About this policy
PinPoint (“the app”) is a geography game for iPhone made by Afik Kaniel (“we”, “us”). This policy explains what information the app collects, why, who else receives it, how long we keep it, and the choices you have.
Questions? Email pokerfivehands@gmail.com.
The short version
- You can play without signing up. The app makes a guest account in the background, so your progress is saved.
- We use your information to run the game, deliver what you buy, send the notifications you allow, show and measure ads, and fix crashes.
- Ad and measurement partners get your device’s advertising identifier only if you allow tracking.
- In the European Economic Area and the United Kingdom, analytics stays off until you agree.
- We never see your payment details, and we do not sell your personal information.
- You can delete your account at any time in Settings › Delete account.
01
Information we collect
What we collect depends on how you use PinPoint.
Your account
- Guest account. The first time you open the app, it creates an anonymous account with a random user ID and a generated display name. It has no email address.
- If you create an account or sign in: your email address. If you sign up with email, Firebase Authentication stores your password securely; we never see it, and we email you a code to confirm your address. With Sign in with Apple or Google, we receive the email address they share (Apple may share a private relay address) and the name you choose to share.
- Display name. The name other players see. You can keep the one we generate, use the name Apple or Google shares, or type your own. You can change it in your profile.
Your game
- Progress: credits, XP, level and title, wins and losses, streak and Streak Freezes, daily quests, and when you last claimed the daily bonus and spun the Lucky Wheel.
- Matches: in World Match and Invite a Friend, the cities, where each player taps on the map, the scores, the entry and the result. A tap on the map is a guess, not your location.
- Daily Challenge: your score for each day, with your display name, level and avatar on that day’s board.
- Insights: a backup of your rounds (the city, how far your pin was, the score), so your Insights move with your account.
- Invite codes you create or join.
- Country practice: the country, the number of cities you found and the result, with no link to you or your account.
Purchases
Apple handles every payment. We receive a confirmation of what you bought, such as a credit pack or PinPoint Pro, so we can deliver it. We never receive your card or billing details.
Collected automatically
- Device and app details: device model, iOS version, app version, language and region settings.
- Time: your time zone offset, so notifications reach you in the evening, and when you last opened the app.
- Identifiers: your account’s user ID; identifiers that our analytics, ads and measurement tools give your app install; your push notification token, if you allow notifications; and your device’s advertising identifier (IDFA), only if you allow tracking.
- How you use the app: the screens and features you open, the matches you start and finish, the ads you see and tap, and the purchases you make.
- Diagnostics: crash reports and performance data.
- Approximate location: our analytics and ads partners may estimate your country or city from your IP address. The app never asks for or uses your precise location.
02
How we use it
- To run the game: keep your account and progress, save them across devices, find you a rival, settle matches, run the Daily Challenge board, and keep play fair.
- To deliver what you buy: credits and PinPoint Pro.
- To send the notifications you allow (section 06).
- To show ads in the free version, and to learn which ad campaigns bring new players (section 04).
- To understand how the game is played and make it better (section 05).
- To find and fix crashes and bugs.
- To protect the game and its players, and to follow the law.
If you are in the European Economic Area (EEA) or the United Kingdom, we rely on these legal bases: performing our contract with you (running the game and delivering purchases); your consent, where we ask for it; our legitimate interests in running, securing and improving the game; and our legal obligations.
03
Who receives it
We use these service providers. Each one receives only what it needs for its job.
- Google Firebase: accounts and sign-in, the game’s database and server, notifications, analytics and crash reports.
- Google (Gmail): sends the codes we email you to confirm your email address.
- Google AdMob: shows ads in the free version and measures them (section 04).
- Meta (Facebook SDK): tells us which ad campaigns bring new players. It receives app installs and app opens with device details, and purchases and free-trial starts with their value. It receives your advertising identifier only if you allow tracking. It does not receive your name, your email or your games.
- AppsFlyer: tells us which ad campaigns bring new players. It receives app installs and app opens with device details, and your advertising identifier only if you allow tracking. It does not receive your name, your email or your games.
- TikTok (TikTok Business SDK): tells us which TikTok ad campaigns bring new players. It receives a few app events, such as signing up and your first match, first win and first Daily Challenge, and purchases and free-trial starts with their value. It receives your advertising identifier only if you allow tracking. It does not receive your name or your email.
