PinvoyPrivacy Policy
Last updated: 9 November 2026
This policy explains what information Pinvoy collects, why, where it is stored, how long we keep it and how you can delete it. We have tried to keep it short and plain.
1. In short
- Pinvoy is for people aged 13 and over.
- To play, you create an account with an email code, Apple or Google. We store your email address, the first name you give us and a backup of your progress.
- If you send feedback or report a bug, we store what you write. If the app crashes, it sends a technical crash report. You can turn crash reports off in Settings.
- There are no ads, no analytics tools and no tracking. We do not sell or share your information.
- We do not ask for your age, location, contacts, photos or phone number.
- You can delete your account in the app at any time: Settings › Delete account. It is deleted immediately.
2. Who we are
Pinvoy is operated by ELNAMA LLC, a company registered in Wyoming, USA. ELNAMA LLC is responsible for your information (the "controller").
- Address: 30 N Gould St Ste N, Sheridan, WY 82801, USA
- Privacy questions and requests: [email protected]
- Support: [email protected]
3. Age
Pinvoy is not meant for children under 13. We do not knowingly collect information from children under 13. If you believe a child under 13 has created an account, write to [email protected] and we will delete it. In some countries a higher age applies for using online services without a parent's permission; if that is the case where you live, please use Pinvoy only with your parent's or guardian's permission.
4. What we collect
When you create an account
- Email address. If you sign in with an email code, we send a one-time code to your email address. If you sign in with Apple or Google, we receive the email address they give us (with Apple this can be a private relay address).
- First name. The name you type in the app, or the first name Apple or Google gives us. Only you see it in the app; other players never see it.
- Account ID and a traveller number (for example "Traveller 123") that the server creates. In this version no other player sees it.
While you play
- A backup of your progress, so you can continue on a new phone: finished lessons, your answers in lessons (which question, right or wrong, whether you used a hint, how long the answer took), stamps in your passport, place statistics, your duel results with Bipi, and app settings such as language and sound.
- A random install ID. A random number created when the app is first opened. It is not a device identifier. We use it to count players and to stop spam.
When you write to us
- Feedback and bug reports. The text you write, plus the app version, the app language, the phone's operating system and its version, and the name of the last screen (for bug reports). The form shows these technical details before you send it.
- Emails you send to support@ or privacy@.
Automatically
- Crash reports. When the app crashes or an error happens: the error message and technical trace, the app version, the operating system and its version, the last screen and the install ID. Text you typed into forms and email addresses are removed before sending. You can turn crash reports off: Settings › Crash reports.
- Anti-spam counters. A daily counter based on a scrambled (hashed) version of your IP address and install ID. We do not store your IP address itself.
- Technical logs kept by our hosting provider: IP address, device and browser type, time of the request. These are used for security.
- Map requests. When a map opens, your phone downloads map images from OpenFreeMap and, for the terrain view, from Amazon Web Services. These services see your IP address in order to send the map. We do not receive anything from them.
5. What we do not collect
Your age or date of birth, last name, phone number, address, school, location (GPS), photos, video, audio, contacts, advertising ID, device hardware numbers, or payment details. Pinvoy has no ads, no analytics or tracking tools and no push notifications. Widgets on your home screen only use information stored on your phone.
6. Why we use your information
| Purpose | Information | Legal basis (EU, UK and similar laws) |
|---|---|---|
| Creating your account and letting you sign in | email, sign-in codes, account ID | providing the service you asked for (contract) |
| Saving your progress and restoring it on a new phone | progress backup, first name | contract |
| Answering your feedback and fixing reported bugs | feedback and bug reports | contract and our legitimate interest in improving the game |
| Finding and fixing crashes | crash reports | legitimate interest; you can turn it off |
| Protecting the service and stopping spam | anti-spam counters, technical logs | legitimate interest |
| Counting how many people have started playing | install ID, time of the first lesson | legitimate interest |
We do not use your information for advertising, we do not build profiles of you, and we do not sell or share your personal information, including as "sale" or "sharing" is defined in California law.
7. Who sees your information
Other players do not see your email, your name or your progress. Our small team can see the information described above when needed to run the service and answer you. We use these service providers, who process information only on our instructions:
- Supabase: database, sign-in and server functions. Servers in the European Union (Frankfurt, Germany).
- Apple and Google: only if you choose to sign in with them.
- An email delivery service: sends the sign-in codes.
- Cloudflare: hosts this website and forwards emails sent to our addresses.
- OpenFreeMap and Amazon Web Services: deliver map images (see section 4).
We may disclose information if the law requires it, or to protect the safety of people or the service.
ELNAMA LLC is a US company and some providers may process information outside your country. When information leaves the European Economic Area or the United Kingdom, we rely on safeguards such as the European Commission's Standard Contractual Clauses.
8. How long we keep it
| Information | How long |
|---|---|
| Account, name, progress backup | until you delete your account |
| Feedback and bug reports | 12 months, then deleted automatically |
| Crash reports | 90 days, then deleted automatically |
| Anti-spam counters | 7 days |
| Install ID in the player count | 12 months, then removed (only the total remains) |
| Backups of the database | up to 14 days |
| Technical logs | according to our hosting provider's log retention |
| Emails to support@ and privacy@ | as long as needed to answer, and at most 24 months |
9. Deleting your account
In the app: Settings › Delete account. The deletion is immediate and cannot be undone. We delete your account, email address, name, traveller number, progress backup, and the feedback and crash reports sent from that phone. The progress on your phone is removed too. Copies in database backups disappear within 14 days.
Without the app: see Delete your account.
Signing out (Settings › Sign out) does not delete anything.
10. Your rights
Depending on where you live, you can ask us to: tell you what information we hold about you and give you a copy; correct it; delete it; give it to you in a file you can take elsewhere; restrict or object to how we use it. Write to [email protected] from the email address of your account. We answer within one month. We will not treat you differently for using these rights.
You can also complain to the data protection authority in your country.
11. Security
Information travels over encrypted connections. Access to the database is limited to the systems and people who need it. No system is perfectly secure; if a breach affects your information, we will tell you and the authorities as the law requires.
12. Changes
If we change this policy, we will publish the new version on this page with a new date. If the change is important, we will also tell you in the app.
13. Contact
[email protected] · ELNAMA LLC, 30 N Gould St Ste N, Sheridan, WY 82801, USA