Privacy Policy

Last updated: September 12, 2026

Pinpho is an Android app developed by Calvin Ssendawula. This policy explains what Pinpho does with your information. The short version: Pinpho collects nothing, transmits nothing, and has no technical ability to do either.

1. No data collected, no data shared

Pinpho does not collect, transmit, sell, or share any personal or sensitive user data. There are no user accounts, no analytics, no advertising, no crash reporting, and no third-party SDKs that collect data of any kind.

2. No internet access

Pinpho cannot connect to the internet. The app does not declare Android's INTERNET permission, which means the operating system blocks all network access at the system level — this is enforced by Android, not promised by us. You can verify it yourself in Android's app info screen for Pinpho, which lists no permissions.

3. What is stored on your device

When you pin a photo, Pinpho stores a reference to that photo (a content:// URI issued by Android), the time you pinned it, an optional expiry time, and its position in the grid. It does not copy or store the photo itself. That list is stored only on your device and encrypted at rest with AES-256, using a key held in the Android Keystore.

Pinpho has no access to your photo library. It can only see the individual photos you explicitly share into it or choose in the system photo picker.

4. Permissions

Pinpho requests no runtime permissions. It has no access to the internet, your location, your contacts, your camera, your microphone, your clipboard, or your photo library as a whole.

5. Biometric authentication

Pinpho requires your fingerprint, face, or device PIN to open. This is handled entirely by Android's own BiometricPrompt. Pinpho never receives, stores, or transmits biometric data — the operating system only tells the app yes or no.

6. Deleting your data

Unpin a photo to remove its reference immediately. Uninstalling Pinpho deletes all of its data. Because nothing ever leaves your device, there is no server-side copy to request the deletion of and no deletion request to submit.

7. Children

Pinpho is not directed to children under 13. It collects no data from anyone, children included.

8. Changes to this policy

If this policy changes, the updated version will be published at this same URL with a new "last updated" date. Because Pinpho collects no data, any change will be a clarification of wording rather than a change in practice.

9. Contact

Questions about this policy: calvinssendawula@gmail.com