PicturePin — Privacy Policy

The short version

PicturePin does not collect, transmit, share, or sell any of your data. Ever.

Everything PicturePin records — your GPS track, your settings, your imported photos — stays on your iPhone. There are no servers, no accounts, no analytics, no advertising, no third-party data SDKs, and no cloud sync. The app is technically prevented from making any network connection at all (see Network access below).

What PicturePin does

PicturePin records a continuous GPS track on your iPhone while a recording session is active. Later, when you import JPEG photos from an SD card, CF card, or your Photos library, the app matches each photo's EXIF DateTimeOriginal timestamp to the closest GPS point in the track and writes the matched coordinates into the photo's EXIF metadata.

PicturePin always writes a new tagged copy and never modifies or deletes your original files — your source photos are only ever read. Depending on your settings, the tagged copy is saved to the app's PicturePin Tagged folder (Files → On My iPhone) and/or added to your Photos library as a new photo, and you can share it from there (Photos, AirDrop, Files, etc.). This applies to both SD/CF card photos and Photos-library photos.

What data PicturePin accesses

Data	Why	Where it is stored	Leaves your device?
Location (GPS) — latitude, longitude, altitude, timestamp	Recorded into the track that is later matched against your photos' capture times.	Local app storage on your iPhone.	No. Never leaves your device.
Photos you select — full file content + EXIF	Read to extract the EXIF capture timestamp; rewritten with GPS coordinates added.	The SD/CF card you picked them from, or the destination you choose in the share sheet.	No. Never uploaded.
Recording session history — start/stop times and point counts	Shown so you can see past sessions.	Local app storage on your iPhone.	No.
App settings — heartbeat interval, reminder interval, auto-stop threshold	Saved so the app remembers your preferences.	Local app storage on your iPhone.	No.
Battery level — current percentage and recent samples	Used to estimate remaining recording time and show drain rate.	Read live from iOS; a small history sample is held locally to compute the trend.	No.
Local notifications — text scheduled for reminder pings	Reminds you that GPS recording is still running so you can stop it when you're done.	Apple's on-device notification queue.	No. Local notifications never contact Apple's push servers.

What PicturePin does NOT do

No user accounts. No sign-up, no log-in, no email required.
No analytics. No Google Analytics, no Firebase, no Sentry, no Amplitude, no Mixpanel, no PostHog, no crash reporting service of any kind.
No advertising. No ad SDKs, no ad identifiers (IDFA), no tracking pixels.
No third-party data SDKs.
No cloud sync. There is no PicturePin server because none exists.
No social-media integrations.
No push notifications from a server. The reminders you see are local notifications scheduled directly by the app on your device.
No device fingerprinting, no contact-list access, no microphone access, no camera access (PicturePin reads existing photos — it does not capture new ones).

Network access

PicturePin is configured at the iOS operating-system level to block all outbound network requests. This is enforced by Apple's App Transport Security:

NSAppTransportSecurity:
  NSAllowsArbitraryLoads:    false
  NSAllowsLocalNetworking:   false

With no domain exceptions declared, every outbound HTTP, HTTPS, and local-network request the app could try to make is rejected by iOS itself, before the request leaves the app's sandbox. This protection applies to the app, to any future update, and to any embedded library — even devices on your local Wi-Fi cannot be contacted.

Sharing data with others

PicturePin only shares data when you explicitly ask it to. The two cases where this can happen are:

Saving a geotagged photo. When PicturePin writes GPS coordinates into a photo's EXIF metadata and saves it (to the SD card directly, or via the iOS share sheet to a destination you pick), the resulting file contains your location. From that point on the photo is yours to keep, send, post, or delete. Anyone you later share that photo with may be able to read its embedded GPS coordinates using standard photo software — that is the entire purpose of the app.
Exporting a track as GPX or KML. When you export a track, PicturePin writes a .gpx or .kml file to its cache and opens the iOS share sheet. You choose the destination (Files app, AirDrop, Mail, Messages, etc.). PicturePin itself never selects a destination for you.

PicturePin does not share data with anyone in any other circumstance.

Permissions PicturePin asks for

iOS permission	Why PicturePin asks	What you can do
Location — Always	To continue recording your GPS track when the screen is locked or another app is in the foreground. Required for the core function of the app.	Settings → Privacy & Security → Location Services → PicturePin
Location — When In Use	Same purpose, used while the app is open.	(Same as above.)
Photos — Read & Write	To list photos in the import grid and save tagged copies back when you ask.	Settings → Privacy & Security → Photos → PicturePin
Files (via the iOS document picker)	To read JPEGs from a connected SD/CF card and write the tagged versions back. No always-on file-system access — you pick each batch.	Granted per-pick; nothing to revoke.
Notifications	To show local reminders that GPS recording is still active so you can stop it when you're done.	Settings → Notifications → PicturePin
Battery level	Read-only access to display drain rate and remaining time.	iOS does not require a permission prompt for this.

You can revoke any prompted permission at any time. PicturePin will keep working with reduced functionality (for example, with notifications off the reminder pings won't appear, but tracking continues normally).

Children's privacy

PicturePin is rated 4+ in the App Store and is not directed at children under 13. Because PicturePin does not collect any personal data from anyone, it does not knowingly collect any personal data from children either.

Your rights

Because PicturePin stores all data locally on your iPhone:

To view your data: open the app. Everything PicturePin holds about you is shown directly in its tabs.
To delete your data: tap CLEAR TRACK to remove the recorded GPS track, or delete the app from your iPhone to remove all locally stored data (track, history, settings, cached files).
To export your data: use the GPX or KML export buttons in the app.

There is no developer-side database to make a request against, because none exists.

Changes to this policy

If a future version of PicturePin ever changes how it handles data, this policy will be updated and the change will be highlighted in the app's release notes before the new version ships. Any change that would introduce data collection or network transmission would be a major version change and would be clearly disclosed.

Your files & disclaimer

PicturePin never modifies or deletes your original photos — it only ever reads them and saves a separate tagged copy. As good practice with any app that handles your library, we still recommend keeping your own backups of important photos.

PicturePin is provided "as is," without warranties of any kind, and is used at your own risk. To the fullest extent permitted by law, the developer is not liable for any loss of or damage to data or photos arising from use of the app. Your use is also governed by Apple's standard Licensed Application End User License Agreement.

Contact

Questions or concerns about privacy in PicturePin can be sent to the developer at ccdpin@gmail.com, or through the App Store listing's support contact.