Effective date: October 20, 2026
This Privacy Policy explains how Pinchart handles information in its mobile apps for iPhone (the "iPhone App") and Android (the "Android App"; each of them, and both together, the "App") and on its website at pinchart.jocoding.io (the "Website", described in Section 15). Pinchart is operated by JoCoding, Inc., a Delaware corporation ("JoCoding", "we", "us").
Installation identity. When you first open the App, our server creates a random installation ID (for example inst_…) and an access token. The token stays on your device; our server stores only a salted hash of it. These are used to authenticate the App's requests to our server.
Device settings. Your device's language/region setting (locale) and time zone, sent when the installation is created and when you save alert rules. We use them to evaluate quiet hours and to send the daily summary at 08:00 in your local time. Newer versions of the App also send its platform (iOS or Android) and app version with each request; we store the latest value with your installation to keep older versions working and to tell you when an update is needed.
Your Pinchart content. The App Store and Google Play apps you choose to track (their public App Store IDs or Google Play package names), your alert rules (rule types, thresholds, storefront scope, quiet hours, daily summary setting), and the state of the initial scan for each tracked app.
Alert delivery. If you allow notifications, your device's push token: in the iPhone App an Apple Push Notification service (APNs) token, and in the Android App a Firebase Cloud Messaging (FCM) token issued by Google. We store it encrypted (AES-GCM) together with a hash used to avoid duplicates, use it only to deliver the alerts you set up, and keep a record of alert events generated for your tracked apps and their delivery status. In the Android App, if you decline the notification permission, alerts are not delivered to that device and everything else keeps working.
Subscriptions. Purchases in the iPhone App are processed by Apple through the App Store, and purchases in the Android App are processed by Google through Google Play Billing. RevenueCat manages subscription status for us, using your installation ID or, if you sign in, your Pinchart account ID as the RevenueCat app user ID. We store your Pinchart Pro entitlement state (active or not, expiration date) and the subscription event notifications RevenueCat sends us (for example purchase, renewal, cancellation or expiration events, which include the product, store, dates, price and country information that RevenueCat provides). We never receive your payment card details.
Support emails. "Contact support" in Settings opens your mail app with a draft that lists the app version, iOS or Android version, device model, plan (Free or Pro) and your installation ID (in the Android App, the installation or account ID that RevenueCat uses as your customer ID), so we can look into the problem. You see and can edit all of it before sending; nothing is sent unless you send the email.
App Store Connect connection (optional, Pinchart Pro). If you connect App Store Connect, you provide an API key: issuer ID, key ID, private key, and optionally a vendor number. We store the issuer ID and private key encrypted at rest (AES-GCM); the key ID and vendor number are stored alongside them. We use the key only for read-only requests to Apple's App Store Connect API on your behalf (your app list, version state, review status, and available sales reports). We never edit metadata, upload builds, or change releases. The data returned by Apple is shown to you and is not stored by us.
Signing in with Apple in the iPhone App (optional). You can sign in with Apple in Settings → Account. The App asks Apple for your email address and name. Apple gives us a stable user identifier for Pinchart and, if you share it, your email address (which may be a private relay address) and whether it is verified. The name Apple may provide the first time you sign in is not sent to our server and is not stored. After verifying Apple's signed identity token, we store the identifier, the provider and your email address (if provided) on your Pinchart account and link your installation to it. The tracked apps on your iPhone, with their alert rules and alert events, move to your account and become available on every device and on the Website where you are signed in to the same account. While you are signed in, your Pinchart account ID is used as the RevenueCat app user ID, so an App Store subscription follows your account (RevenueCat transfers the purchase to it). If you sign out, your installation is unlinked, your data stays with your account, and the App starts with an empty list on that iPhone. If you stop using Sign in with Apple with Pinchart in your Apple Account settings, the App signs you out.
Signing in to the Android App (optional). You can sign in in Settings → Account with Google or with Apple. With Google, Android shows your Google accounts (Credential Manager). The App sends Google only a hashed single-use value (nonce), and Google returns a signed identity token with a stable user identifier for Pinchart, your email address and whether it is verified, and your name and profile picture. Our server verifies the token and stores the identifier, the provider and your email address; we do not store your name or picture. With Apple, the App opens the Pinchart website in a browser tab (Custom Tab), where you sign in with Apple as described in Section 15; the Website then returns you to the App with a single-use code that is valid for two minutes, is stored by us only as a hash, and works only together with a secret kept by the App. After you sign in, the tracked apps on your Android device, with their alert rules and alert events, move to your account and become available on every device and on the Website where you are signed in to the same account, and your Pinchart account ID is used as the RevenueCat app user ID, so a Google Play subscription follows your account. If you sign out, your installation is unlinked, your data stays with your account, and the App starts with an empty list on that device. Google LLC processes Google sign-in under its own privacy policy.
