Privacy Policy

1. Who we are

PinIt Cam is made by DrillMate Ltd, a company registered in England and Wales. For the purposes of UK data protection law, DrillMate Ltd is the data controller for the limited personal data described in this policy.

You can reach us at support@pinit.cam. Emails are answered by the developer, not a helpdesk.

2. What the app accesses on your device

PinIt Cam asks your iPhone for the following permissions. Everything it captures is written to your device's own storage and is not transmitted to us or to anyone else.

• Camera — to record the road ahead and your reaction at the same time.
• Microphone — to record audio alongside the video, and to detect notable moments such as audio spikes when building highlights.
• Location (while in use) — to show your speed, distance and lap times, to place you on the track map, and to recognise which circuit you are at. This uses GPS satellite signals and works with no mobile signal and no internet connection.
• Motion and fitness sensors — the accelerometer and gyroscope, to measure G-force and to work out how your phone is mounted.
• Photo library — to save videos you choose to export, and to let you pick an image if you want your own logo on an export.
• Local network — only for Paddock Mode, to find other phones running PinIt Cam nearby. See section 4.

You can withdraw any of these permissions at any time in iOS Settings. Features that depend on a permission stop working; the rest of the app continues.

3. What we do not do

This section is deliberately specific, because “we respect your privacy” means nothing on its own. PinIt Cam has:

• no user account — there is nothing to sign up for and nothing to sign in to;
• no server, no cloud storage and no backend of any kind that holds your content;
• no analytics SDK, no crash reporting service, and no advertising identifier;
• no tracking of you across other apps or websites, and no sale or sharing of personal data with data brokers;
• no upload of your video, location, telemetry or sensor data to us. We never receive it and could not retrieve it if asked.

If your phone is lost or reset without a backup, your sessions are gone. That is the direct consequence of there being no cloud copy, and we would rather state it plainly than imply a safety net that does not exist.

4. When data does leave your device — always because you chose it

There are four ways content can leave your iPhone, and each is something you actively do:

• Exporting and sharing. When you export a video and share it — to Photos, a messaging app, or a social network — it goes wherever you send it. Once it leaves the app, the receiving service's own privacy policy applies, not ours.
• Paddock Mode. This shares sessions directly between phones over local Wi-Fi and Bluetooth, device to device. The data does not pass through a server and does not touch the internet. It goes only to phones you connect with, at the circuit, in front of you.
• Requesting a circuit or reporting an issue. This composes an email on your device and hands it to your own mail app. Nothing is sent until you press send, and it arrives as an ordinary email.
• Contacting support. If you email us, we hold that email and any information you put in it for as long as needed to deal with your query.

5. Purchases

PinIt Cam Pro is a one-time in-app purchase handled entirely by Apple. Your payment is made to Apple under Apple's own terms and privacy policy. We never see your card details, billing address, or Apple ID. We receive only Apple's confirmation that a purchase or restore is valid for the device in front of you.

Apple also provides us with aggregated, anonymised App Store statistics — download counts, territories, and similar. These are aggregate figures produced by Apple and cannot identify you.

6. This website

pinit.cam is a static site hosted by Netlify. It carries no analytics, no tracking pixels and no advertising. Fonts are served from this site rather than from a third party, specifically so that visiting does not disclose your IP address to a font provider.

• No cookies. The site sets none. It uses a single browser sessionStorage entry to remember that you have already seen the intro animation once in the current tab. It contains no personal data, is never sent to us, and disappears when you close the tab.
• Server logs. Netlify, as our hosting provider, processes standard request logs including IP addresses in order to serve and protect the site. Netlify acts as our processor.
• Android waitlist. If you enter your email address into the waitlist form, we store that address via Netlify Forms so we can tell you when an Android version exists. This is the only personal data we actively collect. We will not use it for anything else, and there is no newsletter.
• Outbound links. Links to the App Store, YouTube, Instagram, OpenStreetMap and Open Data Commons are ordinary links. Nothing is embedded, so those services learn nothing about you unless you click through.

7. Legal bases for processing

Under the UK GDPR we rely on the following:

• Consent — for the Android waitlist email address. You give it by typing it in, and you can withdraw it at any time by emailing us.
• Legitimate interests — for keeping the website online and secure (server logs), and for answering support emails you send us.

We do not rely on consent for anything inside the app, because the app does not send us personal data in the first place.

8. How long we keep things

• Waitlist email addresses — until an Android version launches and we have told you, or until you ask us to remove yours, whichever is sooner.
• Support correspondence — for as long as needed to resolve the matter, and then for a reasonable period in case you follow up.
• Website server logs — retained by Netlify under their standard retention periods.
• Your recordings and track data — kept on your device, for exactly as long as you keep them. Deleting a session in the app deletes it. We hold no copy to delete.

9. Your rights

You have the right to ask us for a copy of the personal data we hold about you, to have it corrected or erased, to object to or restrict how we use it, and to have it provided in a portable form. Where we rely on consent, you can withdraw it at any time.

In practice, for almost everyone, the only data we hold is a waitlist email address, and one message to support@pinit.cam will remove it. We will respond within one month.

If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk. We would appreciate the chance to put it right first.

10. Other people in your recordings

PinIt Cam records whatever its cameras and microphone can see and hear, which at a circuit may include other drivers, passengers, marshals and spectators. You are responsible for using it lawfully and considerately, for following the circuit's own rules on filming, and for obtaining consent where that is required — particularly before publishing footage of identifiable people. Our Terms of Use cover this in more detail.

11. Children

PinIt Cam is intended for licensed drivers taking part in track day and circuit events. It is not directed at children, and we do not knowingly collect personal data from anyone under 13.

12. International transfers

Our hosting provider, Netlify, and Apple are both based in the United States and may process the limited data described above outside the UK. Where that happens, it is covered by the safeguards those providers put in place for international transfers, such as the UK Addendum to the EU Standard Contractual Clauses.

13. Changes to this policy

If we change how PinIt Cam handles data, we will update this page and change the date at the top. Any change that materially affects what leaves your device will be called out in the app's release notes as well, rather than quietly published here.

14. Contact

Questions about this policy, or a request about your data: support@pinit.cam.

This policy is always available at pinit.cam/privacy.