Privacy Policy

Who we are

Pigney is a private, invite-only app for sharing what you spend with a small circle of friends. This policy covers the Pigney mobile apps for iOS and Android, our backend service, and the website at pigney.app. Pigney is built and operated by an independent developer based in Vietnam; in this policy, "we" and "us" mean that operator, who is the data controller for the data described below.

If you have a question about anything below, email us at hello@pigney.app — a person reads it.

What we collect

We collect only what the app needs to work. There is no hidden collection layer: everything listed here comes either from something you typed, something you tapped, or something the app needs in order to deliver a message to your phone.

Account information

When you sign up with an email address and password, or with Google Sign-In, we store your email address, your display name, and — if you signed in with Google or set one yourself — your profile picture. Your password is never sent to or stored by us; sign-in is handled by Firebase Authentication (see Service providers). We ask you to verify your email address before you can use the app.

Your preferences

We store your preferred currency and your time zone. The time zone is the IANA zone name your phone reports (for example Asia/Ho_Chi_Minh) — not your location, and not precise enough to identify where you are. We use it so that "today" on your leaderboard means your local day rather than ours, and so that a trip abroad does not scramble your history.

What you post

A post is a photo, an amount and currency, and an optional caption, plus the date and time zone at the moment you posted it. You enter the amount yourself. Pigney never connects to a bank, card or payment account, and we do not import, read or have any access to your transactions. We do not collect payment information at all — the app is free and there is nothing to pay for.

Photos come from your camera or your photo library, and only the individual images you choose. The app has no access to the rest of your library, and we do not read location or other metadata from your photos to build a profile of you.

Your friends and invites

We store who you are friends with on Pigney, plus pending friend requests and the invite links you create. When you send a friend request by email address, we use that address only to find the matching Pigney account and to show your request to that person. We never upload your contacts or address book — the app does not ask for that permission.

Notifications and your device

If you allow notifications, we store a push notification token for that device and whether it is an iOS or Android device. That token is how Apple's and Google's push services know which phone to deliver a message to. We also keep a record of the notifications we have sent you (for example, "so-and-so accepted your friend request") so the in-app notification list works.

Technical logs

Our servers keep the ordinary operational logs any web service keeps — IP address, timestamp, and which request was made — to keep the service running, debug failures, and detect abuse. These logs are not used to profile you or to build advertising audiences.

What we deliberately do not collect

• Bank, card or payment account data of any kind.
• Your contacts or address book.
• GPS or precise location.
• Advertising identifiers, and no cross-app or cross-site tracking.
• Third-party analytics, attribution or advertising SDKs — the app contains none.

How we use it

We use the data above only to:

• Create your account and sign you in.
• Show your posts to your friends, and theirs to you.
• Build your weekly leaderboard and convert amounts to your currency where a post was made in another one.
• Send friend requests, invites and the notifications that go with them.
• Keep the service secure, prevent abuse, and fix problems.
• Reply to you when you contact us.

We do not use your data for advertising, we do not sell or rent it, and we do not share it with data brokers. We do not use your posts, photos or captions to train machine-learning or AI models.

If you are in the European Economic Area or the United Kingdom, our legal bases are: performance of a contract for everything needed to give you the app you signed up for; legitimate interests for security, abuse prevention and service maintenance; and consent for push notifications, which you grant when your device asks and can withdraw at any time in your device settings.

Who can see your data

Your friends see your posts. A post you create is visible to the people whose friend requests or invites you have accepted — nobody else. Pigney has no public profiles, no public feed, no search directory and no "people you may know". Someone reaches you only by having your email address or an invite link you chose to share.

Post images are served from unguessable links. The photos in your posts are stored in cloud object storage and delivered over a long random URL. The app only ever shows those links to your friends, but anyone who obtains the exact link — for example because a friend copied and forwarded it — could open the image without signing in. Treat what you post as something a friend can pass on, because in practice they can.

Unfriending stops future sharing. If you remove a friend, they no longer see your feed or your leaderboard entry. It cannot undo what they already saw, screenshotted or saved.

Beyond your friends, we share data only with the service providers listed below, and where we are legally required to — for example a valid legal request, or where necessary to protect someone's safety or our rights.

Service providers

We run Pigney on infrastructure operated by other companies. They process data on our instructions, for us, and are not permitted to use it for their own purposes.

Because these providers operate internationally, your data may be processed in countries other than your own, including the United States. Where required, we rely on the European Commission's standard contractual clauses or an equivalent transfer mechanism offered by the provider.

How long we keep it

• Your account and posts — for as long as your account exists. Deleting a post removes it and its photo from our storage.
• Invite links — they expire one hour after you create them, and you can revoke one sooner.
• Push notification tokens — until you turn off notifications, sign out, or the token stops working, at which point we remove it.
• Operational logs — a short rolling window, kept only as long as they are useful for debugging and security.
• After account deletion — we delete your account data from our live systems promptly, and it ages out of routine encrypted backups within 30 days.

Your choices and rights

In the app

• Edit your display name, photo, currency and time zone at any time.
• Delete any post you have made.
• Remove a friend, or revoke an invite link you shared.
• Turn push notifications off in your device settings.

Deleting your account

Email hello@pigney.app from the address on your account and we will delete your account, your posts and their photos, your friendships and your notification records. We will confirm when it is done, normally within a few days and at most within 30 days.

Your legal rights

Depending on where you live — including under the GDPR in the EEA and UK, and the CCPA/CPRA in California — you have the right to access a copy of your data, to correct it, to delete it, to restrict or object to certain processing, and to receive it in a portable format. You also have the right not to be discriminated against for exercising these rights.

We do not sell or share personal information for cross-context behavioural advertising, as those terms are defined under California law, and we have not done so in the past twelve months.

To exercise any of these rights, email hello@pigney.app. We may need to confirm you control the account's email address before we act. If you are in the EEA or UK and are unhappy with our response, you can complain to your local data protection authority.

Security

All traffic between the app and our servers is encrypted with TLS, and our database and image storage providers encrypt data at rest. Sign-in credentials are handled by Firebase Authentication, so we never see or store your password. Access to production systems is limited to the people who need it.

No service can promise perfect security. If a breach ever affects your data, we will tell you and the relevant regulators as the law requires, and we will tell you plainly what happened.

Children

Pigney is not for children. You must be at least 13 years old to use it — or older where your country sets a higher age for consenting to online services, such as 16 in parts of the EU. We do not knowingly collect data from children under those ages. If you believe a child has created an account, email hello@pigney.app and we will remove it.

This website

pigney.app sets no cookies, runs no analytics and shows no ads. Our host keeps standard server access logs. The site loads its typeface from Google Fonts, which means your browser contacts Google's servers and Google receives your IP address as part of that request.

Changes to this policy

If we change how we handle your data, we will update this page and move the "last updated" date at the top. For changes that materially affect you, we will also notify you in the app or by email before they take effect. Continuing to use Pigney after a change means you accept the updated policy.

Contact us

Questions, requests, or anything about this policy: hello@pigney.app.

Using Pigney is also subject to our Terms of Service.