Last updated: October 2026
We collect only what Pinfig needs to work. We don't sell your data, use ad trackers, or send marketing emails.
Pinfig is local-first. Your notes, boards, tasks, PDFs, chats and everything else you make live in a folder on your computer. We don't collect them, sync them or read them, unless you choose to share or collaborate.
The website and the app set no cookies, so nothing tracks you across sites. We count visits and which features get used with Umami, which runs on our own server, sets no cookies and keeps nothing that identifies you. We never record file names, file contents, what you type or what you ask AI. We follow the GDPR (RGPD) and the UK PECR.
You don't need an account to use Pinfig. If you create one (signing in takes just an email, sent a 6-digit code), we keep your email address, and your name and picture if you add them. If you buy Pro, Stripe handles the payment: we never see your card. We keep what you bought and until when, so your plan follows your email to every device. We only email you sign-in codes and receipts.
The app keeps one thing in your computer's keychain: an encryption key named "Pinfig Safe Storage". It uses it to encrypt, in files on your computer, your Pinfig sign-in, your Google Calendar sign-in, and the addresses of calendar feeds you subscribe to (a private feed's address works like a password). Each is only ever sent where it belongs: your Pinfig sign-in to Pinfig, your Google sign-in to Google, a feed's address to the site that serves it. Your operating system may ask you to allow Pinfig to use the key.
When you share something or work on it live with others, what you share passes through our servers and is kept there for as long as you share it, only to provide that feature.
AI: with a local model, your requests never leave your computer. With an AI provider you add yourself, your requests go straight to that provider, under its own terms. In the web app, requests go through our server to the AI provider we use; we don't keep them or use them for anything else.
Google Calendar is optional. If you connect it, the app asks Google to see your email address, your list of calendars, and to see and change your events, so you can plan them alongside your work. The app talks to Google directly from your computer, and your events are kept on your device. Nothing passes through our servers. If you ask azwu about a calendar, it's treated like any other item: a local model keeps it on your device, a provider you added receives what azwu reads. We never use Google data for advertising or to train AI models, and never sell it or let anyone else read it. Disconnecting in Pinfig deletes the sign-in from your device and withdraws our access at Google; you can also remove it at myaccount.google.com/permissions. Pinfig's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Pinfig isn't meant for children under 13.
You can ask for a copy of your data or have your account deleted at any time by writing to human at pinfig.com; we'll remove it within 30 days.