Neither the iPhone App nor the Android App offers or links to purchases on the Website.
Rating prompts. At a good moment (for example after a positive rank alert), the App may ask the system to show the App Store rating prompt (iPhone) or the Google Play In-App Review dialog (Android). The App keeps on your device only how often it was opened and when it last asked. Any rating or review you leave goes to Apple or Google under their terms; we are not told whether you rated or what you wrote.
Ads (free plan). If you do not have Pinchart Pro, the iPhone App and the Android App show ads served by Google AdMob (Google LLC): a banner and, occasionally, a full-screen ad between screens. Pinchart Pro removes them; the Website shows no ads. Every ad is requested as non-personalized: ads are not chosen based on your activity in other companies' apps or websites, the iPhone App does not ask for App Tracking Transparency permission and so cannot read the advertising identifier (IDFA), and the Android App does not include the advertising ID permission. To deliver ads, limit how often the same ad is shown (frequency capping), prevent fraud and measure ads, Google's Mobile Ads SDK still processes device and usage information: approximate location derived from your IP address, device and app information (such as device model, operating system, language and app version), ad interaction data (such as ad views and taps), diagnostics and, in the Android App, the app set ID (an identifier limited to apps from the same developer on your device; it is not the advertising ID). In the EEA, the UK and Switzerland, Google's consent message (the Google User Messaging Platform, using the IAB Transparency and Consent Framework) asks for your choice before any ad loads; you can change it at any time in Settings → Privacy → Ad privacy settings. We do not send Google your installation ID, account ID, email address, tracked apps or anything you type. Google processes this information under its own policies: How Google uses information from sites or apps that use its services and the Google Privacy Policy. If you have consented to analytics, we record in PostHog when a full-screen ad was shown and whether ads can be requested after the consent check, never any ad identifier.
Technical request data. Our hosting provider (Cloudflare) processes the IP address and standard request information of each connection to deliver the service and protect it from abuse. We use the IP address transiently to rate-limit creation of new installations; we do not store IP addresses in our database.
Public store data (not personal data about you). Pinchart collects public App Store chart rankings, app metadata, and customer reviews from Apple's public feeds for 175 storefronts, and public Google Play charts, app listings and reviews for Google Play apps. Rank history is kept per app, not per user. Reviews are fetched on request and cached on our server for up to 24 hours. Reviews are translated on your device: in the iPhone App with Apple's on-device translation, and in the Android App with Google ML Kit, which identifies each review's language and translates it on your device. In the Android App, the translation model for a language (about 30 MB) is downloaded from Google the first time you translate that language, over Wi-Fi, or over mobile data only if you agree, and then stays on your device. The App never sends review text to us or to Google for translation. On the Website (Section 15), Pinchart Pro can show reviews translated into the Website's language: our server translates the public review text it has cached with Cloudflare Workers AI (Cloudflare, Inc., our hosting provider) and keeps each translation for up to 30 days so that later viewers can reuse it. Nothing about you is sent with the text; we count each account's translations per day (kept for 14 days) to limit use.
Crash reports. If the App crashes or freezes, it sends a crash report to Sentry: the stack trace, device model, operating system and app version, and an anonymous device-generated identifier. Crash reports do not include your IP address (we turn that off), your tracked apps, or anything you type. Crash reporting does not depend on analytics consent because it is needed to keep the App working.
We do not collect your name, phone number, contacts, photos, precise or approximate location from GPS, or the advertising identifier (IDFA on iPhone, advertising ID on Android). We receive your email address only if you sign in and share it (Sections 2 and 15). We do not request App Tracking Transparency permission on iPhone. Analytics events never include review text, App Store Connect credentials, push tokens, web addresses, free text you type, or report contents. The one exception is on the Website: page views include the address of the Pinchart page you are viewing and the page you came from (Section 15). Ads in the free plan are requested as non-personalized and without the advertising identifier (Section 2).
