Privacy Policy

Last updated: October 16, 2026 · Effective: October 16, 2026

Introduction

PinPoint ("the App," "we," "our") is committed to protecting your privacy. This Privacy Policy explains what information the App collects, how it is used, and your rights regarding your data.

PinPoint is developed by Elysium Technology FZ-LLC ("the Developer"). By using PinPoint, you agree to the practices described in this policy.

Summary

We do not sell your data. Your dose logs, schedules, metrics, and notes stay on your device (and sync only through your own private iCloud if you enable it), and we have no way to access them. To improve the app, we also collect anonymous, aggregate usage analytics that are never tied to you and never include your health or protocol data. If you turn on Ask PinPoint, the optional assistant inside the App, a limited set of your data is sent (with your consent, and without any identifier) to write each reply, and is not kept afterward. Details below.

Information We Collect

Information stored locally on your device

PinPoint stores the following data locally on your iPhone or iPad using Apple's SwiftData framework:

• Dose logs: compound name, dose amount, dose unit, date/time, injection site, pain level, and notes you enter
• Schedules: compound, dose, frequency, and start date
• Daily metrics: weight, calories, protein, water intake, and notes you enter
• Daily notes: unstructured text and the date you enter
• Side effect logs: effect name, severity rating, and date
• Vials / inventory: compound, vial size, expiry date, cost, and remaining quantity
• Saved presets: vial size, liquid volume, and the values you saved with them
• User profile: categories selected, experience level, height, weight, goals, notification preferences, theme selection, and disclaimer acceptance status
• Injection site rotation: site names and last-used dates

This data leaves your device only through iCloud sync (described below), when you explicitly export it, or (if you consent to it) as the limited context sent with an Ask PinPoint request (described below).

iCloud sync

If you have iCloud enabled on your device, PinPoint uses Apple's CloudKit framework to sync your data across your Apple devices. This sync is:

• End-to-end private: your data is stored in your personal iCloud account. We do not have access to your iCloud data. Apple manages the encryption and storage.
• Controlled by you: you can disable iCloud sync for PinPoint in your device's Settings → [Your Name] → iCloud → Apps Using iCloud.
• Subject to Apple's privacy policy: iCloud data handling is governed by Apple's Privacy Policy.

Apple HealthKit

PinPoint can optionally read the following data from Apple Health, only when you explicitly grant permission:

• Body weight
• Dietary water intake
• Nutrition totals such as protein, carbohydrates, fat, and fiber
• Activity totals such as active calories and exercise time

PinPoint uses this data solely to populate your daily metrics within the App. If you grant body-mass write permission, PinPoint can also save new weight entries that you create in the App back to Apple Health. PinPoint does not write dose logs, medication records, protocol data, notes, side effects, or compound information to Apple Health. HealthKit data is not shared with any third party. You can revoke HealthKit access at any time in Settings → Health → Data Access & Devices → PinPoint.

Ask PinPoint

Ask PinPoint is an optional assistant inside the App. It stays off until you choose to use it: before your first message is sent, the App shows you a consent screen describing what leaves your device, and nothing is sent unless you agree. You can withdraw that consent and turn Ask PinPoint off at any time in the App's Settings.

When you send a message, the request includes:

• Your message and recent conversation: the message you just wrote, plus up to 19 recent messages from the conversation you are in
• Relevant app data: the compounds, saved schedules, recent logs, and any requested trends relevant to your question
• Language and time zone: your app language is included with every request, and your local time zone offset is included when you share tracker data, so replies use your language and your schedule timing

The request is sent over an encrypted connection to PinPoint's server, which relays it to OpenRouter and the model provider used for your reply. Requests include no user, account, or device identifier.

How that data is handled:

• Zero data retention: the provider uses your request only to generate that reply and does not keep it afterward
• Nothing stored on our side: PinPoint does not store your message, the tracker data shared with it, or the reply on its servers
• History stays on your device: your full Ask PinPoint history is stored only on the device you used and is not synced. Only the current message and the bounded recent context described above are sent with a request.
• Controlled by you: you can delete individual conversations, clear all history, or turn Ask PinPoint off at any time in the App's Settings

Subscriptions

PinPoint uses RevenueCat and Apple's StoreKit to process subscription purchases and entitlement status. These services may receive subscription transaction identifiers, product identifiers, and an anonymous app user identifier needed to unlock Pro features. They do not receive your dose logs, schedules, notes, side effects, vials, or daily metrics from PinPoint.

