Privacy policy
PinnedIt is a map of local, in-person events. You can browse it without an account and without sharing your location. We collect only what we need to run it, and we don’t sell data, show ads or track you across other apps and websites.
Last updated 8 October 2026. Applies to the PinnedIt iPhone app and pinnedit.co.uk.
Who we are
PinnedIt is run by Leo Spacey, a sole trader based in the United Kingdom, who is the data controller for the information described here. For anything about your data, email hello@pinnedit.co.uk.
What we collect
When you sign in
- Email address, from email sign-in, Sign in with Apple (this can be an Apple private relay address) or Google.
- Name, only if you sign in with Google, which shares your Google profile name with us. A name from Sign in with Apple stays on your phone.
- Account identifiers we create to link your sign-in to your profile.
Your sign-in name and email are never shown to other people.
Your public profile
The nickname, short bio and generated avatar you choose. Your nickname appears on events you post. We keep a private record of previous nicknames to prevent impersonation.
Events you post
The title, details, venue, organiser, times, ticket or website link, whether entry is paid, and the full venue address and exact map pin you confirm. These identify the public event location and are linked to your organiser account. Older listings may still show only a surrounding area. Events are public: they appear in the app, on pinnedit.co.uk and in share links. Your first event, and paid events, are reviewed by our team before they appear, and we keep a record of those review decisions.
Reports
If you report an event, we keep the reason, any note you add, and a copy of the event as it was when you reported it, so we can review the case even if the event is later changed or removed. The person you report is not told who reported them.
The area you’re browsing
To show nearby events, the app sends the centre of the map you’re looking at, rounded to about 1 kilometre. If you’ve centred the map on yourself, that is an approximate version of your location. We use it only to answer that request and don’t store it.
Technical logs
Like any online service, our hosting providers record technical information such as IP addresses, device and browser type, and the time of requests. These logs are used for security and to fix problems, and are kept for a short period (typically up to 7 days on our backend; see “How long we keep it” below).
What stays on your phone
Your device’s location can centre the map and help you position an event. Browsing sends only a rounded map centre. When you explicitly confirm and submit an event location, its exact map pin and full address are sent to us and shown publicly. Favourites, recently viewed events and the last area you browsed are stored only on your phone, separately for each account, and are not synced or shared. Deleting the app removes them.
What we don’t do
We don’t use advertising, analytics or crash-reporting services, we don’t track you across other companies’ apps or websites, and we don’t sell or share your data for marketing. pinnedit.co.uk sets no analytics or advertising cookies. The only cookie it sets is for team members who sign in to the review area.
Why we use it
- To provide the service you ask for (performing our agreement with you): signing you in, showing your nickname, publishing your events and showing events near the area you’re browsing.
- To keep PinnedIt safe and accurate (our legitimate interests): reviewing events, handling reports, preventing spam and abuse, applying posting limits and securing our systems.
- To meet legal obligations, such as responding to lawful requests.
Who else handles it
- Supabase hosts our database and sign-in service.
- Netlify hosts pinnedit.co.uk.
- Apple provides Sign in with Apple and the maps, place search and address lookups in the app. Searches are handled by Apple under Apple’s privacy policy. We receive the venue address and map pin you confirm when you submit an event.
- Google provides Google sign-in, if you choose it.
These providers process data on our behalf, or as independent services you choose to use. Some may process it outside the UK. Where they do, we rely on safeguards recognised under UK data protection law, such as the UK International Data Transfer Addendum. Ticket and organiser links open the organiser’s own website, which has its own privacy policy. PinnedIt does not sell tickets or take payments.
How long we keep it
- Your account, email and name: until you delete your account.
- Events: deleted 7 days after they end or are removed. The short delay lets people report an event that has just finished.
- Reports and the event copies attached to them: deleted 90 days after the report is closed, or kept longer while a case is still open or under a time-limited safety hold.
- Records of review decisions (which event, what was decided and why): kept while needed to keep the service safe, and linked only to an anonymised profile once the account is deleted.
- Technical logs: kept by our hosting providers for a short period, typically up to 7 days.
Deleting your account
In the app, go to Account and choose Delete account. Your sign-in, email and name are deleted straight away. Your live and pending events are taken off the map and then deleted 7 days later, as above. Your nickname is released and replaced with an anonymous placeholder on any remaining records, and your bio is cleared. Reports you made are kept for moderation but no longer linked to you. Favourites and history for that account are removed from your phone. If you can’t use the app, email hello@pinnedit.co.uk from the address you sign in with.
Your rights
Under UK data protection law, you can ask for a copy of your data and ask us to correct it, delete it, restrict or object to how we use it, or transfer it to you. Email hello@pinnedit.co.uk and we’ll respond within one month. If you’re unhappy with how we handle your data, you can complain to the Information Commissioner’s Office at ico.org.uk. We’d appreciate the chance to put things right first.
Children
PinnedIt is not intended for children under 13, and we don’t knowingly collect their data. If you believe a child has given us information, email hello@pinnedit.co.uk and we’ll delete it.
Changes
If we change how we use your data, we’ll update this page and the date at the top. For significant changes, we’ll also tell you in the app.