You can also allow analytics from the one-time card on the Home screen.
Analytics are off until you turn on Settings → Analytics consent → Allow anonymous usage analytics (in the Android App, Settings → Anonymous usage analytics). You can turn it off at any time; the change applies immediately on your device. The iPhone App and the Android App work the same way: the PostHog and Meta SDKs are not started before you allow analytics, turning analytics off stops both, and every event is tagged with the platform (iOS or Android).
When it is on, the App sends usage events to:
If you are signed in and analytics is on, the App identifies you to PostHog by your Pinchart account ID, never by your email address. Your email address is never sent to analytics or advertising providers.
These providers also receive technical information from your device, such as device model, operating system version, app version, and IP address, as part of any network request.
| Purpose | Information | Legal basis (EEA/UK) |
|---|---|---|
| Provide rank tracking, history, alerts, widgets, reviews and share cards | Installation ID, token hash, tracked apps, alert rules, locale, time zone, push token (APNs or FCM) | Performance of a contract (providing the service you request) |
| Provide and verify Pinchart Pro | Installation ID, entitlement state, subscription events | Performance of a contract; legal obligations (accounting, tax) |
| Read-only App Store Connect features | Encrypted API credentials | Performance of a contract, at your request |
| Security, abuse prevention and reliability | Token hash, IP address (transient), request information | Legitimate interests in operating a secure service |
| Product analytics and advertising measurement | Usage events, device information | Consent (you can withdraw it at any time) |
| Diagnose and fix crashes | Crash reports, device information | Legitimate interests in keeping the App stable |
| Show ads in the free plan | Information processed by Google AdMob as described in Section 2 (approximate location from IP address, device and app information, ad interactions, diagnostics, app set ID on Android) | In the EEA, UK and Switzerland: consent through Google's consent message (you can change it at any time); elsewhere: legitimate interests in offering a free plan funded by ads |
We do not sell your personal information for money. We share information only with service providers that process it for us:
| Provider | Role | Information |
|---|---|---|
| Cloudflare, Inc. | Hosting, database, storage, network delivery; review translation on the Website (Workers AI) | All server-side information described in Section 2 |
| Apple Inc. | Push notification delivery to the iPhone App (APNs); App Store purchases; App Store Connect API (only if you connect it); Sign in with Apple (only if you use it) | APNs token and alert text; purchase data handled by Apple; your API key when making read-only requests; sign-in identifier, email address (may be a relay address) |
| Google LLC (Firebase, Google Play) | Push notification delivery to the Android App (Firebase Cloud Messaging); distribution of the Android App and Google Play Billing purchases; Google sign-in in the Android App (only if you use it); Google Play In-App Review; Google ML Kit in the Android App (on-device language identification and review translation) | FCM token and alert text; purchase data handled by Google; sign-in identifier, email address, name and picture (name and picture not stored by us); review dialog handled by Google; translation model downloads, and ML Kit diagnostics sent to Google (device model and OS version, app package and version, a per-installation identifier, performance metrics, model download events and errors, configured and identified languages, input and output sizes; review text stays on your device) |
| RevenueCat, Inc. | Subscription management | Installation ID or, if you sign in, account ID (as app user ID), purchase and subscription status |
| PostHog, Inc. | Product analytics (consent only) | Usage events and device information |
| Meta Platforms, Inc. | App event measurement for advertising (consent only) | Usage events and device information |
| Functional Software, Inc. (Sentry) | Crash reporting | Crash reports and device information |
| Google LLC (Google AdMob, User Messaging Platform) | Non-personalized ads in the free plan of the iPhone App and the Android App; consent message in the EEA, UK and Switzerland | Approximate location derived from IP address, device and app information, ad interaction data, diagnostics, app set ID (Android), your ad consent choice |
We may also disclose information if required by law, to protect rights and safety, or as part of a merger, acquisition, or sale of assets, in which case this policy continues to apply to the transferred information.
JoCoding, Inc. is located in the United States. Our providers process information in the United States and other countries where they operate (Cloudflare operates a global network). Where the law of your country requires it, we rely on appropriate safeguards for transfers, such as the European Commission's Standard Contractual Clauses included in our providers' data processing terms, or your consent. Google AdMob processes ad data in the United States and other countries where Google operates, relying on Google's own safeguards for international transfers.
