Legal

Privacy

Last updated 9 August 2026

Draft — needs owner and legal review before launch. It has not been reviewed by a lawyer and is not yet a binding policy.

One part describes what is coming, not what runs today. Right now the only image that reaches us is the single crop you send by tapping online lookup; keeping full-resolution pin cut-outs, downscaled board frames and photo metadata is built next, and this page is written ahead of it so nobody is surprised by it. Until it ships, the storage described below does not happen.

Scanning happens on your device. Saving a pin sends the picture to us.

When you point the app at a board, the detection and the matching run on your own phone — the models and the pin index are downloaded to the device and a scan works with no signal at all. Nothing leaves the phone to make that happen.

What does leave the phone is what you keep. When you add a pin to your collection, list it, submit it to the catalogue, or ask for an online lookup, we receive and store the image involved. We use those images to identify pins, and we use them to improve the system so it identifies better next time. That is the deal the app is built on: every picture a trader keeps makes the next trader's scan better. The Terms set out the licence you give us to do it.

Exactly what we keep from a picture

• The pin, cut out, at full resolution. This is the part that has to be sharp — it is what identification and training actually use.
• The wider frame, downscaled. Kept for context (which board, which layout) at a much lower resolution than your camera produced.
• The picture's metadata, including when and where it was taken. Timestamp and GPS coordinates, where your camera recorded them. This is what powers board sightings and alerts — "this pin was on a board here, recently" is a location and a time or it is nothing.

Say plainly what that means

Location history is sensitive, and a stream of park photos is a record of where you were and when. Two things follow, and we would rather write them down than have you discover them:

• Anything else in the frame comes with the photo — a hand, a lanyard, a face, a name tag, your child. Frame the pin, not the person, and be careful photographing other people's children.
• Board sightings shown to other traders carry the place and time a pin was seen. They are not labelled with your name, but a place and a time is still information about you.

The online lookup sends one crop to Google

If you ask us to identify a pin the on-device catalogue does not know, that single cropped image goes to Google's Vertex AI to be identified against web sources. That happens only when you tap the lookup action. Results are cached so the same pin is not sent twice.

What else we store

• Your email address and account record.
• Your collection: which pins you own, quantities, and your privacy setting per pin.
• Subscription state. Card details go to Stripe and are never seen by us.
• Operational logs. Rate-limit records store a hash of the identifier, never the address itself.

What we do not do

• We do not sell your data, and we do not sell or license your photographs to anyone else.
• We do not run third-party advertising or tracking on the app.
• We do not make your collection public unless you choose to, pin by pin.
• We do not publish your photographs as yours, or use them in advertising with your name or face, without asking you first.

Deleting your account, and your pictures

Ask and we will delete your account, your collection and the photographs you added, including their location metadata. Contact details below.

One honest limit. A model that has already been trained does not contain your photo and cannot have a single picture pulled back out of it, so deletion removes your images and stops them being used again — it does not unwind a model that was already built. Anything already published to other traders as a board sighting is likewise already out.

Contact

Questions about privacy: privacy@pintraderpro.com