinjoy is not directed at children under 13, and Igney does not knowingly collect personal data from children. Because Igney receives no personal data through Pinjoy, there is none collected from a child through the app either. If a child writes to us, that message is support correspondence and is handled as described above.

Changes to This Policy

If Pinjoy changes in a way that affects this policy, we will update this page and change the effective date at the top. Material changes — in particular, any future version that introduces an account or sends anything to an Igney server — will be described here before or when that version is released.

Your Rights Under GDPR

Igney ApS is a Danish company, so European data protection law applies to us.

Data controller

Igney ApS
CVR 46552334
Denmark
privacy@igney.com
igney.com

Legal basis for processing

Igney receives no personal data through Pinjoy, so there is no processing by Igney of anything the app holds, and nothing there that would need a legal basis. The data the app holds is on your own device and in your own iCloud account, under your control, and we have no access to it.

The one case where we do process personal data is if you contact us. If you send us an email, we process your email address and whatever you write in order to reply to you, to investigate the problem you have raised, and to keep Pinjoy reliable. The legal basis is our legitimate interest in doing those things (GDPR Article 6(1)(f)).

Retention: support correspondence is kept while it remains useful for handling your enquiry and any related follow-up, and is deleted when it is no longer needed for that purpose.

International data transfers

Pinjoy sends nothing to Igney, so the app creates no international transfer.

The one place the question arises is our support mailbox. Mail sent to privacy@igney.com — and to our other addresses — is hosted by Simply.com A/S, a Danish provider, under a signed data processing agreement whose geographic clause commits to processing within the EEA, and Simply.com confirms in writing that customer personal data is not transferred to third countries. So writing to us does not transfer your data outside the EEA, and there is no transfer safeguard to name because there is no third-country transfer.

Your use of iCloud and Apple Maps is your own relationship with Apple, and any transfers involved there are covered by Apple's privacy policy rather than by us.

Automated decision-making

Igney does not use your personal data for automated decision-making or profiling that produces legal effects or similarly significant effects for you. Pinjoy sorts, filters and groups your own places on your own device — by distance, by category, by city or country, by the status you gave them — and none of that reaches us or is seen by us.

Your rights

Under GDPR you have the right of access, rectification, erasure, restriction of processing, data portability, objection, and withdrawal of consent. Here is what each means in practice for Pinjoy:

• Access, rectification, erasure, restriction, portability — Igney holds none of your Pinjoy library, so as far as your places go there is nothing for us to give you, correct, erase or restrict. These rights do apply to any support correspondence you have sent us: write to privacy@igney.com and we will give you a copy of it or delete it. Your library itself is yours — you read and edit it in the app, and delete it by deleting your places or the app (see Data Retention and Deletion above for iCloud). Pinjoy has no export feature, so portability is not something the app performs for you.
• Objection — you can object to our processing of your support correspondence, which is the processing that relies on legitimate interests. In practice that means asking us to stop and to delete what you have sent, and we will. There is no other Igney processing of your personal data to object to.
• Withdrawal of consent — location and photo access are permissions you grant to the app, and you can withdraw either at any time in Settings → Pinjoy. Declining or withdrawing location affects only nearby search; declining photo access affects only linking an album. The rest of Pinjoy works either way.

Write to privacy@igney.com with any request and we will answer it.

Right to complain

If you believe your data protection rights have been breached, you can complain to the Danish supervisory authority:

Datatilsynet
Carl Jacobsens Vej 35
2500 Valby
Denmark
dt@datatilsynet.dk
+45 33 19 32 00
datatilsynet.dk

Contact

Questions about this privacy policy:

Email: privacy@igney.com
Website: igney.com