PinnyAT DevLab

Privacy information

1. Built for privacy

Privacy is not a setting: it is how the app is built.

  • No account and no sign-up. The Pro version will not change that: purchases are handled by Google Play, with no account of ours.
  • We do not know who you are: the app reads no identifier of the phone, not even the advertising one, and our server keeps no request.
  • Your trips stay on the phone, in an encrypted database.
  • No ads, no analytics, no tracking.
  • Your location is read only while the app is open, never in the background.

What leaves the phone, and when, is listed below in full.

Last updated: 15 October 2026.

2. Who is responsible for your data

AT DevLab, the developer of the app, is the data controller under the GDPR.

  • For privacy questions, or to exercise one of your rights: «Send feedback», in Settings.
  • Your trips, though, are not with us: they are on your phone, and only there.
  • Email: [email protected]

3. What does the app store?

Only on this device:

  • your stops and your trips, in an encrypted database;
  • the places you save in "Your places", in an encrypted file;
  • the places you recently picked from a search, in an encrypted file;
  • your settings, such as units, fuel consumption, language and navigation app.
  • in the app's cache: map images already shown, and temporary files - a GPX you exported, screenshots attached to feedback;
  • today's count of route calculations, for the free limit.

There is no account, no sign-in and no copy anywhere else.

4. What is sent off the device?

Only at these moments, and never with a name, an identifier or a history:

  • Calculating a route: the coordinates of your stops.
  • Tapping the map, or "Start from where I am": that point, so the stop is named after what is there or shows its street.
  • Searching: what you type, and one of your stops - or the centre of the map, when you tap "Search this area" - so that results near it come first. On a trip with no stop yet, your position rounded to about 1 km instead.
  • Moving the map: map images are downloaded as you pan and zoom, which tells the map provider which area you are looking at.
  • Using the microphone: the recording is handled by the phone's own speech service. On newer phones it stays on the device; on others it may be sent to that service's provider, and the app tells you which before you speak.
  • Opening the app: the map shows your area, so the map provider serves the images of that area. Your position itself is not sent.
  • "Stop now": your position rounded to about 1 km, only when you tap a choice.
  • "Reviews": the name and address of that place go to Google Maps, which opens its page - only when you tap the button.
  • The location button or "Address" on the home map: your exact position, so that the search service can say which street you are in - only when you tap one of them.
  • "Navigate", "Share" and "Send feedback": the stops, the message or the screenshots go to the app you choose - Google Maps, Waze, a chat, your email - only when you tap; from there, that app's own rules apply.
  • "Travelling with children": stretches of your road before each break, at the interval you choose, to find toilets, playgrounds, service areas and bars there.
  • The location button on the Android Auto map: your exact position, so that the search service can say which street you are in - only when you tap it.
  • "Stop now" along the route, and the fuel station offered before an airport or a car rental: points of the road still ahead of you, so that the places on your way come first.

Nothing else in the app makes a request.

5. Who else is involved?

Five parties, and no more:

  • Cloudflare, which hosts our proxy;
  • Geoapify, which calculates routes and finds places. It receives the request from the proxy, not from the phone: it sees the coordinates and what you search for, but not your IP address or anything that identifies you, and no key travels inside the app;
  • TomTom, which measures the times with today's traffic on a car trip with stops close together, while the «Traffic» switch is on. Like Geoapify it gets the request from the proxy, not from the phone: it sees the coordinates of the leg, not your IP address. It also finds the places along the road ahead, from the points of that road;
  • MapTiler, which serves the map images;
  • the apps you choose to open: Google Maps or Waze, a chat for «Share», your email for «Send feedback».

Cloudflare and MapTiler see the phone's IP address, like any internet service you connect to. Our proxy reads it only to count the requests of the last minute, against abuse, and writes it nowhere; it keeps no request, and its logs hold only failures, without coordinates and without what you type.

There is no ad network, no analytics service and no data broker.

6. Where the data goes

  • Geoapify (route calculation and search): a European company, with its servers in the European Union, in Germany and Finland.
  • TomTom (times with traffic): a Dutch company, TomTom International B.V., in Amsterdam. Where it processes the data we have not yet verified.
  • MapTiler (the map images): a Swiss company that processes data in Switzerland and the European Economic Area. The EU recognises Switzerland as giving adequate protection.
  • Cloudflare (our proxy): a US company with a worldwide network, so a request may pass through one of its servers outside the EU. Cloudflare takes part in the EU-US Data Privacy Framework, the basis the GDPR recognises for these transfers.