If you have not signed in, we identify your data by the installation on your device; if you have signed in, we identify it by your Pinchart account. To exercise a right that you cannot exercise in the App, email mu07010@jocoding.net and include your account email address or installation ID if you can; we may need to verify the request before acting on it. We will respond within the time required by applicable law.
JoCoding, Inc. is the controller of the personal data described in this policy. You have the right to access, rectify, erase, restrict, or object to the processing of your personal data, the right to data portability, and the right to withdraw consent at any time without affecting the lawfulness of processing before withdrawal. You also have the right to lodge a complaint with your local data protection supervisory authority. We do not make decisions based solely on automated processing that produce legal or similarly significant effects on you.
In the last 12 months, the categories of personal information we have collected are: identifiers (installation ID, push token (APNs or FCM), RevenueCat app user ID, and, if you sign in, your email address and sign-in identifier), commercial information (subscription status and events), internet or other electronic network activity information (app usage events, only with consent), and approximate location derived from IP address or locale settings as processed by our providers. We collect this information from you and your device, from RevenueCat, Apple and Google for subscriptions, and from Apple and Google for sign-in. We use it for the purposes described in Section 5 and disclose it to the service providers listed in Section 6.
We do not sell personal information for money. If you opt in to analytics, sending app events to Meta for advertising measurement may be considered "sharing" for cross-context behavioral advertising under California law; you can opt out at any time by turning off analytics in Settings. We do not use or disclose sensitive personal information for purposes that require a right to limit. Depending on your state, you have the right to know, access, correct, and delete your personal information, to opt out of sale, sharing, or targeted advertising, and not to be discriminated against for exercising your rights. You may use an authorized agent; we may ask for proof of authorization.
In the free plan, Google AdMob receives identifiers (the app set ID in the Android App), internet or other electronic network activity information (ad interactions), approximate location derived from IP address, and device and diagnostic information to show and measure ads (Section 2). Ads are requested as non-personalized, so this information is not used to select ads based on your activity across other companies' apps and websites.
We also collect diagnostic information (crash reports) to keep the App working; it is disclosed only to Sentry as a service provider.
This section is provided under the Personal Information Protection Act (PIPA).
Pinchart is a tool for app developers and publishers and is not directed to children. We do not knowingly collect personal information from children under 13 (or under 16 in the EEA and UK, or under 14 in Korea). If you believe a child has provided us personal information, contact us and we will delete it.
We protect information with encryption in transit (TLS), encryption at rest for App Store Connect credentials and push tokens (AES-GCM), salted hashing of access tokens, and least-privilege access. No method of transmission or storage is completely secure, but we work to protect your information.
This section applies when you visit https://pinchart.jocoding.io (the "Website"). Everything else in this policy also applies to the Website unless this section says otherwise. Features described below that are not yet available on the Website apply from the day they become available.
Cookies and local storage. The Website uses only what it needs to work, plus analytics if you allow them:
| Name | Type | Purpose | When it is set | Duration |
|---|---|---|---|---|
pinchart.consent / pinchart.consent_at | Local storage in your browser; when you are signed in, the choice is also stored with your account | Remembers whether you accepted or rejected analytics | When you choose in the banner | Until you change it or clear your browser data |
Session cookie (pc_session) | First-party cookie, HttpOnly, Secure, SameSite=Lax, this site only | Keeps you signed in. It contains a random session ID; our server stores only a hash of it | When you sign in | Up to 30 days, or until you sign out or delete your account |
Sign-in cookies (pc_oauth, pc_handoff) | First-party cookies, HttpOnly, Secure, SameSite=None, sign-in pages only | Tie an Apple or Google sign-in to the browser that started it and carry the encrypted result back to this site (Apple returns you with a cross-site request) | When you start signing in | 10 minutes and 2 minutes, deleted when sign-in completes |
Preferences (pinchart.theme and other pinchart.… keys) | Local or session storage in your browser | Remembers your light or dark theme, notices and prompts you dismissed, and a checkout in progress | When you make the choice | Until you change it or clear your browser data (a checkout in progress: until you close the tab) |
PostHog (ph_… cookie and local storage) | Analytics | Product analytics, see below | Only after you accept | Up to one year, or until you reject |
Meta Pixel (_fbp cookie, and _fbc when you arrive from a Meta ad) | Advertising measurement | Measures our advertising, see below | Only after you accept, and only if a pixel is configured | Up to 90 days, or until you reject |
The strictly necessary items (your consent choice, the session and sign-in cookies, and the preferences you set) do not require consent. Nothing in the analytics rows loads, and no request is sent to PostHog or Meta, before you choose Accept in the banner.
