Privacy Policy

Your account: your name, your email address and your password, which our sign-in provider stores only as a secure hash. If you sign in with Google, Google gives us your name, your email address, a link to your profile picture and your Google account ID. You can also add a phone number to your profile.

What you do in groups: the groups you create, join or ask to join, and your role in them; invitations, including who invited you; the games you sign up for, leave or play, your place on a waitlist and whether you came; polls and your votes; and what you post in chats (messages, replies, reactions, files and mentions), with when you read them.

Money records: the charges, payments, credit and refunds that a group's admins record for you in their group's ledger, with any notes they add. Payments themselves happen outside Pinnie, so we never see your bank or card details.

Places: the locations groups save, with their map pins, and what you type when you search for a place.

Your choices: which emails you want, your theme and colour, and similar settings.

Technical information: your internet (IP) address, your browser and device type and the pages you open, which our hosting providers log to run and protect Pinnie, and reports of errors your browser runs into, so we can fix them. When you search for a place, we use an approximate location worked out from your IP address, or your device's location if you've allowed it, to list nearby places first; we don't keep it with your account.

Your device: we use cookies to keep you signed in and to remember choices like your theme and the tours you've seen, and your browser's storage to keep a copy of your data for speed and offline use, and drafts of messages you haven't sent. We don't use advertising or tracking cookies.

To run Pinnie: to create your account, sign you in, show you your groups, games, chats and balances, and send the emails and calendar invitations you've asked for.

To keep Pinnie safe: to block spam and abuse (including an automatic check, when you sign up or sign in, that you're a person and not a bot), to look into problems and to enforce our Terms of Service.

To fix and improve Pinnie: to find and fix errors and understand how Pinnie is used.

To meet our legal obligations.

We don't sell your information, use it for advertising or share it with advertisers.

People in your groups: members see your name, that you're in the group, the games you've signed up for and what you post in the group's chat. A group's admins also see your email address and, if you added one, your phone number; your balance and payment records in their group; and the group's log of what changed and who changed it. Moderators see members' names, roles and statuses, but not their email addresses. A group's admins and moderators can see who has read the chat's messages.

People you invite, and visitors: a game invitation link shows the game, its group and the name of the person who sent it. Anyone can see a public group's name, area and sport, and how many people have signed up for its upcoming games, but not who.

Pinnie's staff: the few people who run Pinnie can see account and group information to help you, keep Pinnie safe and fix problems. They can't read group chats through Pinnie.

The providers that run Pinnie for us, only for that purpose and under agreements to protect it: Supabase stores our database, sign-ins and files, in Canada; Vercel hosts the Pinnie website; Resend delivers our emails and receives the email you send us; Cloudflare Turnstile checks that sign-ups and sign-ins come from people; Sentry receives error reports (what failed, the page's address, and your browser and device type), tied to your Pinnie account ID but not your name, email address or IP address; Google signs you in if you choose it; komoot's Photon place search receives what you type in a place search, with an approximate location; and OpenFreeMap serves the map images your browser shows.

Some of these providers work outside Canada, mostly in the United States, so your information may be stored or processed there and be subject to the laws of those countries.

The law: we may disclose information when the law requires it, such as for a court order, or when it's needed to protect someone's safety.

If Pinnie is ever sold or merged, your information may pass to the new owner, who must keep protecting it as this policy says.

Your account information, for as long as you have an account.

Chat messages and files, for one year after they're posted, then they're deleted. A file goes with its message when the message is removed, and a file that was never sent is deleted after a day.

Things you or your group delete, like a location or a membership, for 30 days in case they need restoring, then they're erased.

Records of the emails we've sent you, for 30 days.

Money records: a group's ledger is its lasting record of who paid what, so its entries are never changed or deleted, even after you leave the group.

Error reports and our providers' logs, for a limited time, then they're deleted.

See and correct: you can see and change your name, phone number and email choices in Account. You can also ask us for a copy of the information we hold about you, or to correct it, by writing to support@pinnie.app; we'll answer within 30 days.

Emails: turn any kind of email off in Account, under Notifications, or with the link in each email. Account emails, like sign-in codes, still come.

Delete your account: write to support@pinnie.app. We'll delete your account and the information that goes with it, except money records a group still needs, which keep your name for that group's records. Messages you posted in a group's chat stay there, marked as from a former member, until they expire.

Withdraw your consent: you can stop using Pinnie at any time and ask us to delete your account. Some features can't work without some information, such as your email address to sign you in.

Complaints: if you're not happy with how we've handled your information, you can complain to the Office of the Privacy Commissioner of Canada or to the Office of the Information and Privacy Commissioner of Alberta.

Your information is encrypted when it's sent and when it's stored, and rules in our database let people see only what their groups allow. Passwords are stored only as secure hashes, and only a few people at Pinnie can reach the systems that hold your information.

No system is perfectly secure. If a breach of your information creates a real risk of significant harm to you, we'll tell you and the Privacy Commissioner of Canada, as the law requires.

Pinnie is for people 18 and older. We don't knowingly collect information about anyone younger. If you think we have, write to us and we'll delete it.

We'll update this policy when what we do with your information changes. Before an important change applies, we'll tell you in Pinnie or by email, and ask you to agree to it the next time you use Pinnie.

Pinnie's privacy officer answers questions and requests about your information: write to support@pinnie.app, or by mail to Pinnie, Attention: Privacy Officer, 1721 29th Ave SW, Studio 415, Calgary, Alberta T2T 6T7, Canada.