Pinku Privacy Policy

Effective date: 15 October 2026
Last updated: 15 October 2026

Pinku is an app that helps couples see where the two of them can travel together and plan trips. This policy explains what personal data Pinku collects, why, who it is shared with, how long it is kept, and the choices and rights you have.

We have tried to keep this short and plain. If anything is unclear, write to support@pinku.fyi.

1. Who we are

Pinku is operated by Kaushal Chandrasekar, an individual based in Dubai, United Arab Emirates ("Pinku", "we", "us"). We are the controller of the personal data described in this policy.

Contact: support@pinku.fyi

2. The short version

• You can use the map, the reveal and the country information without an account. Until you sign in, what you type stays on your phone.
• When you sign in, we store the profile you build (name, passports, residency documents, home city, mascot) so it works on your devices and can be shared with your partner.
• Your partner can see your profile only while you are linked. Either of you can unlink at any time.
• We do not sell your data, show ads, or use advertising or tracking tools.
• You can delete your account at any time, in the app or at https://pinku.fyi/delete-account/.

3. What we collect and why

3.1 Before you sign in

When you use Pinku without an account, the details you enter (passports, home city, residency documents, your partner's details and so on) are stored only on your phone. We do not receive them. On Android this draft is excluded from automatic cloud backup. Pinku also downloads its travel-entry dataset, which contains no personal data (see 3.8).

3.2 Your account (sign in with Apple or Google)

To create an account you sign in with Apple or Google. We use our hosting provider's authentication service (Supabase Auth). From the sign-in provider we receive:

• a unique account identifier for you;
• your email address (with Apple this may be a private relay address if you choose "Hide My Email");
• your name, if the provider shares it (we use it only to prefill your display name, which you can change).

We do not receive your Apple or Google password. We do not keep long-lived Apple or Google access tokens. When you delete your account and you signed in with Apple, we ask Apple to revoke Pinku's access (see section 7).

Purpose: to create and secure your account and let you sign in on your devices.

3.3 Your profile

When you sign in, the profile you built is saved to your account:

• Display name (up to 30 characters).
• Mascot (one of five cartoon characters).
• Passports: the countries whose passports you hold (country codes only; we do not collect passport numbers, scans or photos).
• Home city and whether you live there, and your country of residence.
• Residency documents: the *type* of document (for example a residence permit or a visa), whether it is permanent or temporary, single or multiple entry, and its expiry date if you enter one. We do not collect document numbers, scans or photos.

Purpose: to work out and show which countries you and your partner can enter and how easily, and to keep that information in sync between your devices and with your linked partner.

Some of this information (nationality and residence status) can reveal your national or ethnic origin or immigration situation. We treat it as sensitive: it is used only to provide the travel features you ask for, it is never used for advertising or profiling, and it is visible only to you and, while you are linked, your partner.

3.4 Your partner and your couple

Pinku is built for two people. We store:

• a couple record and each person's membership in it (linked, invited, unlinked or deleted, with dates);
• if you add your partner's details before they join, a placeholder profile for your partner with the details you entered (their first name, passports, home city, residency documents).

If you enter details about your partner, you confirm that you have their permission to do so and that the details are accurate to the best of your knowledge. Your partner can review and change those details when they join, and you can delete them at any time ("Delete partner details" in the app). A placeholder that your partner never claims is deleted automatically when the invite expires or when you unlink.

Who can see what: your partner can read your profile only while both of you are linked. When either of you unlinks, that access ends immediately.

Purpose: to show the shared map and let the two of you plan together.

3.5 Invites

When you invite your partner, we create an invite link and a short code (for example PINK-7Q4MX).

• We store the link token and the code only as one-way cryptographic hashes, never in readable form.
• An invite expires after 7 days, can be used only once, and is cancelled when you send a new one or unlink.
• Someone who opens your invite link or enters your code sees only your display name and mascot. They never see your passports, documents or city.

Purpose: to let your partner join your couple safely.

3.6 Security and abuse prevention

To stop people guessing invite codes and to protect the service, we limit how often invites can be looked up and created. For this we store, for at most 1 day:

• a one-way hash of the IP address that made an invite lookup (never the IP address itself), and
• a one-way hash of a random install ID that the app creates on first launch and keeps in your phone's secure storage. The install ID is not read from your device hardware and is not used to track you; it resets if you reinstall Pinku.

Our hosting providers (Supabase and Cloudflare) also keep short-term technical logs (for example IP address, time and request type) to run and protect their services, under their own retention rules.

Purpose: security, fraud and abuse prevention.

