Privacy

What we collect

• Your first name, so friends know who is asking or helping.
• Two public keys created on your phone. They prove a request or an answer really came from you, and let friends' notes be encrypted to you. The private halves never leave your device.
• Who your friends are (up to ten people), and a push token so their phone can be notified when you ask.
• Unlock requests: when you asked, whom you asked, and the result (yes or not this time).

We do not collect your email, phone number, contacts, location or advertising identifier.

Notes and answers

The note you write is encrypted on your phone separately for each friend you ask (P-256 key agreement and AES-256-GCM). Our server stores only the encrypted text and can't read it. Notes and individual answers are deleted when the request closes, at most 30 minutes after you send it. Only the overall result is kept. Nobody, including you and us, can see who answered what.

Places and location

Places you save (a name and coordinates) are stored only on your iPhone. Location is read only while the app is open, to save a place or to check you reached one. It is never sent to our server.

Screen Time

Pinky uses Apple's Screen Time to lock the apps and sites you choose. Apple gives Pinky opaque tokens, not the names of your apps or what you do in them, and this information never leaves your iPhone.

Usage statistics

The app sends anonymous usage statistics (Firebase Analytics) and crash reports (Firebase Crashlytics), both from Google. Every event comes from a fixed list, such as "a request was sent" or "the onboarding finished", with values like a difficulty level or a time range. No event can contain your notes, names, chosen apps or friends' answers; a test in our code refuses to build the app if one tries. There is no user ID and no advertising identifier. Turn it off in Settings → Privacy → Anonymous usage statistics.

This website counts page views anonymously, without cookies. If Google Analytics is enabled on the site, it asks first in regions where the law requires it.

Where your data lives

On Google Cloud (Firebase, United States). Your keys, your notes history and your weekly recap stay on your iPhone.

Deleting your data

In the app, Settings → Delete my data removes your name, keys, friendships and requests from our server right away. Deleting the app removes everything on your phone.

Children

Pinky is meant for people 13 and older and is not a parental-control app.

Changes and contact

We'll update this page, with its date, before anything about what we store changes. Questions: hello@askpinky.app.