Your consent choice and how to withdraw it. On your first visit the Website shows a banner with Accept and Reject buttons of equal weight. If you reject, or ignore the banner, no analytics or advertising scripts load. You can change your choice at any time with the Cookie settings link at the bottom of every page. When you withdraw consent, we stop analytics immediately in your browser, tell PostHog to stop capturing and clear its identifier, and revoke consent for the Meta Pixel. Withdrawing consent does not affect processing that took place before.
Advertising attribution. Only after consent, we keep campaign tags (UTM) and Meta browser/click identifiers (_fbp/_fbc, including an identifier derived from fbclid) in tab session storage (pinchart.attribution) until the tab closes or consent is withdrawn. When you sign in, we also store this attribution with your account for up to 90 days and send the Meta identifiers with the server subscription event to match an ad visit to a subscription; UTM tags accompany PostHog events. Pending purchase events are held for delivery retries for up to 7 days. Withdrawal clears the stored account attribution and cancels pending deliveries; deleting your account removes both. We do not send your email address or IP address for this purpose.
Analytics on the Website (only with your consent). With consent, the Website loads PostHog (product analytics; events such as page views, Website session started, sign-up, sign-in, tracked app added, chart browsed, paywall viewed, and purchase started or completed, with properties limited to values such as a public app ID, storefront code, chart type, or product ID) and, if configured, the Meta Pixel (Meta Platforms; page views, sign-up and checkout started in your browser, and the subscription event our server sends, used to measure our advertising). Page views sent to PostHog and Meta include the address of the Pinchart page (including campaign parameters such as utm_source or Meta's fbclid if the link you followed had them), the address of the page you came from, and browser and device information such as browser type, operating system, screen size and language. Automatic click capture and session replay are disabled. When you are signed in and have consented, we identify you to PostHog by your Pinchart account ID, never by your email address. When you are signed in, your choice is also saved with your account so that our server follows it. When you buy a subscription on the Website, and only if you have consented, our server sends a subscription event to Meta (Conversions API) with a hashed account ID, the product, price and currency, and the browser user agent of your sign-in session (no IP address), and a purchase event to PostHog with your account ID.
Signing in with Apple or Google. Signing in is optional for browsing the Website and required to use the web app and to purchase on the web. When you sign in, we receive from Apple or Google a stable user identifier for Pinchart and, if you share it, your email address and whether it is verified (Apple may give us a private relay address). Google also provides your name and profile picture under its "profile" scope; we do not store them. We store the identifier, the provider, your email address (if provided) and, for Apple, an encrypted refresh token used only to revoke the link when you delete your account. We use your email address only to operate your account and to contact you about it; we never send it to analytics or advertising providers, and we never merge accounts by email automatically. If you sign in to the same account in the iPhone App or the Android App, your tracked apps, alerts and Pinchart Pro are shared between the App and the Website. The Android App also uses this Website sign-in for Sign in with Apple (Section 2). Apple Inc. and Google LLC process your sign-in under their own privacy policies.
Email when the Pinchart apps launch. If you are signed in and choose Notify me when the apps launch on the Website, we store that request with your account and may send one email to your account's email address when the iPhone App becomes available on the App Store, and one when the Android App becomes available on Google Play (at most one email per app). We do not send it for an app you already use with that account. We do not collect an email address for this from visitors who are not signed in, and we do not use the request for marketing beyond those emails. You can turn it off in Settings › Account on the Website or with the unsubscribe link in the email at any time. Legal basis (EEA/UK): your consent.
Weekly summary email. If you are signed in, we email a summary of how your tracked apps' ranks changed during the week (for example the biggest rises and drops, new countries and Top 10 entries or exits) to the email address of your sign-in, at most once a week on Monday morning in your time zone and only in weeks with notable changes. Free accounts get it for the apps their plan includes. To send it at the right time and in your language, we use the time zone and language saved with your account: from your phone (iPhone or Android) if you signed in there, otherwise your browser's time zone and the Website language, which the web app saves once when your account has none. We also store whether the summary is on and which week was last sent. The email is delivered through Cloudflare Email Service (Cloudflare, Inc.), which processes your email address and the message to deliver it. It contains no advertising and no tracking pixels. If you have consented to analytics, we record in PostHog that a summary was sent or that you unsubscribed, with your account ID and never your email address. You can turn it off at any time in Settings › Email on the Website or with the unsubscribe link in every summary (one click; your mail app may also show an Unsubscribe button). Legal basis (EEA/UK): legitimate interests in keeping you informed about the apps you track in the service you use; you can object at any time by unsubscribing.
