Privacy policy
Last updated: 13 October 2026
Pinfolk helps people find plans on a map, join them and meet in person. This policy explains what we collect, why, who we share it with and the choices you have. It applies to the Pinfolk app and this website, including the printed posters you can order from them.
Who we are
Pinfolk is run by Caminocabs Limited, a company registered in Ireland (company number 806705) with its registered office at Prospect Hill, Finglas, Dublin, Ireland (“we”, “us”). We are the data controller for your personal data. Contact us about privacy at hello@pinfolkapp.com.
What we collect
Your account
- Your email address and, if you sign in with Google or Apple, your Google or Apple account identifier and name. If you choose to hide your email with Apple, we receive an Apple relay address instead.
- Your profile: username, display name, photo, bio, link, interests and, if you add it, gender.
- Your year of birth, to confirm you are 18 or older.
What you create
- Plans you host, dates, the places and routes you attach to them, and your RSVPs.
- Posts, stories, photos, videos, comments, likes, reposts and mentions.
- Messages and voice notes in direct messages, groups and plan chats.
- Notes, places and meeting points you add to a group’s map.
Location
- Map and nearby plans: your device’s location while you use the app, to show what is around you. You can use the app without it by choosing an area.
- Approximate area, without asking: if you haven’t shared your device’s location, maps start in the area of the plans you joined or host, or of your groups, or else around the approximate city of your internet connection, which our hosting provider (Vercel) works out from your IP address. That city is also used to show nearby posts and plans first. We don’t store it on our servers or add it to your profile, and our analytics may record the country but never the coordinates. The app keeps it on your phone for a day, and the app and this website remember the last area you looked at on the map on your device.
- Check-in: your distance to the meeting point when you tap “I’m here”.
- Live activity and tracking: only when you start recording a plan’s activity. Your route is saved to your activity and, if you choose, shared with the people on that plan while it is live.
- Sharing with a group: only when you turn it on, only with the group you pick, and only for the time you choose. It may keep running with your phone locked until that time ends or you stop it.
- Location tagged on posts or stories, if you add it.
- Travel stats (“Your world”): only places you have actually been. When you check in at a stop of an itinerary (“Start the route”), your device’s location is used once to confirm you are there, and we save the stop’s location, not your phone’s. Posts with a photo or video and a location count too. From these we work out the country, the city (named on your phone with Mapbox), the distance between stops and the itineraries you complete.
People and safety
- Who you follow, your groups, and who you block.
- Reports you make and reports about you.
Purchases and subscriptions
- If you subscribe to Pinfolk Plus or Pinfolk Host, you pay the App Store or Google Play. We never see your card or payment details. The store and RevenueCat (see Service providers) send us the state of your subscription, linked to your Pinfolk account ID: the plan and product, the store, when it was bought, when it renews or ends, whether it will renew, any billing problem, refund or offer used, the country of the purchase and whether it was a test purchase.
- If the Pinfolk team gives you a plan as a gift, we record the plan, its dates and the reason.
- How many 1080p video exports you have used this month, for the monthly export included with free accounts.
Printed posters
- Your design: the style, format and size you choose, the countries, cities and places on it (from your travels or added only for the poster), your notes, titles and other text, and, if you add a signature, your name, your @username, your profile photo and a QR code that leads to your profile. Places and countries you add only for a poster stay on the poster and never change your travel stats. Designs you save are kept on our servers; a draft you haven’t saved stays on your phone. To show you a preview, our website draws the design.
- When you pay: you pay on Stripe’s checkout page (see Service providers), where you enter your card, the shipping name and address, a phone number and an email; we fill in your Pinfolk email to save you typing it. We never see your card details. Stripe sends us the shipping name, address, phone number and email, which we keep with your order.
- If it’s a gift: the recipient’s name, your message and, if you add it, the recipient’s email. The shipping address you enter on Stripe’s page is then theirs.
- Your order: the product, the price, the state of the payment (accepted, charged, released or refunded) and of the order, its dates, Stripe’s and Printify’s reference numbers, the carrier, tracking number and tracking link, and the print file we make from your design.
If someone sends you a poster
If someone orders a poster for you, they give us your name and address (on Stripe’s page) and may give us your email and a message for you. We use them only to make and deliver the poster and, if they gave us your email, to tell you once that it’s on its way, without the price. Printify, its print facility and the carrier receive your name and address, and the phone number given at checkout, to deliver it. We delete them on the same timeline as the buyer’s (see How long we keep it). You can ask us about them or exercise your rights at hello@pinfolkapp.com.
