This Privacy Policy explains how Pinzo ("we", "us") collects, uses and protects your personal data when you use the Pinzo website and app (the "Service"). Pinzo is operated from the United Kingdom and complies with the UK GDPR and Data Protection Act 2018.
1. Data we collect
- Account data — name, email address, hashed password (or Google account identifier if you sign in with Google).
- Profile data — display name and optional avatar you provide.
- Usage data — clubs you favourite, follow or set as your home course, and updates/events/offers you post as a club manager.
- Approximate location — only if you use the "Locate me" feature. Used in-browser to centre the map; never stored on our servers.
- Analytics & diagnostics — anonymous product analytics (PostHog) and crash reports (Sentry). Only collected with your consent (see our Cookie Policy).
2. Why we use it
- To provide the Service (map, search, favourites, follows, notifications, club management).
- To authenticate you and keep your account secure.
- To send transactional emails (claim confirmations, password resets, ownership changes).
- To improve the product through anonymous analytics, if you have consented.
3. Legal bases
We rely on: (a) contract to provide the Service you sign up for; (b) legitimate interests to keep the Service secure and to send essential transactional emails; and (c) consent for optional analytics and error monitoring cookies.
4. Who we share data with
- Supabase — database, authentication and file storage.
- Resend — transactional email delivery.
- Mapbox — interactive maps.
- OpenWeather — course weather.
- PostHog and Sentry — analytics and crash reporting (only with your consent).
We never sell your personal data. We do not use your data for advertising.
5. Retention
We keep your account data for as long as you keep your account. You can permanently delete your account at any time from Account Settings — this removes your profile, saved courses, follows, notifications and claim history within 30 days.
6. Your rights
Under UK GDPR you have the right to access, correct, delete or export your personal data, restrict or object to processing, and withdraw consent at any time. Email us at privacy@pinzo.app. You can also complain to the UK Information Commissioner's Office (ico.org.uk).
7. International transfers
Our processors may store data outside the UK/EEA (for example the United States). Where this happens we rely on Standard Contractual Clauses or equivalent safeguards.
8. Contact
Questions? Email privacy@pinzo.app.