Pinned has no accounts and no server. Everything you record lives on your own device, which means most of what a privacy policy usually has to explain does not apply here.
Last updated 31 July 2026Every place you mark, every list you make and every note you write is stored in the app's own storage on your iPhone. It is covered by the device encryption iOS applies when your phone is locked. We have no copy of it and no way to request one.
If you delete the app, that data goes with it, unless you have turned on iCloud backup. There is no account for us to close and no deletion request to send, because there is no record of you to delete.
Automatic capture is off until you turn it on, and it can be turned off again at any time in Settings, or revoked entirely through the iOS Location permission.
When it is on, the app uses the standard low-power location services iOS provides and matches your position, on your phone, against the list of places bundled inside the app. What it keeps is the name of a city or airport. It does not keep coordinates, routes, timestamps of movement, or any form of GPS trace, and nothing about your location is transmitted anywhere.
One honest limit: if you force-quit Pinned, capture pauses until iOS restarts the app.
If you choose to build a map from your camera roll, the app reads the date and location stamps of your photos on the device in order to work out which places you have been. It does so only when you ask it to, and only with the Photos permission you grant.
No image is uploaded, copied into the app, or sent to us or to anyone else. The app keeps the place names it found and forgets the photos.
Backup is off by default. If you switch it on, the app writes a single file to your own private iCloud, under your Apple Account. It is a backup rather than a sync service: the most recent device to back up is the one that wins.
That file is governed by Apple's iCloud terms and privacy policy. We cannot see it, read it or reach it.
Head to Head pairs two phones in the same room, either by scanning a code on screen or over a direct iPhone-to-iPhone connection. There is no link, no invitation and no room code, because there is no server brokering it.
Before anything is sent, a consent screen lists the exact figures that will cross: a set of counts, ratios and extremes, together with the display name and photo you choose to show. Your place names, coordinates, dates, list contents and home location are never part of it. Places you have in common are worked out by comparing one-way fingerprints, so a place only ever surfaces when it is already on both maps.
Nothing from a session is kept once you close it, unless you tick the single option to save that result to your own device.
When you share a list, the app hands plain text to the iOS share sheet and you decide where it goes. Whatever you send travels through the app or service you pick, under that provider's terms. It does not pass through us.
None. Pinned contains no analytics framework, no advertising identifier, no crash reporter that transmits your content, no third-party SDK collecting behaviour, and no tracking across other apps or websites. We do not build a profile of you, because we hold nothing to build one from.
Pinned is a one-time purchase after a free trial period. The transaction is handled entirely by Apple through the App Store, under Apple's own privacy policy. We never see your payment details, and we receive no personal information from the purchase.
Pinned collects no personal information from anyone, of any age. There is no account to create and no content submitted to us, so there is nothing for us to gather from a child or from an adult.
Rules such as the GDPR and the CCPA give you rights to access, correct, export and erase the personal data a company holds about you. We hold none, so there is no request to make. In practice you already have all four: your data is on your device, you can edit it, you can export a list as plain text, and deleting the app erases it.
If the app ever gains a feature that sends something off your device, this page will say so plainly and in specific terms before that feature ships, and the date at the top will change. We will not quietly broaden it.