PinPilot — Privacy Policy

Last updated: September 2026

PinPilot ("we", "our", "the app") is a location organiser app developed by MCM-Apps. This privacy policy explains what data we collect, how we use it, and your rights.

What data we collect

Free version: PinPilot's free version stores all data locally on your device. We do not collect, transmit, or have access to any of your data when using the free version.

Pro version: When you upgrade to PinPilot Pro and sign in, the following data is stored securely in Google Firebase:

• Account information: your name, email address, and profile photo as provided by your Google or Apple sign-in. We do not store passwords.
• Location data: the destinations, folders, routes, notes, and web links you save in the app. This is data you explicitly enter — we do not track your real-time location or movement.
• Workspace membership: if you share a workspace, the names and email addresses of workspace members are visible to other members of that workspace.
• User code and contacts: each Pro account has a 6-digit user code so other PinPilot users can send you pins. Contacts you send to or receive from are saved to your account with their user code and the name you give them.
• Send & Receive transfers: when you send a pin or folder to another user, a copy of it is stored in Firebase so the recipient can collect it, along with your name, your user code and the delivery status.
• Shared links: when you generate a link or QR code for a pin, a copy of that pin is stored in Firebase so it can be viewed in a web browser. Shared links expire after 30 days and are then permanently deleted.

How we use your data

• To sync your saved locations across your devices.
• To enable workspace sharing with people you invite.
• To deliver pins and folders you choose to send to other PinPilot users.
• To display pins you choose to share by link or QR code.
• To authenticate your account.

We do not sell, rent, or share your data with any third parties. Your data is only shared with other people when you choose to share it, by inviting them to a workspace, sending them a pin or folder, or giving them a shared link. We do not use your data for advertising. We do not perform analytics or tracking.

Sharing with other people

Send & Receive: pins and folders are only sent to the user code you choose. The recipient can see the pin or folder, your name and your user code, and receives their own copy to keep. Once they have accepted it, their copy is theirs. Deleting the original from your account does not remove it from theirs.

Links and QR codes: anyone who has a shared link or QR code can view the shared pin's details, including its name, location, and any notes or web link it contains, without signing in or installing PinPilot. Only share links with people you trust with that information, and avoid sharing pins that contain private details such as a home address. Shared links expire 30 days after they are created, at which point the link stops working and the shared copy of the pin is permanently deleted.

Third-party services

PinPilot uses the following third-party services:

• Google Firebase (Authentication, Cloud Firestore and Cloud Functions) — to securely store your account and location data, deliver Send & Receive transfers, and host shared links. Firebase Privacy Policy
• Google Maps links — when you paste a short Google Maps link (such as maps.app.goo.gl/…), it is sent to our Firebase Cloud Function, which contacts Google to find the location the link points to. Only the link is sent; no personal data is included. Google Privacy Policy
• OpenStreetMap — to display map tiles. No personal data is sent. OSM Privacy Policy
• Nominatim (OpenStreetMap) — to search for addresses and postcodes. Search queries are sent but no personal data is included. Nominatim Usage Policy
• OSRM — to calculate route distances and directions. Coordinates are sent but no personal data. OSRM Project

GPS and location permissions

PinPilot requests access to your device's GPS to show your current location on the map when you tap the location button. This is used solely to centre the map on your position. Your real-time location is never stored, transmitted, or shared.

Data storage and security

Pro user data is stored in Google Cloud Firestore, hosted in the europe-west2 (London) region. Data is encrypted in transit and at rest. Access is restricted to authenticated users who are members of the relevant workspace.

Data retention and deletion

Your data is retained for as long as your account is active. You can delete individual destinations, folders, routes or contacts at any time within the app. Shared links, and the copy of the pin stored for them, are automatically deleted 30 days after they are created. You can export all your data as a JSON backup at any time. To request complete deletion of your account and all associated data, contact us at the email below.

Our website

The PinPilot website loads fonts from Google Fonts, which means your browser connects to Google's servers and shares your IP address with Google when you visit. The website does not use cookies, analytics, or advertising trackers. Google Privacy Policy

Children's privacy

PinPilot is not directed at children under the age of 13. We do not knowingly collect data from children.

Your rights

Under UK GDPR, you have the right to access, correct, or delete your personal data. You can exercise these rights within the app (export, edit, or delete your data) or by contacting us.

Changes to this policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated date.

Contact

If you have questions about this privacy policy or your data, contact us at:
pinpilot@mcm-app.com