PinIQ Privacy Policy

Effective date: 20 September 2026

This privacy policy explains how Kagool Studios Ltd ("Kagool Studios", "we", "us") handles information when you use PinIQ on iOS or Android. PinIQ is a private catalogue for a user's own pin collection. It has no Kagool Studios account, advertising, catalogue-usage analytics or cross-app tracking.

Information you add to PinIQ

You may add catalogue information such as pin and collection names, reference numbers, origin, edition, category, status, favourites, dates, notes, prices paid, estimated values and a catalogue currency. You may also take or select front and back photos of pins. PinIQ uses this information to organise and display your catalogue, create exports that you request, and provide the optional eBay lookup features described below.

The camera and photo-library features are optional:

• On iOS, PinIQ asks for camera access only when you choose to take a photo. Apple's system photo picker lets you select an image without granting PinIQ unrestricted access to your photo library.
• On Android, PinIQ uses the system camera app and system photo picker. PinIQ receives the photo you take or select; it does not request broad photo-library or storage access.

Selected images are resized and encoded on your device before they are stored in the catalogue. Temporary camera captures and editing files are held in the app's private cache only as needed to complete or cancel the operation.

Storage on iOS

PinIQ stores your catalogue on your device. When iCloud is available, Apple syncs the catalogue, its photos and the selected catalogue currency through the private iCloud account signed in on your device. If iCloud is unavailable, PinIQ falls back to local storage so that the app can continue working.

Kagool Studios does not operate a PinIQ account system or an administration interface that can browse your private catalogue. Apple's handling of iCloud data is governed by your Apple account settings and Apple's terms and privacy policy.

Apple Privacy Policy: apple.com/legal/privacy

Storage on Android

PinIQ stores its database, photos and catalogue currency in app-private storage on your Android device. The current Android app:

• uses Internet access for optional eBay lookups, sending only the selected photo or lookup fields described below;
• has no automatic cloud sync;
• opts out of Android cloud backup, device-to-device transfer and cross-platform transfer; and
• has no advertising, analytics or crash-reporting SDK.

Kagool Studios cannot see or recover this local catalogue. To avoid losing it when a device is lost, reset or replaced, you should create a complete backup and keep it somewhere safe.

PinIQ Pro purchases on iOS

The iOS app uses RevenueCat to display the PinIQ Pro offer, verify the one-time lifetime purchase, restore it, and provide purchase support through Customer Center. To provide those functions, the app sends RevenueCat a randomly generated anonymous app-user identifier and receives purchase-history and entitlement information. RevenueCat may also process ordinary technical information needed to operate and secure its service, such as app and operating system versions and network connection information.

PinIQ does not send RevenueCat your catalogue, photos, notes, values, iCloud identity, name, email address or advertising identifier. PinIQ has no account to attach to the RevenueCat identifier, and the information is not used for advertising or cross-app tracking. Apple separately processes the payment and App Store purchase under your Apple account, terms and privacy policy.

We use this information only to provide, restore and support the Pro purchase you request, create aggregate purchase reports and keep purchase access reliable. We do not use it to analyse how you use catalogue features. Our UK GDPR lawful bases are performance of our obligations connected with that purchase and our legitimate interest in preventing purchase errors, unauthorised access and failures in the purchase flow.

An Apple purchase applies only to the iOS app. PinIQ has no cross-platform account system that could transfer an Apple entitlement to Android.

Backups, CSV exports and sharing

In addition to private iOS iCloud sync and optional eBay lookups, you can deliberately export or share catalogue information:

• On iPhone and iPad, Backup & Restore in Settings saves a .piniqiosbackup file containing collections, pins, photos and catalogue currency to the location you choose in Files. Restore reads only the file you select and replaces the active catalogue after validation and confirmation. Restored data in an iCloud catalogue syncs through your private iCloud account. The backup does not contain your iCloud identity or Pro purchase information.
• On Android, Create Complete Backup asks Android's system file picker for a destination. The resulting.piniqbackup archive contains collections, pins, photos and the selected catalogue currency. Restore Complete Backupreads only the file you select and restores it into local app storage.
• On iOS and Android, Export Catalogue (CSV) creates a spreadsheet containing the catalogue's text fields, collection names, numeric values, currency, favourite state and dates. Photos are not included in CSV files.
• Backup dates and Android reminder snoozes are stored only on the device. They are not included in catalogue backups or sent to Kagool Studios.
• The operating-system share sheet or file picker lets you choose the app, service or location that receives an export. PinIQ does not automatically upload it, and Kagool Studios does not receive a copy.

