Privacy policy
Draft. Must be reviewed by a lawyer before launch.
Controller
[Company name], company no. [number], [address], hej@getpinyang.com is the controller of the data we process about you.
What we store
- Your account: the email you sign in with, and the name you enter yourself. To sign in we email you a one-time code. We only store an encrypted version of the code, and it is discarded after use.
- Your location: the city and neighbourhood you choose, and a point rounded to about 200 metres. We never store your address or exact GPS position, and others only see rounded distance.
- Your year of birth, language and time zone.
- What you do: posts, comments, likes, Circles, shares, sign-ups, friends and blocks.
- Your genre profile: how much you engage with each genre, worked out from what you do.
- Ads: which ads you have seen, clicked or acted on, and which advertisers you have hidden.
- Reports you send, and any decisions about your content.
Who sees your posts
You choose for each post: your friends, people near you or everyone.
Posts for everyone can be shared as a link, for example on Messenger or SMS. Whoever opens the link can see the post, your name and your neighbourhood without an account, but not comments. Pages with shared posts are marked so search engines do not list them.
Posts by users under 18 and posts in the Illness genre are never shown outside the app.
Why and on what basis
- To provide the service (your contract with us, GDPR art. 6(1)(b)): account, feed, friends, location and your genre profile to show you relevant posts.
- Local ads based on where you are and what you are looking at (legitimate interest, art. 6(1)(f)). This does not need a profile of you.
- Ads based on your interests only with your consent (art. 6(1)(a)), and only if you are over 18. You can withdraw consent in your profile.
- Safety, moderation and complying with the law, such as the Digital Services Act (legal obligation and legitimate interest).
- We never use information about health, politics or war for ads.
Who we share with
Other users see what you choose to share, according to your settings.
Advertisers only see totals (views, clicks, actions) and never who you are.
Processors: hosting [provider and country], Stripe (payments by advertisers) and our email provider Resend, which sends sign-in codes and notifications.
Place search: when you search for a city, or use your location somewhere for the first time, we send the search text or the point to the OpenStreetMap Foundation (Nominatim) to find the place name. We do not send your name or id.
How long
We keep your data as long as you have an account. If you delete your account, we delete your content and personal data straight away. Bookkeeping records of payments from businesses are kept for 5 years as the law requires. Reports and moderation decisions are kept for [period].
Your rights
You can see and download all your data in your profile (Download my data), correct it, delete your account, withdraw consent and object. You can complain to the Danish Data Protection Agency (datatilsynet.dk) or the authority in your country.
Cookies
We only use necessary cookies: login, language and the invite code you arrived with. We use no tracking or advertising cookies.