1. Information we collect
MoiPin collects only the minimum needed to provide the service.
- Account — the identifier provided by Sign in with Apple. Your name and email are shared only to the extent allowed by Apple's private relay settings.
- Location — latitude, longitude, accuracy, and the time of measurement. Collected only when you turn sharing on, and, depending on your settings, may be collected in the background.
- Device status — battery level and charging state (used for low-battery alerts and freshness display).
- Group & places — your group membership and role, and the coordinates and geofence settings of places you save (home, school, etc.).
- Notifications — your push notification token (APNs) and app language, used to localize notification text.
2. How we use your information
- Show and share locations on a map among members of the same group
- Send arrival/departure notifications ("pings") for saved places
- Send low-battery alerts for a group member (when enabled by an admin)
- Operate the service, handle errors, and prevent abuse
3. How location is handled
- Location sharing is active only when you turn it on, and you can stop it any time with Ghost mode. When stopped, your device stops uploading location entirely.
- Who can see which location is enforced by the server. You can only view a person's location if you are in the same group and that person has sharing enabled (server-side access control, RLS). We do not rely on client-side filtering.
- Most of the time we collect at a low, battery-saving cadence, switching to real-time only while a group member is viewing the map.
4. Retention and deletion
- Latest location — only each user's most recent location is kept, overwritten by newer positions.
- Location history — automatically deleted after the retention period set by the group owner (or a manager), between 1 and 30 days (15 days by default for new groups, 30 days maximum), via a once-daily batch.
- When you delete your account, your account and related data are removed and sessions on all devices are invalidated.
5. Third parties and processors
MoiPin does not sell personal information and never uses location data for ad targeting. We rely on the following providers to operate the service.
- Supabase — backend infrastructure for authentication, data storage, and real-time delivery (data processor).
- Apple — Sign in with Apple and push notification delivery (APNs).
- Map tile provider — supplies map tiles for rendering maps in the app and web.
6. International transfers
The backend runs on Supabase Cloud, and your data may be stored and processed on servers in regions outside your country. Using the service includes consent to such processing.
7. Data security
- All communication is encrypted in transit with TLS.
- Access control for location data is enforced at the database layer.
- Honest disclosure: we do not apply end-to-end (E2E) encryption. The backend operator is therefore technically in a position to access data.
8. Your rights
- Stop sharing instantly with Ghost mode.
- Control collection through your device's OS location permissions.
- Leave a group or delete your account (removing all data) directly in the app.
- Change notification and app language settings in the app.
9. Children's privacy
MoiPin is not directed to children under 13 and does not support account creation for that age group.
10. Changes to this policy
If this policy changes, we will post the updated text and effective date on this page.
11. Contact
Questions about privacy: [email protected]