If you request a refund from Apple, Apple may ask us to confirm information about your purchase, such as whether the subscription was delivered and used. By using PinPoint and making in-app purchases, you consent to our sharing of data regarding your usage and consumption of purchased content with Apple as part of resolving refund requests. This is limited to subscription and entitlement information; it never includes your dose logs, schedules, notes, side effects, or any health data. Apple makes the final refund decision.

Anonymous usage analytics

To understand how the App is used and where to improve it, PinPoint collects anonymous, aggregate usage analytics through PostHog, a third-party analytics provider. This is limited to product-interaction events, for example that a screen was viewed or a feature was used.

This analytics data:

• Is anonymous: it is tied to a random identifier generated on your device, not to your name, email, Apple ID, or any advertising identifier.
• Excludes your protocol and health data: it never includes your dose logs, compounds, doses, schedules, notes, side effects, vials, weights, or any other content you enter.
• Excludes your location: IP-based location lookup is disabled, and your IP address is discarded on receipt rather than stored.
• Is processed in the EU: events are sent to PostHog's European infrastructure.

We use this only to improve PinPoint. It is never sold, never used for advertising, and cannot be used to identify you.

Information we do NOT collect

Beyond the anonymous, aggregate analytics described above, PinPoint does not collect:

• We do not use crash reporting services
• We do not track your location
• We do not use advertising identifiers
• We do not use cookies or web tracking
• We do not collect email addresses, names, or account information (there are no accounts)
• We do not use advertising or cross-app tracking SDKs

How We Use Your Information

Your locally stored data is used exclusively to:

• Display your dose history, schedules, and metrics within the App
• Track your vial and pen supplies and estimate when they run out
• Generate estimated compound level charts based on your dose history and published pharmacokinetic data
• Suggest injection site rotation based on your usage history
• Provide daily metric tracking and weight trend visualizations
• Answer your questions in Ask PinPoint, if you turn it on and consent to what is sent (see Ask PinPoint above)

Data Sharing

We never sell your data, and we never share your protocol or health data with advertisers, data brokers, or anyone else. The one case in which any of it is transmitted for processing is an Ask PinPoint request you consent to and send yourself, as described above. Specifically:

• The only server we operate is the one that relays Ask PinPoint requests, and it stores nothing (see Ask PinPoint above)
• No data is shared with advertising networks or data broker services
• No data is sold, rented, or traded

The only data that leaves your device is:

• iCloud sync to your own Apple account (if enabled)
• Data export that you explicitly initiate (PDF, CSV, or JSON files shared via the iOS share sheet to a destination you choose)
• Subscription processing through Apple and RevenueCat, limited to purchase and entitlement information, not your protocol data
• Anonymous usage analytics through PostHog, limited to product-interaction events and never your protocol or health data (see above)
• Ask PinPoint requests that you consent to and send, limited to the message and app data described above, carrying no identifier and retained by no one afterward

Data Retention and Deletion

• Your data persists on your device until you delete it within the App or delete the App itself
• Deleting the App removes all locally stored data
• iCloud data can be managed through your iCloud storage settings
• Ask PinPoint conversations are stored only on the device you used, and you can delete individual conversations or clear all history in the App
• There is no account to "delete" because there are no accounts

Children's Privacy

PinPoint is not directed at children under 18. The App is rated 18+ due to its medical/health information content. We do not knowingly collect information from children.

Security

Your data is protected by:

• iOS device encryption (your device passcode/biometric)
• Apple's iCloud encryption for synced data
• No network transmission, except iCloud sync managed by Apple and (if you consent to it) Ask PinPoint requests, which are sent over an encrypted connection

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be reflected in the "Last Updated" date at the top. Continued use of the App after changes constitutes acceptance of the updated policy.

Contact

If you have questions about this Privacy Policy, contact us at:

Email: [email protected]

California Residents (CCPA)

We do not sell personal information. We do not collect personal information beyond what is stored locally on your device. For questions about your rights under CCPA, contact us at the email above.

European Residents (GDPR)

Your protocol and health data are processed locally on your device. Anonymous, aggregate usage analytics are processed by PostHog on EU-based infrastructure and cannot be used to identify you. iCloud sync, if enabled, is governed by Apple's Data Processing Agreement and your Apple ID account settings. Ask PinPoint requests are processed only on your consent, which you can withdraw at any time in the App's Settings; they carry no user, account, or device identifier and are not retained after your reply is generated. For questions about your rights under GDPR, contact us at the email above.