Device and usage
- A push notification token for your device, if you allow notifications.
- App usage events (for example, screens opened) to understand what works, and crash reports to fix bugs (Sentry: the error, your device model and system, the app version and your Pinfolk account ID). These do not include your email, your messages or your location. You can turn both off in Settings.
- Security check: when you sign in or create an account, a Cloudflare Turnstile check may run to stop automated sign-ups. Cloudflare processes your IP address and technical information about your browser or device for this check.
- On this website: we count page visits and taps on buttons such as “Get the app”, with the same analytics provider as the app (PostHog), to learn which shared links bring people to Pinfolk. The website’s analytics use no cookies and store nothing on your device, so each visit is counted on its own and is not linked to your next one. They never include your email, your name or the private codes in invite links. If you are signed in, events carry your Pinfolk account ID. If your browser sends Do Not Track or Global Privacy Control, the website doesn’t load analytics at all.
Why we use it
| Purpose | Legal basis |
|---|---|
| Run your account and the features you use (plans, map, groups, messages, posts, travel stats). | Contract |
| Provide Pinfolk Plus or Host if you subscribe, show your plan and answer questions about it (see Subscription terms). | Contract |
| Make, ship and deliver a poster you order, take the payment, let you cancel it in the first 30 minutes, keep you updated by email about your order and deal with problems and refunds (see Terms of sale). | Contract |
| Tell the recipient of a poster gift, if you give us their email, that it’s on its way. | Legitimate interests — yours in letting them know, and theirs in expecting the delivery |
| Keep records of poster sales and payments, as accounting and tax law requires. | Legal obligation |
| Share your live location with a group or a plan, and send push notifications. | Consent — you can stop at any time |
| Keep people safe: verify age, handle reports, block abuse and fraud. | Legitimate interests and legal obligations |
| Understand usage and fix crashes, with minimised data. | Legitimate interests |
| Send a welcome email, tips about using Pinfolk and the weekly email (see “Emails we send”). | Legitimate interests — you can unsubscribe at any time |
| Comply with the law and respond to lawful requests. | Legal obligation |
We do not sell your personal data and we do not use it for third‑party advertising.
Emails we send
Service emails are part of running your account: sign-in links and codes, important notices about your account and, unless you turn them off in Settings → Security, alerts when your account is signed in on a new device. Tips and updates help you get started, for example a welcome email after you join and a note with your plan’s link when you publish your first plan. The weekly email (“Weekly digest” in Settings → Notifications) arrives at most once a week, on Thursdays, and never in your first week. When there is something new for you, it is a digest: new public plans near the area of the plans you have joined or hosted, or of the public groups and communities you belong to (never your live or shared location), featured public itineraries, and how much activity there was in your groups and communities, as numbers next to each group’s name, never message text, other members’ names or places. When there is nothing new, it is a tip on using Pinfolk instead, and some weeks we send nothing. Every one of these emails has an Unsubscribe link that works without signing in (in the weekly email it turns off only the weekly email), and you can turn these emails on or off at any time in Settings → Notifications, in the app or on this website. Unsubscribing does not stop service emails. If you order a poster, the emails about that order (confirmation, shipping with tracking, and a note if it’s cancelled or the payment or preparation fails) are service emails too; if you add the recipient’s email to a gift, we send them one email when the poster ships, without the price. Emails go out in the language you use the app in, through Brevo (see Service providers). Our email provider records whether an email was opened and whether a link in it was clicked, so we can see which emails are useful.
Who can see what
- Your username, display name and photo are visible to other Pinfolk users. With a private account, only approved followers see your posts.
- Public plans, and who is going when the host shows attendees, are visible to other users. The exact meeting point of a plan is shown to people who join.
- Group content is visible to the group’s members. Your live location is visible only to the audience you chose, while sharing is on.
- Your world (travel stats): people who can see your profile see the countries you have visited, your cities on the map at an approximate point (to within about 10 km) and your totals (countries, cities, places, kilometres, continents and completed itineraries). Never the exact places or the dates: only you see those. If your account is public, your world can also be seen on this website without signing in, including as an image of your map. If your account is private, only your followers see it, and people you block never do. If you turn off “Show on my profile” in Your travels, nobody else sees it. If you post your world to the feed, people see it as it is today: if you later hide your travels or make your account private, they stop seeing it (only you still see the picture saved with the post).
