Your places.
Your choice to share.

The short version

• Personal use is local. Personal pins, photos, and Treks work without a sharing account.
• Sharing is optional. You choose a named private Trek and confirm what to publish.
• No ads, tracking, or data sales. There is no live person tracking or background GPS collection.

Sharing does involve sending precise pin locations and other chosen content to a service and other participants. Offline recipients and provider records have limits on what can be removed immediately, explained below.

What stays on your iPhone

Personal pins contain a name, an optional note, a saved location, facing information when available, and reference photos. Personal Treks organize those pins locally. You can use this personal library signed out and offline.

PinGoTrek keeps reduced photo copies and previews in the app. New full-resolution camera originals are saved to the system Photos library when you grant permission. Removing a pin or an app photo does not delete that Photos original. Your system Photos library may sync through iCloud according to your Apple settings, independently of PinGoTrek.

Permissions follow the feature

Location is used while using the app to save places and help navigate. Camera access supports taking photos and the directional AR view. Motion supports camera-facing information; Photos access supports saving originals and choosing images. There is no microphone or background-location requirement.

Photo copies can include the pin’s precise coordinates and facing information, with capture-location information when available and permitted. Treat a photo export as location-bearing content, not just an image.

What private Trek sharing sends

Sharing uses Supabase in North Virginia, United States. The service stores the sharing account, Trek and membership information, and the pins you choose to publish: pin names, notes, precise locations, facing information, and associated photo information.

Photo sharing sends reduced copies, no larger than 250 KB each, and previews no larger than 20 KB. It does not upload your full-resolution system Photos originals. These limits include photo metadata.

Publication and photo sharing require explicit consent for the named Trek. Joining a Trek, signing in, or organizing a personal Trek does not publish your personal library.

Published pins are linked to their creator’s edits. Later edits update the shared version. After you opt in to sharing photos for that pin, later added or changed photo versions follow that link. New pins and a first photo-sharing opt-in still require your explicit choice.

Participants with access to the Trek can receive its shared content. Share only places, notes, and photos you are comfortable giving them; the service is not an end-to-end encrypted messaging system.

Your sharing identity

Private sharing requires Sign in with Apple and a single-use beta-access invitation. Apple provides an app-specific stable user identifier and, when provided, your name and email address. An Apple relay email may be used if you choose Hide My Email.

These details support authentication, admission, Trek membership, and account requests. PinGoTrek does not receive your Apple password.

The beta has ten retained admission places, including the organizer. Deleting an account does not recycle a place or make its invitation reusable. In the current beta, the same Apple identity cannot enroll again after deletion, even with a new invitation. A minimal participation record may remain to enforce admission and prevent abuse; it is not a reusable sharing account.

Delivery is temporary. A Trek is not.

Shared Trek and pin information remains available until sharing is ended or withdrawn. Treks do not automatically expire. Photo delivery is different: reduced photos use a temporary delivery window of no more than 24 hours.

Completed delivery acknowledgments, expiry, or removal can trigger earlier cleanup. The service queues deletion of the active stored photo objects and retries if deletion fails. The delivery cutoff is not a promise that every provider-internal cache or backup has been physically erased at that moment.

Photos and pins already received can stay on a participant’s device for offline use. They can remain there until the app reconnects and verifies that access has been revoked. Confirmed removal or ending, or signing out, clears the app-managed received cache. Content already received cannot be remotely recalled with certainty.

Deleting or unsharing while offline can also leave other participants with access until the service confirms the withdrawal. Closing the photo-delivery window does not delete a Trek or photos already received. Offering expired photos again requires the creator’s explicit resend.

When you request account deletion

Sharing-account deletion is separate from sign-out and from removing personal data. The in-app flow requires an authenticated sharing session, your explicit confirmation, and fresh verification with Apple. Completed deletion removes the sharing account and associated active sharing access and content, while cleanup of stored photo objects may need retries.

Your local personal pins, on-device personal photos, personal Treks, and system Photos originals are preserved. The app clears received shared content and its sharing-account cache on your device. The limits on recalling copies held by other participants still apply.

App-account and shared-data deletion can complete independently of Apple access revocation. Automatic Apple revocation is best effort, and its status is reported separately. If it is unconfirmed, follow the Apple Account settings guidance or retry with fresh Apple verification where offered, without signing back into PinGoTrek or enrolling again.

Apple authorization codes and access or refresh tokens used for deletion-time verification and revocation are held only in request memory. PinGoTrek does not store those credentials in durable jobs for later revocation.

A minimal recovery receipt, a hashed Apple identity identifier, retained beta-admission and media-usage records, and pending cleanup information may remain without a reusable account profile. These records support deletion recovery, enforce retained admission places, and track usage and cleanup. Service providers may also retain operational records or backups under their own policies. We do not promise immediate physical erasure of all provider-held copies or a fixed retention period for these records.

Account-deletion controls are not present in every beta build. Use the control if your build has it, or contact support to request deletion. See account help for the separate Sign in with Apple revocation step when needed.

Other services and these pages

Service operation

Apple provides sign-in and TestFlight distribution; Supabase provides private sharing. Network, session, and diagnostic information, including IP addresses, may be processed or retained by service providers. PinGoTrek does not intentionally log photo contents or complete authentication tokens, but that is not a promise that providers retain no operational data.

Maps and one-time exports

Map imagery can use Apple’s services. Choosing external directions sends the selected pin’s coordinates to Apple Maps. These services follow their own privacy practices.

If you choose a one-time email or system share-sheet export, your selected mail or sharing app handles the content. The export can include reduced photos, notes, precise coordinates, facing information, and map links. It is a forwardable snapshot: recipients and their providers can retain it. Ending a Trek or deleting a sharing account does not retract that export.

This website

These public support and privacy pages use no analytics, cookies, trackers, external fonts, or third-party embeds. GitHub Pages hosts this website. GitHub logs and stores visitors' IP addresses for security purposes and may process routine request information to operate the service. See the GitHub Privacy Statement. There is no account sign-in or upload form on this site.

If you email support, your email provider and the support mailbox process your address and message so we can answer the request. Do not send private photos, passwords, sign-in codes, or invitation links.