Privacy Policy

Effective August 7, 2026

Pinned is built local-first: your protocol, dose, inventory, and health records are stored on your device. We do not run accounts, we do not operate a server that stores your health data, and we do not sell or share your data with advertisers.

What stays on your device

• Protocols, dose logs, schedules, and injection-site history
• Inventory (vials, diluents, supplies) and reconstitution records
• Measurements, check-ins, symptoms, notes, and progress photos
• Data imported read-only from Apple Health (only the types you approve). Health data is never transmitted off your device by Pinned.

Deleting the app deletes this data. You can also erase it in-app (Settings → Reset). Optional backups are encrypted and created only when you export them.

What leaves your device

Purchases. Subscriptions are processed by Apple. We use RevenueCat to validate purchases; it receives your purchase history and a random anonymous identifier — never your name, email, or health data. See the RevenueCat privacy policy.

Anonymous usage counts. To learn which parts of Pinned are actually used, the app sends a small number of anonymous events to TelemetryDeck, a privacy-focused analytics service based in Germany — for example "a dose was logged" or "the paywall was shown". Each event carries a random identifier that Pinned generates itself; it is not your Apple ID, not your device's advertising ID, and is not linked to your purchases, and it is hashed on your device before it is sent, so TelemetryDeck never receives the identifier itself. Events never include your protocols, compounds, doses, measurements, notes, photos, or any health data — the app is built so those values cannot be attached to an event. TelemetryDeck does not store your IP address. You can turn this off at any time in Settings → Privacy → Share anonymous usage; switching it off deletes the random identifier, so turning it back on creates a new one that cannot be linked to the old.

Nothing else. No advertising SDKs. Apart from the anonymous usage events described above, nothing leaves your device. We do not use your data for advertising, and we do not track you across apps or websites.

Notifications

Dose and check-in reminders are scheduled locally on your device. Reminder content can be redacted from the lock screen in Settings.

Your rights

Because your data lives on your device, you control it directly: export it in-app, or delete it at any time. For questions or requests (including GDPR/CCPA inquiries), contact us.

Changes

If we change this policy, we will update this page and the effective date above.