privacy policy

Last updated 29 October 2026.

This policy says what pingr actually does with your information — not what it would like to do. If something here does not match what you see in the app, the address at the bottom is read by a human, and it is a bug.

Who can use it

You must be 18 or older. One account per person, with your own Google account. The details you give — your first name, age, gender, photo — must be true.

What we collect

• Your Google account — to sign you in. We receive your account identifier, email address and the name and photo on that account. We do not receive your Google password, and we never see anything else in your Google account. That is the only thing we ask Google for, and we ask for nothing else in this version of the app.
• Your profile — first name, age, gender, an optional short bio, and a photo if you add one. Other people see these, because they are how somebody knows who they are meeting.
• Your location — while you use the app, to show what is near you. The app stores an approximate point for each ping, about 300 metres off, and that is what everyone else sees. The exact point is stored separately and is readable only by the host of that ping and the people the host has accepted.
• What you post — pings, plans, join requests, chat messages, and the quick answers (“on my way”, “i've arrived”).
• Reports and blocks — if you report or block somebody, so that the block works and the report can be read.
• A notification token from your phone, if you allow notifications. It is used to send you a push and nothing else.

What other people never see

• Your phone number, if you add one. It is never shown to another user, and it is not how you sign in.
• Your exact location, until you are accepted into a ping.
• Your email address.
• Anyone you have blocked, and they cannot see you. This applies to the map, plans, requests, chat and photos.

How long we keep it

• Exact meeting points are deleted 30 days after the activity ends. The blurred point stays, because the ping itself is part of a conversation other people were in.
• Chat messages stay while the chat exists. A chat closes a few hours after the activity, and its messages are readable by the people who were in it.
• Your account and profile stay until you delete them.
• Reports are kept so that repeat behaviour can be seen.

Who we share it with

Only the services that make the app work, and none of them for advertising:

• Supabase — the database, sign-in and file storage. Data is held on their servers.
• Google — to sign you in, through Google's own sign-in screen.
• Expo — to deliver a push notification to your phone.

We do not sell your information. We do not show advertising. We do not share your exact location with anybody you have not accepted.

What we do with what Google gives us

Your Google name and photo are used to fill in your profile, and you can change them. Your account identifier is how the app knows it is you. Your email address is kept with your account so we can reach you about it — it is never shown to another user, and it is never given to anybody else. All of it stays on Supabase's servers, inside your account, until you delete your account.

We do not use it for advertising, we do not sell it, we do not use it to work out credit-worthiness, and we do not use it to train AI models. We do not let other people read it. The only exception is a report: if you report somebody, the person who reads that report can see what you wrote in it, because somebody has to.

pingr's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Your choices

• Turn location off at any time in the phone's settings. The app then shows Kathmandu rather than your position, and says so.
• Turn notifications off without losing anything else.
• Block or report anybody from a chat.
• Delete your account yourself — profile, then “delete my account”. Your profile, photo, pings and messages go for good, and the chats you were in keep their shape without your lines. More about deleting your account.
• If you cannot sign in, write to jayshety2@gmail.com and ask for the same deletion. There is a person on the other end.

Permissions the app asks for

• Location — to show what is happening near you.
• Photos — only when you choose a profile picture.
• Notifications — only if you allow them.

How we protect it

• Every rule about who can read what is enforced by the database itself, not by the app, so a modified app cannot read more than a normal one.
• Your saved sign-in on the phone is encrypted with a key held by the phone's own keystore, and Android backups are switched off for the app.
• Nobody at pingr looks at your chats in the ordinary course of things. Reports are read by a person, because somebody has to read them for report and block to mean anything.

Changes

If this policy changes in a way that matters, the app will say so. Questions, or a request to delete an account: jayshety2@gmail.com.