Privacy Policy

Pinwhy (“we”) is an app by Xtok, Inc. that saves the videos and links you choose, together with why you saved them, and turns each one into a card you can read and search. This policy explains what we store, who helps us process it, and how to delete it. We do not sell your data, show ads, or use third-party tracking or analytics.

What we store

• Your account: the anonymous user identifier that Sign in with Apple gives us (for early users who connected through Telegram, their Telegram user id). We use it only to keep your library private to you.
• What you save: the link, the reason you pick and any notes you write, and what we make from the post: a cover image, a few still frames, the transcript and on-screen text, a short summary, the hook and why it works, the collection it belongs to, and a search index built from that text.
• Technical logs: request times and IP addresses, kept for up to 30 days to keep the service secure and fix problems.

We only process posts that you choose to save. Your library is visible only to your account.

How a save is processed

To make a card we use service providers that act only on our behalf:

• Fetching the public post: media APIs on RapidAPI for Instagram and TikWm for TikTok, or the platform directly. YouTube videos are watched by Google Gemini from their public link.
• Transcribing speech: on our own servers.
• Writing the summary and sorting saves into collections: Google Gemini (Google LLC).
• Building the search index: OpenAI.
• Hosting and backups: Amazon Web Services in the EU (Paris). Fly.io relays requests from older app versions, and Tigris stores backups.

Some of these providers (Google, OpenAI) may process data outside the EU under their standard data protection terms. They use it only to perform their task for us.

Retention and deletion

We keep your data until you delete it. In the app, Settings → Delete account permanently removes your account and every save, transcript, cover and note. Copies in our backups are overwritten on a rolling basis and are gone within 90 days.

Your rights

You can ask us for a copy of your data, to correct it or to delete it, and you can object to how we process it: write to support@pinwhy.com. If you are in the EU or UK, you can also complain to your local data protection authority. We process your data to provide the service you asked for.

Security

All traffic is encrypted with HTTPS. Your sign-in token is stored in the iOS Keychain on your device.

Children

Pinwhy is not directed to children under 13.

Changes

If we change this policy, we will update this page and the date above.

Contact

Xtok, Inc. · support@pinwhy.com