CSV files and complete-backup archives can contain information that is private to you. PinIQ does not encrypt these export files. The recipient or storage provider you choose controls their subsequent handling, security and retention, so share them only with people and services you trust and delete copies you no longer need.

Optional eBay photo matching and pricing

PinIQ 1.4 on iOS and pricing-enabled Android releases offer optional eBay UK lookups. Earlier pricing-disabled builds do not send these requests. You can continue adding, editing and saving pins manually without using online lookup, including offline.

To find a pin from a photo, take or choose a front photo and press Find this photo on eBay. Each action sends a separate upright JPEG copy to PinIQ's Cloudflare pricing service and then to eBay. The copy is limited to 1,024 pixels on either axis and 256 KiB. PinIQ removes location, camera and other image metadata before upload. The original library asset and back photo are not uploaded. Taking or adding a photo alone does not upload it for a search.

Scan pin starts the same search from the camera. PinIQ explains what will be sent before the camera opens, and the scan you start authorizes that one upload. You can leave the scanner and enter the pin by hand at any point.

For a pin already in your catalogue, Find this pin on eBay sends a copy of that pin's saved front photo in the same way. Each pin needs its own action. PinIQ never scans your catalogue on its own, in the background or in bulk.

Visual matches are suggestions and can be wrong. You choose a matching listing before reviewing its details. PinIQ uses that listing's current title for a separate text search to obtain a multi-seller asking-price estimate. It does not calculate an estimate from the mixed visual matches alone.

You can also search using a pin name and optional reference. Look up new pins automatically is initially off and is a preference for that device. If you turn it on, PinIQ searches after a pause while you enter a new pin's name and reference. It does not automatically refresh your existing catalogue. You can turn it off at any time. This text-lookup setting never authorizes a photo upload; each photo search needs its own explicit action.

Each request sends a random, non-secret install identifier and ordinary network connection information to our Cloudflare service for rate limiting. The install identifier is not forwarded to eBay. Text searches also send the pin name and optional reference. Choosing a listing sends its eBay item identifier to retrieve current details. Photo searches send only the prepared front-photo copy described above. PinIQ does not send notes, collection membership, prices paid or your iCloud identity to the pricing service or eBay. Opening an eBay listing uses your browser and is subject to eBay's own privacy notice.

The service returns up to five matching listings and, where enough distinct sellers have usable listings, an aggregate asking-price estimate in GBP, excluding postage. These are current asking prices, not completed-sale prices, a verified identity or a guaranteed resale value.

Photo data is processed in memory for the request. PinIQ's service does not save uploaded photos or listing details in its cache, and does not put photo bytes, lookup text, item identifiers or seller identities in application logs. The app holds search results and listing details in memory, requires them to be refreshed after 15 minutes, and discards them when the relevant photo, draft, account, catalogue or currency changes. The separate manual price-check route caches aggregate estimates for 15 minutes under hashed lookup keys.

The service turns the install identifier and connection IP into separate keyed, one-way hashes, using a secret that is never included in the app. It uses them for short per-minute limits and for daily limits per install and per network. To enforce the daily limits it stores each hash with minute-bucket call counts. Shared quota protection also stores aggregate call counts and timestamps. Each count expires after a rolling 24-hour window, with up to one additional minute before capacity reopens. Expired records are deleted the next time the service checks the daily allowance; without another check, they remain stored. Cloudflare's storage recovery can restore deleted records for up to 30 days. These records contain no raw install identifier or IP address and no photo, query, item or seller data. Cloudflare may also process ordinary service metadata, and eBay handles the information it receives under its own terms and privacy notice. PinIQ's 15-minute result lifetime does not set the retention period of an independent provider.

After reviewing a listing, you can choose to fill blank origin, edition and estimated-value fields. Photo matching can also fill a blank pin name from the selected listing title. An estimated value uses the multi-seller median only when your catalogue uses GBP. Existing fields, including entered zero values and the price paid, are preserved unless you choose the separate Replace estimated value action, which overwrites only that one value with the median. PinIQ does not copy listing photos or seller information into your catalogue.

Nothing is saved automatically. If you save the pin, the suggestions you accepted become catalogue fields and follow the same device storage, private iCloud sync, backup, export and deletion behaviour as other catalogue information. Those saved fields can outlive the temporary search results and the source listing.