- A poster shows what you put on it to anyone who sees it, and once it’s printed we can’t take it back. The QR code of a signature opens your public profile (pinfolkapp.com/u/<username>) with your travel map: whoever scans it sees only what your profile settings allow. If your account is private, only your followers see your travels, and if you hide your travel stats, nobody does.
Service providers
We use these providers to run Pinfolk. They process data on our behalf, under contract:
| Provider | What for | Where |
|---|---|---|
| Supabase | Database, file storage and sign‑in | London, United Kingdom |
| Google (Firebase Cloud Messaging, Google Sign‑In) | Push notifications and signing in with Google | EU / United States |
| Apple (Sign in with Apple) | Signing in with Apple | Ireland / United States |
| PostHog | Product analytics (app and website) | European Union |
| Sentry | Crash and error reports from the app | European Union (Germany) |
| Cloudflare | The security check when signing in (Turnstile) and serving the Pinfolk map (map tiles; your device requests them directly) | Global network / United States |
| RevenueCat, Inc. | The status of subscriptions bought in the app through the App Store or Google Play (no card details) | United States |
| Stripe | Payments for printed posters, on Stripe’s checkout page (we never see your card details) | Ireland / United States |
| Printify | Managing poster orders and passing them to the print facility (the print file of your design and the shipping name, address, phone number and email) | United States / European Union |
| Print facilities chosen through Printify: OPT OnDemand (posters without a frame) and Posterflow (framed posters) | Printing and sending your poster | Czech Republic (OPT OnDemand) and Germany (Posterflow) |
| The carrier chosen by the print facility | Delivering your poster (name, address and phone number) | The countries the poster travels through |
| Brevo | Sign-in, account, security and poster order emails, and tips you can unsubscribe from | European Union (France) |
| Mapbox and OpenStreetMap | Map tiles (your device requests them directly) | EU / United States |
| Vercel | This website, shared links, the approximate city of your connection, and poster previews and print files | EU / United States |
For printed posters we only share what each step needs: the design, the shipping details and the order. The rest of your account (your posts, messages, plans, groups and location) is never shared with them. Stripe and the carriers also use the data they receive under their own privacy policies, for example to prevent fraud or to meet their own legal obligations.
When data leaves the European Economic Area we rely on adequacy decisions (such as the one for the United Kingdom) or the European Commission’s Standard Contractual Clauses.
How long we keep it
- We keep your data while your account is open.
- When you delete your account it is hidden straight away and erased after 30 days, unless you sign in again before then to keep it. See Delete your account.
- Things other people rely on — past plans you hosted, messages in groups and plan chats, and comments that have replies — stay, shown as “Deleted user”, without your name or photo.
- Subscription records are kept while your account is open, so your plan keeps working and we can help with it. When your account is deleted they are no longer linked to your profile. Apple, Google and RevenueCat keep their own purchase records under their own privacy policies.
- Printed posters: we delete the shipping name, address, phone number and email, the gift’s name, message and recipient’s email, and the print file 90 days after the poster is delivered (if the carrier never confirms the delivery, five months after it ships), and 30 days after an order is cancelled, refunded or couldn’t be completed without charging you. If we charged you and the order couldn’t be completed, we keep them until we have sent it again or refunded you. An order you start but never pay for is cancelled after 30 days. The rest of the order (the design and the tracking details) stays in your order history while your account is open. You can delete saved designs at any time.
- When your account is erased, your saved poster designs and your orders’ shipping details and print files are deleted. The orders themselves are kept anonymised for as long as accounting and tax law requires (in Ireland, six years): product, size, amount, currency, country, dates and Stripe’s and Printify’s reference numbers, without your design, the gift’s details or the tracking number. Stripe, Printify and its print facility keep their own payment and order records under their own privacy policies and legal obligations.
- Reports and safety records may be kept for up to 2 years to protect other users. Backups are overwritten within 7 days.
Your rights
You can ask to access, correct, delete or receive a copy of your data, object to or restrict how we use it, and withdraw consent at any time. Most of this you can do in the app (edit your profile, stop sharing location, Settings → Delete account). The copy of your data includes your poster designs and your orders with their shipping details. For anything else, email hello@pinfolkapp.com; we answer within one month.
You can also complain to a data protection authority. Our lead authority is the Data Protection Commission (Ireland), dataprotection.ie, or you can contact the authority where you live.
Age
Pinfolk is only for people aged 18 and over. If we learn that an account belongs to someone younger, we delete it.
Changes
If we change this policy in a way that matters, we will tell you in the app before it takes effect.