3.7 Data on your phone

After you sign in, the app keeps a copy (cache) of your data on your phone so it opens quickly. This cache is encrypted, with the key held in your phone's secure storage (Keychain on iPhone, Keystore on Android). Signing out or deleting your account wipes it.

3.8 Travel-entry information (not personal data)

Pinku's information about visas and entry rules is a general dataset built from public sources (for example Wikipedia and official government pages). It contains no information about you. Your phone downloads it, and matching it against your passports and documents happens on your phone.

3.9 Contacting us

If you email support@pinku.fyi, we receive your email address and whatever you write, and use it to answer you. Emails sent to this address are forwarded through Cloudflare Email Routing to our mailbox at Google Gmail.

3.10 What we do not collect

We do not collect your precise location, contacts, photos, passport or document numbers or scans, payment details, or advertising identifiers. We do not use analytics, advertising, crash-reporting or cross-app tracking tools. If this changes, we will update this policy before the change takes effect.

4. Legal bases (EEA, UK and similar laws)

Where data-protection laws such as the GDPR or UK GDPR apply, we rely on:

• Contract: to provide the account, profile, couple and invite features you ask for (sections 3.2 to 3.5 and 3.7).
• Explicit consent: for nationality and residence information that may reveal sensitive information (section 3.3). You give it by entering the information, and you can withdraw it at any time by deleting it or your account. Withdrawal does not affect earlier processing.
• Legitimate interests: security, abuse prevention and keeping the service running (section 3.6), and answering your messages (section 3.9). We keep this data minimal, hashed where possible, and short-lived.
• Legal obligation: where we must keep or disclose information by law.

For partner details entered by the inviter (section 3.4), we rely on our legitimate interest in letting couples plan together, and on the inviter's confirmation that they have their partner's permission. The partner can object, correct or delete the details at any time.

5. Who we share data with

We do not sell or rent your personal data, and we do not share it for advertising.

We share it only with:

• Your partner, while you are linked, as described in 3.4.
• Service providers (processors) who run Pinku for us, under contracts that limit their use of the data:

• Authorities or others when required by law, to protect the rights, safety or property of users, the public or Pinku, or to enforce our Terms.
• A successor, if Pinku is transferred or merged. The successor must honour this policy or tell you before any change.

6. International transfers

Our providers may process data in countries other than yours, including the United States. Where the law requires, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (and the UK addendum) included in our providers' data-processing terms.

7. How long we keep data

Deleting your account (in the app under Account, or at https://pinku.fyi/delete-account/) permanently deletes your sign-in account, your profile, your couple membership, any partner placeholder you created and your invites. If you are linked, your partner keeps their own profile but loses access to yours. If you signed in with Apple, we also ask Apple to revoke Pinku's access to your Apple ID. Deletion cannot be undone.

8. Security

We protect data with: encryption in transit (HTTPS); access rules in the database so that each person can read only their own data and, while linked, their partner's; hashing of invite tokens, codes, IP addresses and install IDs; encrypted on-device storage; and server keys that are never placed in the app. No system is perfectly secure, so we cannot guarantee absolute security. If a breach affects your personal data, we will notify you and the authorities where the law requires.

9. Your rights

Depending on where you live, you may have the right to:

• access the personal data we hold about you and get a copy;
• correct it (you can edit most of it in the app);
• delete it (you can delete your account in the app or on the web);
• restrict or object to some processing;
• data portability (receive it in a machine-readable format);
• withdraw consent at any time;
• not be discriminated against for using these rights (for example under California law).

We do not sell or "share" personal data for cross-context behavioural advertising as those terms are defined in California law, and we do not use personal data for automated decisions that have legal or similarly significant effects on you.

To use your rights, email support@pinku.fyi from the email address linked to your account, or tell us which sign-in you used. We may need to verify your identity. We will reply within one month (or the time your local law requires). You also have the right to complain to your local data-protection authority.

If your partner entered details about you and you have not joined Pinku, you can also write to us to have those details deleted.

10. Children

Pinku is not intended for anyone under 16, and we do not knowingly collect personal data from them. If you believe a child has given us personal data, contact support@pinku.fyi and we will delete it.

11. Links to other sites

Pinku links to official government pages, Wikipedia and booking or travel sites. Those sites have their own privacy practices, which we do not control. Anything you do there, including purchases, is between you and that site.

12. Changes to this policy

We may update this policy. We will change the "Last updated" date, and for important changes we will tell you in the app or by email before they take effect.

13. Contact

Kaushal Chandrasekar
Email: support@pinku.fyi