Our UK GDPR lawful basis for operating this optional feature and protecting it from abuse is our legitimate interest in providing the feature you ask for and keeping it reliable and secure. The information used is limited to the fields listed above, lookup and rate-limit records are kept separate, and none of it is used for profiling or advertising.

Support requests

If you contact Kagool Studios for support, we receive the information you choose to send, such as your email address and message. Please do not send a catalogue export, backup or private photo unless it is necessary to explain the problem and you intend us to receive it.

We use support information to answer your request and maintain PinIQ. Our UK GDPR lawful basis is our legitimate interest in providing support and keeping the app reliable and secure. We normally delete routine support correspondence within 24 months after the request is closed. We may keep a record longer when reasonably necessary to meet a legal obligation or to establish, exercise or defend legal claims.

Sharing and service providers

Kagool Studios does not sell personal information. We do not share catalogue information with advertising, analytics or data-broker partners.

We use the following service providers only to operate PinIQ:

• Apple, for private iCloud/CloudKit sync through the iCloud account signed in on your device.
• RevenueCat, for the anonymous iOS PinIQ Pro offering, entitlement, purchase restoration and Customer Center functions described above. RevenueCat does not receive catalogue information.
• Cloudflare, to operate the pricing service and protect it from abuse, and eBay, to provide the optional searches and listing details described above.

We require providers that receive information from PinIQ to apply the same or equivalent protection as this policy describes.

Apple and Google may independently process app-store, installation, security and device-diagnostic information under their own terms, privacy policies and device settings. A destination you deliberately choose for a backup, CSV or share also processes that file under its own terms. Kagool Studios does not control those independent services.

International processing

Our service providers may process information outside the United Kingdom. Their handling is governed by contractual terms, privacy policies and applicable transfer safeguards. Where required, we rely on UK adequacy regulations or approved contractual safeguards such as the UK International Data Transfer Agreement or the UK Addendum to the European Commission's standard contractual clauses. Contact us for information about the safeguard relevant to your information.

Security, retention and deletion

PinIQ relies on the operating system's app sandbox to protect local catalogue data. On iOS, private sync uses Apple's iCloud security. System photo pickers limit access to the images you choose. No method of storage is completely secure, and exported files are only as secure as the destination you select.

Catalogue information remains until you delete it or the relevant platform removes it:

• Delete a pin in PinIQ to delete that pin and its stored photos. Deleting a collection leaves its pins in PinIQ as unfiled, so delete those pins separately if you also want them removed.
• On Android, clearing PinIQ's app storage or uninstalling PinIQ removes its local catalogue. Because automatic backup and transfer are disabled, Kagool Studios has no remote copy to delete or restore.
• On iOS, deleting synced catalogue items sends those deletions to your private iCloud catalogue. You can manage any remaining PinIQ data through your Apple account's iCloud storage settings. Deleting the app from one device does not by itself guarantee deletion of data retained in iCloud.
• A CSV or complete backup saved outside PinIQ remains with the destination you selected until you delete it there. Removing PinIQ does not remove those exported files.

Apple and RevenueCat retain purchase records as needed to provide purchase history, restoration, support, fraud prevention and legal compliance, subject to their respective policies and controls. Removing PinIQ does not erase an App Store purchase. Contact us if you want to exercise a data-protection right concerning the anonymous RevenueCat customer record; we may need information from the app or purchase to identify the correct record safely.

Because PinIQ has no Kagool Studios account and we do not hold a hosted copy of your catalogue, we cannot remotely delete or retrieve that catalogue for you. You may contact us to request deletion of support correspondence that we hold.

Your data protection rights

Depending on the circumstances, UK data-protection law may give you rights to access, correct or erase personal information, restrict or object to its processing, and receive portable information. You may object at any time to processing we carry out on the basis of our legitimate interests. These rights can be limited by law, and because PinIQ has no account we may be unable to identify a particular request as yours without additional information.

Contact us to exercise a right. You can also complain to the UK Information Commissioner's Office at ico.org.uk or by calling 0303 123 1113. We would appreciate the opportunity to address your concern first.

Changes

We may update this policy when PinIQ, its platform services or applicable legal requirements change. We will publish the revised policy with a new effective date. Store privacy disclosures must be reviewed before releasing any version that enables network pricing, online accounts, analytics, advertising or a new form of purchase handling, sync or data transfer.

Contact

Email: [email protected]