- Google Sign-In and Sign in with Apple: if you choose them to sign in.
- Apple: payments, and delivering notifications.
Their policies: Google Privacy Policy, how Google uses information from apps that use its services, Meta Privacy Policy, AppsFlyer Services Privacy Policy, TikTok Privacy Policy and TikTok Business Products (Data) Terms, Apple Privacy Policy.
Other players
Your rival sees your display name, your level, your avatar and your taps on the map. Each day’s Daily Challenge board is public: it shows your display name, level, avatar and score to every player.
When the law requires it
We may share information if the law requires it, or to protect the rights and safety of our players and of PinPoint.
We do not sell your personal information.
04
Ads and tracking
The free version shows ads from Google AdMob before some matches, and you can choose to watch ads to earn credits. PinPoint Pro removes the ads before matches.
After your first win, iOS asks whether PinPoint may track you. If you allow it, AdMob, Meta, AppsFlyer and TikTok may use your device’s advertising identifier, together with information from other companies’ apps and websites, to show you more relevant ads and to measure ad campaigns. If you ask the app not to track, they do not receive this identifier, and ads may be less relevant to you.
You can change your answer at any time in iPhone Settings › Privacy & Security › Tracking.
05
Analytics and crash reports
We use Google Analytics for Firebase to learn how the game is played: for example, which modes players choose and where new players get stuck. We do not send it your name or your email.
In the EEA and the UK, and whenever the app cannot tell your region, the app asks before it turns analytics on. Until you agree, Google Analytics may receive only limited data, with no identifier for your device. Everywhere else, analytics is on.
When the app crashes, Firebase Crashlytics sends a crash report: the device model, iOS and app version, and what the app was doing. Crash reports are not linked to your account.
06
Notifications
PinPoint asks before it sends notifications. If you allow them:
- Reminders, such as your streak and the new Daily Challenge, are scheduled on your iPhone.
- If you have not played for a week or more, our server may send you a notification with free credits to come back, in your local evening (after 7, 14 and 30 days away). For this we keep your push notification token, your time zone offset and when you last opened the app.
You can turn notifications off at any time in iPhone Settings › Notifications › PinPoint.
07
Keeping and deleting your data
We keep your account and game data while your account exists.
Delete your account in the app: Settings › Delete account. This deletes your account and sign-in right away. Our server then deletes, for good and within 7 days, your progress, your Insights backup, your Daily Challenge scores, and your matches, including matches with friends. PinPoint Pro stays with your Apple Account, so you can restore it later. Unused credits are lost.
To delete anything else, such as a guest account you switched away from, or an account you can no longer open, email us with your display name. We do it within 30 days.
Codes we email you expire after 10 minutes. We delete a code once it is used, and an unused code within 8 days. Our partners keep data under their own policies: Google Analytics keeps event data for 2 months, and data about your app install for 14 months after you last use the app; Crashlytics keeps crash reports for 90 days. AdMob, Meta, AppsFlyer and TikTok keep data as their policies above describe.
08
Security and where data is stored
Data travels encrypted (HTTPS). Our database rules let only you read your own account record. No system is perfectly secure, but we work to protect your information.
Our providers store and process data on servers in the United States and other countries. When data leaves the EEA or the UK, they use the safeguards the law requires, such as Standard Contractual Clauses.
09
Children
PinPoint is not made for children under 13, and we do not knowingly collect information from them. If you think a child under 13 has given us information, email us and we will delete it.
10
Your rights
Depending on where you live, you may have the right to see the information we hold about you and get a copy, to correct it, to delete it, to object to or limit some uses, and to withdraw your consent at any time (this does not change what we did before).
- Change your display name in your profile.
- Delete your account in Settings › Delete account.
- For anything else, email pokerfivehands@gmail.com. We answer within 30 days.
In the EEA or the UK, you can also complain to your local data protection authority.
11
Changes to this policy
When we change this policy, we update the date at the top. If a change is important, we also say so in the app’s release notes.
12
Contact us
Afik Kaniel, developer of PinPoint
pokerfivehands@gmail.com