This legal document is provided in English as the canonical version.
Legal
Pinfold (“we”, “us”) operates the Pinfold mobile application
(com.pinfoldai.fileexplorer) and related services at
api.pinfoldai.com.
This policy explains what data we collect, why, and your choices.
1. Data we collect
Account data
- Email address, display name, and country when you register
- Authentication tokens when you sign in with Google or Apple
- Subscription and billing status (via Google Play, App Store, or Stripe)
Device & app usage
- App preferences, language, and settings stored locally or synced to your account
- Crash diagnostics and anonymized usage metrics if enabled by your device/OS
- App lock PIN is stored locally on your device — we do not receive your PIN
Files & content
- Local files: processed on your device; we do not upload your entire file library unless you explicitly use cloud backup, vault sync, or social publishing
- Social publishing: media and captions you choose to publish are uploaded temporarily to our servers to deliver posts to connected platforms
- Cloud providers: when you connect Google Drive, OneDrive, or Dropbox, we store OAuth tokens to sync on your behalf — we do not sell file contents
Support & feedback
- Messages, screenshots, and attachments you submit through in-app feedback or email
- Content reports and abuse complaints you file through the app
2. How we use data
- Provide file management, security, cloud sync, and social publishing features
- Authenticate you and maintain your session across devices
- Process subscriptions and enforce plan limits
- Detect spam, abuse, and violations of our Acceptable Use Policy
- Respond to support requests and legal obligations
3. Legal bases (EEA/UK)
Where applicable, we process data based on: contract performance (providing the Service), legitimate interests (security, abuse prevention), consent (optional features), and legal obligation.
4. Sharing with third parties
- Social platforms (Facebook, Instagram, Threads, X, TikTok, etc.) when you connect accounts and publish
- Cloud providers (Google, Microsoft, Dropbox) when you enable sync
- Payment processors (Google Play, Apple, Stripe) for subscriptions
- Infrastructure hosting providers for our API (e.g. Hetzner)
- Law enforcement when required by valid legal process
We do not sell your personal data.
5. Retention
- Account data is kept while your account is active
- Social upload copies are deleted after publishing completes or within 30 days
- Billing records may be retained as required for tax and fraud prevention
- See Data Deletion to request removal
6. Security
We use HTTPS, encrypted token storage on servers, and industry-standard practices. You are responsible for your device passcode, vault passphrase, and connected account security.
7. Your rights
Depending on your region, you may have rights to access, correct, delete, or export your data, and to object to certain processing. Contact [email protected] or use in-app account deletion.
8. Children
Pinfold is not directed at children under 13 (or 16 in the EEA). We do not knowingly collect data from children.
9. International transfers
Data may be processed in countries where we or our providers operate. We use appropriate safeguards where required.
10. Changes
We may update this policy. Material changes will be reflected in the “Last updated” date above.
11. Contact
Privacy inquiries:
[email protected]
Contact & complaints form