Privacy policy

Who we are

PinPoint is civic technology built for Azerbaijan. Contact metinmehdi72@gmail.com for any privacy request.

Information we collect

We do not collect your contacts, SMS messages or call history. PinPoint uses live camera capture and does not read your photo gallery.

• Email and authentication data to create and secure your account. Passwords are hashed by our authentication provider and are never visible to PinPoint.
• Optional display name and profile settings to connect reports to your account and provide features you choose.
• Photos captured in the app to document a civic issue. The camera is used only when you begin a report.
• Precise GPS location at capture time to establish where the issue is and support future routing.
• Photo metadata, capture time, file size and mock-location indicators to verify authenticity and prevent abuse.
• Language, app settings, notification token and technical diagnostics to provide the experience, deliver notifications and resolve faults.

How a report is processed

• The photo is stored privately and can be accessed only by you and authorised PinPoint administrators.
• It may be sent to OpenAI for automatic classification of the issue and its severity.
• The report, category and location are stored for tracking, moderation and future routing to the appropriate institution.
• Safety checks are applied before public sharing; protecting personal identifiers is a mandatory product principle.

Who can see reports

During closed testing, reports are visible to you and authorised PinPoint administrators. On the public map your identity is hidden and the coordinate is shifted by approximately 100–250 metres. An appropriate institution may in future receive the precise location only for an issue within its responsibility.

Service providers

We do not sell your information, use it for behavioural advertising or share it with advertising networks.

• Supabase for database, authentication and private photo storage.
• Firebase for push notifications and website hosting.
• OpenAI for automatic recognition and classification.
• Sentry, when enabled, for application fault diagnostics.

Retention

• Account and profile data is retained until you delete the account.
• Report photos may remain while an issue is open and be deleted or anonymised approximately 12 months after resolution.
• Security and audit records are retained at minimum scope for legal and operational need.

Your rights

You may request access, correction, export or deletion. Account deletion removes your profile, reports, photos and related personal data; records that must remain are anonymised so they can no longer be linked to you. You may withdraw consent where processing relies on consent.

Children and changes

PinPoint is not directed to children under 13 and we do not knowingly collect their information. We update the date on this page when the policy changes and provide in-app notice for significant changes.