7. Why, and for how long

Everything sent, as listed above, is sent to do what you asked for at that moment: calculate a route, find a place, name a stop (GDPR, Art. 6(1)(b)).

Two exceptions rest on a legitimate interest (Art. 6(1)(f)): the map of your area when the app opens, and the request limit that protects the service from abuse.

For how long:

  • on the phone: until you delete it or uninstall the app;
  • our proxy keeps no request. To count requests it reads the IP address, which stays in Cloudflare's counter for one minute. Failure logs say what went wrong, without coordinates and without what you type, and Cloudflare deletes them after 3 days at most;
  • Geoapify and MapTiler keep their own technical logs under their own privacy policies. Geoapify states that it keeps request data only as long as needed to answer, to fix faults and for aggregated statistics.

8. What about my location?

  • It is read only while the app is open: to show your area on the map, for "Start from where I am" and for "Stop now".
  • It is never read in the background: the app does not have that permission and never asks for it.
  • It stays on the phone, with four exceptions: used as the start of a trip, it becomes one of your stops and is sent like the others, also to find the street it is in; with "Stop now", and to search on a trip with no stop yet, it is sent rounded to about 1 km; with "Address" on the home map it is sent as it is, to find the street, only when you tap it. The share button sends it only to whoever you choose. In Android Auto, the location button on the map sends it as it is, to tell you the street, only when you tap it. On the home map, the location button sends it in the same way, to show the street at once.

9. Is anything tracked?

No.

  • There is no analytics, no crash reporting and no advertising, so there is nothing to switch off.
  • If that ever changes it will be opt-in, off by default and revocable, and this page will say so before it ships.

10. Do you have to give us any data?

No.

  • You can deny location and the microphone: the app still works, and only asks you to type what it cannot read by itself.
  • Every feature that sends data starts only when you tap it.
  • The app makes no decisions about you: it puts stops in order, it does not assess people.

11. Your rights

The GDPR gives you the right to access your data, correct it, erase it, restrict its use, object to its processing and take it with you.

  • Almost everything is only on your phone, so you exercise these rights yourself: you see and edit the data in the app, take it with you by exporting a trip as a GPX file or sharing it, and delete it with «Delete all my data» in Settings.
  • «Delete all my data» removes at once: the saved trips and the one in progress, «Your places», the history (recent places and searches), the cache (map images and temporary files) and today's count. Only the settings stay: language, vehicle, units. Uninstalling the app removes everything.
  • We keep no store of your data, so there is nothing to ask us for; for any question: «Send feedback».
  • You can lodge a complaint with the CNPD, Luxembourg's data protection authority (cnpd.public.lu), or with the authority of the country you live in.

12. How it is protected on the phone

  • The trip database is encrypted with SQLCipher, and its key is kept in Android's encrypted storage.
  • Every request uses TLS 1.2 or better; plain HTTP is refused by the app itself.
  • Automatic cloud backup is off, so your trips are not copied into a Google account.
  • Release builds are shrunk and obfuscated, and no coordinate is ever written to the device log.
  • The app asks for the fewest permissions it can, and never for background location.

13. Which rules this app is built to

The app is designed following these rules:

  • GDPR (EU 2016/679): location is personal data, and privacy by design is the starting point. Portability (Art. 20) is the GPX export; erasure (Art. 17) is "Delete all my data".
  • CCPA/CPRA (California): nothing is sold or shared, so there is nothing to opt out of.
  • COPPA: the app is not directed at children.
  • Security: designed following OWASP MASVS 2.x level L1. On every change our build checks some of its controls by itself: no background location, no keys inside the app, no coordinates in the logs, backups and unencrypted HTTP turned off.
  • Map and route data: OpenStreetMap, under the ODbL.

To be exact: this is not a certification and not a MASTG security test, and no outside body has audited it.

14. Children

The app is meant for adults, including parents planning a trip with their children. It is not directed at children and collects no data from anyone, of any age.

15. Questions

For privacy questions, or to exercise one of your rights, use «Send feedback» in Settings. It opens your email app, so you see exactly what you are sending before it leaves.