Purchases on the Website. Web subscriptions are sold by JoCoding, Inc. and billed through Stripe (Stripe, Inc. and its affiliates) with Stripe Billing: the Stripe Checkout page takes the payment, Stripe Tax calculates any tax that applies, the Stripe customer portal lets you update your payment method, see invoices or cancel, and Stripe sends receipts, invoices and billing emails (such as renewal reminders and failed-payment notices) to the email address you enter at checkout. Stripe receives your payment card or other payment details, name, billing address or country and email address directly; we never receive your full card number. Stripe sends us the checkout and subscription status, product, price, currency, dates and identifiers (Stripe customer, subscription and checkout IDs), and we store your Stripe customer ID with your account so that you can reopen the customer portal. To keep Pinchart Pro in sync between the Website and the App, we send RevenueCat (RevenueCat, Inc.) your Pinchart account ID (as the RevenueCat customer ID) and the Stripe subscription ID, and RevenueCat reads that subscription's status from Stripe (product, price, currency, dates, renewal and cancellation); RevenueCat does not process your payment. These records are kept like the subscription records in Section 8; Stripe also keeps payment and invoice records as the law requires, under its own privacy policy.
Security and abuse prevention. Cloudflare processes your IP address and request information for every visit. We use your IP address transiently to apply rate limits on public pages and sign-in, and the Website may show a Cloudflare Turnstile check on sign-in, which processes browser and device signals to tell people from bots. We do not store IP addresses in our database. Legal basis (EEA/UK): legitimate interests in a secure service.
Error reports. If the Website runs into an error in your browser or on our server, we record a technical error report: the error type and message, the stack trace, the page path (without query string), the Website version and a random identifier for that page view. We send it to Sentry (Functional Software, Inc.) so we can fix the problem. Before sending, we remove email addresses, account and installation IDs, tokens and query strings. Error reports contain no IP address, cookies, browser fingerprint or account identifier, and do not depend on analytics consent because they are needed to keep the Website working. Sentry keeps them for up to 90 days. Legal basis (EEA/UK): legitimate interests in a stable service.
Browser notifications. If you turn on browser notifications (Settings › Notifications, or the prompt on the Alerts page), your browser creates a push subscription and we store it with your account: the push endpoint URL issued by your browser's push service, the public encryption key and authentication secret your browser generated for it, a coarse browser family (for example "chrome" or "safari", not the full user agent), and when it was created and last delivered. If your account has no time zone or language yet, we also save your browser's time zone and language so that alerts respect your quiet hours and use your language. Each notification (app name, rank, country and chart, and a link to the page in the web app) is encrypted for your browser before it leaves our server and is delivered through the push service run by your browser's vendor, for example Google (Chrome and most Chromium browsers), Mozilla (Firefox), Apple (Safari) or Microsoft (Edge on Windows). The push service sees only the encrypted message, its size and time, and the endpoint. To turn notifications off, use Turn off in Settings › Notifications, block notifications for pinchart.jocoding.io in your browser's settings, or remove Pinchart from your Home Screen on iPhone. We delete a subscription as soon as you turn it off, mark it inactive when the push service reports that it no longer exists and delete it 30 days later, and delete all of them when you delete your account. Settings › Notifications › Where alerts go lists the phones and browsers that receive your alerts (device type, app version, browser family and when each was last active) and lets you mute any of them; we store when you muted it and skip it when sending alerts until you turn it back on. Legal basis (EEA/UK): performance of our contract with you (delivering the alerts you ask for).
Contacting support. If you send a message with the Contact support form in Settings › Support on the Website, we store it with your account and email it to our support inbox through Cloudflare Email Service together with the topic you chose, your account ID (which is also your RevenueCat customer ID), your plan and where you bought it, the Website version, your browser and operating system family (not the full user agent), language, time zone, the page you wrote from and the Website's feature settings, plus your sign-in email address only if you tick Reply to this address, so that we can answer you and fix the problem; we delete these messages when you delete your account (legal basis (EEA/UK): legitimate interests in answering your request).
