Pinpoint Privacy Policy

Welcome to Pinpoint! This Privacy Policy explains how Pinpoint ("we," "us," or "our") collects, uses, stores, and shares your information when you use our mobile application ("App"). Pinpoint is a trip-tracking app with AI-powered driving insights designed to record your trips and help you become a safer, more aware driver.

Pinpoint is built on a local-first principle: trip detection, route storage, and driving history are processed and stored on your device. Account management and optional AI features use cloud services only where necessary, and only with your knowledge. We do not track you for advertising and we do not sell your data.

1. Information We Collect

We collect the minimum information needed for the App to function:

• Location & Motion Data: With your permission, the App accesses your device's GPS and motion sensors to detect and record trips, routes, distances, durations, and speeds. This data is stored locally on your device in an encrypted SQLite database and is never uploaded to our servers.
• Account Information: If you sign in with Apple or Google, we receive your name and email address from the authentication provider. This information is stored in Firebase (Google Cloud) to maintain your account across app reinstalls and devices.
• Subscription & Usage State: Your subscription tier, expiry date, trial status, and AI usage counters are stored in Firebase Firestore so your entitlements sync correctly if you reinstall the app or restore a purchase.
• AI Query Context: When you use AI features (Ask Pinpoint, Weekly Digest, Drive Score), a summary of the relevant trip data you asked about is sent to our Firebase Cloud Functions proxy, which forwards it to our AI provider for language model processing. Your full location history is never sent — only the specific context needed to answer your question.
• Behavioral Analytics: We use Mixpanel and Firebase Analytics to collect anonymized events (e.g., feature tapped, screen viewed). No location data, trip details, or personally identifiable information is included in these events.
• Support Communications: If you contact us by email, we retain that correspondence to resolve your request.

We request "Always Allow" location permissions to enable background tracking. You can change this at any time in your device settings. Without location access, trip detection will not work.

2. How We Use Your Information

Your data is used exclusively to provide and improve the App:

• To detect, record, and display your trips, routes, and driving statistics on-device
• To manage your account and subscription status via Firebase
• To generate AI-powered insights (coaching tips, weekly digests, drive scores) by sending trip context to our AI provider's language models via our secure Cloud Functions proxy
• To enforce AI usage quotas server-side as a safety net
• To analyze anonymized usage patterns and improve app features via Mixpanel and Firebase Analytics
• To process App Store subscription events via Apple's Server Notifications

We do not use your data for advertising, profiling, or any purpose beyond operating the App.

3. Data Storage and Security

• On-Device: Trip history, routes, and GPS samples are stored locally in SQLite. AI chat messages are stored locally with a 30-day rolling retention window. This data does not leave your device unless you explicitly share a trip.
• Firebase / Google Cloud: Account profile, subscription state, and AI usage counters are stored in Firestore with Google's standard encryption at rest and TLS in transit. Firebase is operated by Google LLC and subject to Google's security standards.
• AI Processing: Trip context sent for AI processing is handled by our AI provider. Prompts and responses are not retained for model training per our service agreement.
• Analytics: Anonymized event data is stored by Mixpanel and Firebase Analytics on their respective secure infrastructure.
• Device Loss / Reinstall: Trip history is tied to your device. If you reinstall the app, your account and subscription are restored from Firebase, but local trip data is not recoverable unless you restore a device backup.

4. Sharing Your Information

We do not sell your data. We share information only in these limited circumstances:

• Public Route Sharing: When you choose to share a trip, only the route line, distance, and duration are uploaded to create a shareable link. No personal identifiers are attached to shared routes.
• AI Processing: Trip context relevant to your AI query is forwarded through our Firebase Cloud Functions to a third-party AI provider for language model processing, acting as a data processor under our terms.
• Firebase / Google: Account and subscription data is stored with Google Firebase, acting as a data processor.
• Analytics Providers: Anonymized behavioral events are sent to Mixpanel and Firebase Analytics, which are bound by their respective data protection terms.
• Apple: Subscription lifecycle events are processed via Apple's App Store Server Notifications API.
• Legal Requirements: We may disclose information if required by law or to protect the rights and safety of our users.

5. Your Choices and Rights

• Trip Data: You can delete individual trips or all trip history directly in the App at any time.
• AI Chat History: You can clear your Ask Pinpoint conversation from within the chat screen. Messages are automatically purged after 30 days.
• Account Deletion: Deleting your account from the App triggers deletion of your Firebase profile, Firestore data, and AI usage records. Local trip data on your device is removed when you uninstall the App.
• Location Permissions: Manage location access in iOS Settings → Privacy & Security → Location Services. Revoking access stops all trip detection.
• Analytics Opt-Out: You can limit ad tracking and analytics via iOS Settings → Privacy & Security → Tracking.

Depending on your jurisdiction, you may have additional rights (access, correction, portability, erasure) under applicable privacy laws. Contact us to submit a request.

6. Updates to This Policy

We may update this Privacy Policy as we add new features or as regulations change. We will notify you of material changes via in-App notices. Continued use after changes implies acceptance of the updated policy.

7. Contact Us

For questions, feedback, or privacy concerns, reach out at support@pinpointapp.me.

Thank you for using Pinpoint! We value your trust and privacy.