PinPoint is made by Pangea Global Pty Ltd ("PinPoint", "we", "us", "our"), an Australian company registered in Victoria. PinPoint is an injection site tracking app. This policy explains what information the app handles, where it goes, and what happens to it. We have written it to be read by an actual person, not just a lawyer.
The short version: your injection and health data lives on your own device, not on our servers. We do not require an account, we do not ask for your name, and we do not sell or share your personal information. Your injection and health data stays on your device and never leaves it. The one time an image leaves your device is when you choose to use the camera scan — and that image is never stored; it is used only to identify your injection zone, then discarded.
Information stored on your device
Almost everything you do in PinPoint stays on your device. That includes your injection log, sites, rotation history, vials, notes, reminders, weight entries, and any health data you enter.
This data is stored locally and is not transmitted to us. We cannot see it, recover it, or restore it if you delete the app or wipe your device. Backups are your responsibility.
No account required
PinPoint does not require you to create an account. We do not ask for your name, email, date of birth, or any identifier in order to use the app.
If you contact us by email, we will see your email address and whatever you write to us. We use that only to respond, and we delete support correspondence within 12 months of resolving your query.
Camera scanning
The optional camera scan (available with PinPoint Pro) works like this, in order:
- You point the camera and tap to scan. Scanning never runs in the background and never happens without you triggering it.
- The single image is sent over an encrypted connection (TLS) to our own processing service (hosted with Vercel, Inc., United States), which forwards it to Anthropic, PBC (United States), the maker of the Claude AI. Our service is a pass-through only — it does not store or log the image. Anthropic's API analyses the image and identifies the body zone in frame.
- The zone result is returned to your device and the entry is placed on your site map.
- The image is never stored on disk, on our servers, or by Anthropic. Anthropic's standard API terms include zero data retention by default: inputs are not used to train AI models and are not retained after the response is returned. The image briefly remains in your device's memory only if you use the optional tap-to-adjust step, and is cleared the moment you confirm the entry, re-scan, or leave the scan screen. You can review Anthropic's privacy policy at anthropic.com/privacy.
The scan request also includes an anonymous, device-generated identifier, used only to prevent abuse of the scan feature (for example, excessive requests from one device). This identifier is not linked to your name, account, or any health data, because PinPoint holds none of those. What we receive back from a scan is the zone label only (for example, "left abdomen, upper").
If you prefer that no image ever leave your device, simply do not use the camera feature. Every other part of the app, including manual logging on the site map, works fully without it.
Purchases and subscriptions
Payments are handled entirely by Apple or Google through the App Store or Google Play. We do not see or store your card details.
We use RevenueCat, Inc. (United States), a subscription management service, to confirm purchase status so the app can unlock paid features. RevenueCat receives an anonymous app-generated identifier and your purchase status only. It never receives your payment details, your identity, or your health data. You can review RevenueCat's privacy policy at revenuecat.com/privacy.
Purchase records are retained for as long as needed to service your subscription and meet our legal and tax obligations.
Our website
Our website at trypinpoint.io may use standard analytics to count visits and understand traffic sources. This is separate from the app, which contains no analytics of any kind. You can block website analytics with normal browser tools.
Where data is processed
We are an Australian company and some of our service providers operate overseas. The table below summarises every transfer.
| Recipient | Country | What they receive | Retention |
|---|---|---|---|
| Vercel, Inc. | United States | Transient camera scan image (pass-through to Anthropic; not stored) | Zero — not retained |
| Anthropic, PBC | United States | Transient camera scan image (zone identification only) | Zero — deleted after response per Anthropic API terms |
| RevenueCat, Inc. | United States | Anonymous app ID, purchase status, and referral code (if used) | Life of subscription plus legal record-keeping periods |
| Supabase, Inc. | United States | Affiliate or referral code only, if you enter or open one. No personal or health data. | Not retained against you; used only to validate the code |
Before transferring data overseas, we take reasonable steps to ensure each recipient handles personal information in a way that is consistent with the Australian Privacy Principles, including through contractual data processing agreements. Anthropic's zero data retention policy is publicly documented and applies by default to all API customers. Vercel, RevenueCat and Supabase are each bound by data processing agreements that include security, confidentiality, and restricted-use obligations.
What we never do
- ›Sell your personal information
- ›Share your injection or health data with advertisers or data brokers
- ›Upload your local app data to our servers
- ›Use your data or your images to train AI models
- ›Use health data for advertising of any kind
- ›Run the camera in the background or without your explicit trigger
Children
PinPoint is not directed at children. We do not knowingly collect personal information from anyone under 13, consistent with the United States Children's Online Privacy Protection Act (COPPA). The app is intended for adults aged 18 and over given the nature of the medications it is designed to track. If you believe a child has provided us with personal information, please contact us at hello@trypinpoint.io and we will delete it promptly.
Security
Because your data lives on your device, the security of that device is the main line of defence. Use a device passcode, biometric lock, and keep your operating system up to date.
For the limited data we do handle — support email, purchase status, and transient scan processing — we use encryption in transit (TLS), access controls, and contractual safeguards with all third-party processors named in this policy.
No method of transmission or storage is completely secure and we cannot guarantee absolute security, but we take the protection of the little we handle seriously.
Data retention summary
| Data | Where it lives | How long |
|---|---|---|
| Injection and health data | Your device only | Until you delete it |
| Camera scan images | Vercel (pass-through), then Anthropic API (transient) | Not stored at either point; deleted after zone identification |
| Support emails | Our email inbox | Deleted within 12 months of resolution |
| Purchase status | RevenueCat | Life of subscription plus legal record-keeping periods |
| Affiliate/referral code | Supabase | Not retained against you; used only to validate the code |
Your rights
Everyone. You can delete your data at any time by clearing it inside the app or by uninstalling. Because we do not hold a copy of your health data on our servers, most of the control over your information is already in your hands. To request deletion of any data we do hold (support correspondence), email hello@trypinpoint.io.
Australia. Under the Privacy Act 1988 (Cth) and the Australian Privacy Principles, you have the right to ask how we handle personal information, to request access or correction, and to make a complaint. Contact us first at hello@trypinpoint.io. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner at oaic.gov.au.
European Union and United Kingdom. Where we process personal information (support email, purchase status, transient scan images), Pangea Global Pty Ltd is the data controller. Our lawful bases are performance of a contract (providing the app and subscriptions) and legitimate interests (responding to support and preventing abuse of the scan feature). You have the rights of access, rectification, erasure, restriction, portability, and objection, and the right to lodge a complaint with your local supervisory authority. To exercise any right, email hello@trypinpoint.io and we will respond within 30 days.
California. We do not sell or share personal information as defined by the California Consumer Privacy Act (CCPA), and we have not done so in the preceding 12 months. California residents have the right to know, delete, and correct personal information we hold, and the right not to be discriminated against for exercising those rights. Because we hold almost nothing, most requests will be satisfied by noting that your data is on your device. To submit a request, email hello@trypinpoint.io.
Changes
We may update this policy as the app changes. The "last updated" date at the top reflects the current version. Material changes will be communicated inside the app before they take effect.
Contact
Pangea Global Pty Ltd
117/530 Little Collins St, Melbourne VIC 3000, Australia
hello@trypinpoint.io
trypinpoint.io