Slack and Discord alerts (Pinchart Pro). If you add a Slack or Discord channel in Settings › Slack & Discord on the Website, we store the incoming-webhook URL you paste (encrypted; the Website only ever shows a masked form), the name you give it, which alert types it receives and whether it receives only the daily summary, and when it last received a message or failed. The alerts you choose (app name and icon, rank, country and chart, and a link to the app's public page on the Website) are then posted to that channel through Slack (Slack Technologies, LLC) or Discord (Discord Inc.), which process the message under their own privacy policies and show it to everyone who can see that channel. We send no email address or account ID to Slack or Discord. If you have consented to analytics, we record in PostHog that a destination was added or that alerts were delivered (service name and counts only, never the webhook URL). You can turn a destination off or remove it at any time in Settings; removing it deletes the stored URL immediately, and deleting your account deletes all of them. If Slack or Discord reports that the webhook no longer exists, we stop sending to it and show that in Settings. Legal basis (EEA/UK): performance of our contract with you (delivering the alerts you ask for).
Similar apps. To find similar apps and competitors, we send the public App Store and Google Play listing text of apps (name, developer, store category, price and description) to OpenAI (OpenAI, L.L.C.), which classifies each app into categories for us; this contains no information about you or your use of Pinchart.
Additional providers for the Website.
| Provider | Role | Information |
|---|---|---|
| Google LLC | Sign in with Google | Sign-in identifier, email address, name and picture (name and picture not stored by us) |
| Apple Inc. | Sign in with Apple on the web | Sign-in identifier, email address (may be a relay address) |
| RevenueCat, Inc. | Pinchart Pro status sync for web subscriptions | Account ID, Stripe subscription ID, subscription status |
| Stripe, Inc. | Web subscription billing: checkout, payment processing, tax calculation, invoices, receipts and billing emails, customer portal | Payment details, name, billing address or country, email address, purchase history |
| Cloudflare, Inc. | Website hosting, rate limiting, Turnstile; delivery of the weekly summary email (Cloudflare Email Service); review translation for Pinchart Pro (Cloudflare Workers AI) | IP address, request and browser information; your email address and the summary email; public review text (not personal data about you) |
| PostHog, Inc. | Website analytics (consent only) | Usage events, browser and device information, account ID if signed in |
| Meta Platforms, Inc. | Advertising measurement (consent only) | Page views and conversion events, browser information, hashed account ID |
| Functional Software, Inc. (Sentry) | Website error reports | Error type and message, stack trace, page path, Website version, random page-view ID |
| Your browser's push service (Google, Mozilla, Apple or Microsoft, depending on your browser) | Delivering browser notifications | Encrypted notification, push endpoint, delivery time |
These providers process information in the United States and other countries; Section 7 applies. For users in Korea, these providers are part of the entrustment and overseas transfer described in Section 12; analytics and advertising transfers happen only with consent, and the others are necessary to provide the Website features you use.
Retention for the Website. Account and sign-in identities: until you delete your account. Sessions: until you sign out or they expire, then deleted. Your consent choice stays in your browser until you change it or clear browser data and, if you were signed in, with your account until you change it or delete your account. Browser push subscriptions: until you turn notifications off or delete your account; subscriptions the push service reports as expired are deleted after 30 days. The app launch email request and the record of which launch emails we sent: until you turn the request off or delete your account. The weekly summary setting and the last week sent: until you delete your account.
Deleting your account. You can delete your account on the Website in Settings › Danger zone › Delete account; https://pinchart.jocoding.io/account/delete explains how, including if you can't sign in. Deleting your account removes your account, sign-in identities, sessions, tracked apps and alert data from our server and revokes the Apple sign-in link. In the iPhone App and the Android App, Settings → Delete everything also deletes your account when you are signed in. Deleting your account does not cancel a subscription: cancel a web subscription in the customer portal (Settings › Subscription › Manage billing on the Website), an App Store subscription in your Apple Account settings, and a Google Play subscription in the Play Store app. Deleting your account also deletes every browser push subscription stored for it.
We may update this policy. We will post the updated version with a new effective date and, where changes are material, notify you in the App or by other appropriate means before they take effect.
JoCoding, Inc. 1111B S Governors Ave, STE 80543, Dover, DE 19904, United States mu07010@jocoding.net · +1 (231) 450-5622