Pinwell is an iOS app that helps you keep a private log of self-administered medication doses. We built it as an iOS-native, local-first tool because what you inject is no one else's business — not ours, not an advertiser's, not an AI provider's. This page describes exactly what data the app handles, where it lives, and what we don't do with it.
To do its job, Pinwell stores the following on your device:
That's the entire dataset for your dose log. No name, email, age, height, weight, lab values, prescription numbers, or insurance information are requested or stored as part of tracking your medications. The one exception — if you choose to send us feedback — is covered in section 5.
Pinwell uses Apple's SwiftData framework, which stores your log in a local sqlite-style database inside the app's iOS sandbox. The data is protected by iOS file-level encryption and is included in your iPhone's encrypted device backup if you back up to iCloud or a Mac.
If you turn on the iCloud sync toggle in Settings, Pinwell uses Apple's CloudKit private container to mirror your log between your Apple devices (iPhone, iPad, soon Apple Watch). This container is bound to your Apple ID. Apple cannot read it. We cannot read it. Even with a subpoena we could not produce it, because we never have it.
Nothing about your dose log. Pinwell has no account system and no user database for medication tracking — we don't operate a backend that holds that data. The one exception is the feedback you choose to send us (see section 5), which is unrelated to your dose log and never includes it.
Pinwell's $39 lifetime unlock is processed by Apple via StoreKit. When you purchase, Apple gives the app a cryptographically signed receipt that says "this Apple ID has bought this product." We never see your credit card, your billing address, or your Apple ID. We never see the purchase price you actually paid (which can vary by region).
Pinwell supports Family Sharing per Apple's rules: a single lifetime unlock entitles up to five Family Sharing members to use Pro features. The link between Family Sharing members is managed entirely by Apple.
If you email [email protected], we receive your email address and whatever you wrote. We use it only to reply to you. We don't sign you up for a newsletter or feed your address into a marketing platform. Email threads are kept until the question is resolved and then deleted within 90 days, unless the conversation is needed as a record of a refund or App Store dispute.
If you tap Help shape Pinwell in Settings, or shake your device to report a bug, you can send us a short message — a bug report, an idea, or a note of appreciation. This is the only feature in Pinwell that talks to a server we operate. When you submit, we receive: the text you wrote, an optional email address (only if you choose to enter one, so we can follow up), and your app version, device model, and iOS version — attached automatically so we can reproduce what you're seeing. Nothing is sent unless you actively tap Submit; there is no background collection.
We use this only to triage bugs and prioritize what to build next. We don't sell it, don't share it with advertisers, and don't feed it into any AI model. Submissions are deleted once resolved or after 12 months, whichever comes first.
Pinwell is intended for adults who are managing their own prescribed or coach-supervised medication regimens. It is not directed at children under 13. We do not knowingly collect any information from anyone, including children.
Because Pinwell holds no personal data of yours on any server we control, the most powerful "data subject right" you have is already built in: delete the app. When you delete the app from your device, the local database goes with it.
If you've enabled iCloud sync, you can also delete your Pinwell data from iCloud by going to Settings → Apple ID → iCloud → Manage Account Storage → Pinwell → Delete Data on iOS. This wipes your private iCloud container.
If you have a specific request under GDPR (EU/EEA), the UK Data Protection Act, the CCPA / CPRA (California), the LGPD (Brazil), or another similar regime, email us — we'll respond within 30 days. In most cases the answer will be "we don't have your data, and here's how to verify that."
Data on your device is protected by iOS's Data Protection file encryption (AES-256), tied to your device passcode. Data in iCloud sync is protected by Apple's CloudKit encryption — and if you've turned on Apple's Advanced Data Protection, the encryption keys for CloudKit are end-to-end and never available to Apple.
If you have reason to believe a vulnerability exists in Pinwell, please email [email protected]. We'll respond within five business days.
If we materially change this policy — say, by adding optional opt-in features that involve a third party — we'll bump the "Last updated" date at the top and surface the change in-app before the new policy takes effect.
Privacy questions: [email protected]
Support: [email protected]
Security: [email protected]
PLAYRIOT LLC · United States
pinwell.