pin Privacy Policy
pin is a tracker for medications such as testosterone, peptides, GLP-1s and hormone therapy. It is made by Three Oaks Digital, LLC ("we", "us"). This policy explains what information pin collects, how it is used, where it is kept, and the choices you have. It applies to the pin apps for iPhone and Android and to report pages you choose to share.
- Your tracking is stored on your phone. It goes to our servers only if you sign in to back it up, or share a report.
- Progress photos stay on your phone. They are sent out only when you ask for an AI body scan, and are not kept.
- AI features (reading a prescription label or lab report, the AI body scan and pin Guide) use OpenAI, and only after you agree.
- We don't sell your data, show ads, or use tracking or advertising tools.
- You can export everything, and delete your account and all your data from inside the app.
- pin doesn't give medical advice. It records what you and your prescriber decide.
Contents
- Information we collect
- How we use it
- Where it is stored
- AI features and OpenAI
- Apple Health and Health Connect
- Who we share it with
- Shared reports
- Your choices and controls
- Keeping and deleting data
- Security
- Consumer health data (US states)
- California residents
- EEA, UK and Switzerland
- Children
- Changes to this policy
- Contact us
1. Information we collect
Information you enter in pin
- Account: your first name, email address and password (the password is handled by our sign-in provider and we never see it). Optionally a display name and a referral code.
- Profile: what brings you to pin, sex, date of birth, height, weight, units, and optional body composition (body fat, resting heart rate, muscle mass, visceral fat).
- Medications: names, strengths, doses and how you take them (injection, tablet, cream, nasal spray, pellet), schedules and protocols ("stacks"), supply, and costs. Optionally your prescriber, pharmacy and prescription number.
- Dose log: doses taken or skipped, times, injection sites, side effects and notes.
- Daily check-ins: energy, mood, focus, libido, sleep, appetite, side effects and notes.
- Body metrics: weight, waist, body fat, blood pressure, resting heart rate and HRV.
- Labs: blood test results, draw dates and notes.
- Goals and daily goals: targets, and daily totals such as protein, water, steps, fiber, exercise and sleep.
- Progress photos and medication photos: stored on your phone only (see section 3).
- Messages to pin Guide and any "report this answer" feedback you send us.
Information collected automatically
- Device and app details: device type and model, operating system and version, app version, and when you first and last used pin and how often you open it. This is saved with your account when you use cloud backup.
- Crash reports: technical details when the app crashes or hits an error (see section 6). They exclude your name, email and app logs.
- Usage limits: a count of how many AI requests you make each day, to keep the features available and affordable.
pin does not collect your precise location, contacts, or advertising identifiers, and contains no advertising or third-party tracking tools.
Information from others
- Apple and Google: your subscription and free-trial status. Payment is handled entirely by Apple or Google; we never receive your card details.
- Apple Health or Health Connect: only the readings you allow (see section 5).
2. How we use your information
- To run pin: schedules and reminders, dose and supply tracking, trends, goals, labs, costs and the other features you use.
- To back up and restore your data when you sign in and use cloud backup.
- To create and share reports when you ask for one.
- To provide the AI features you choose to use (see section 4).
- To manage your subscription and free trial.
- To answer support requests, investigate problems you report, fix crashes and keep pin secure.
- To comply with the law.
We do not use your information for advertising, and we do not sell or rent it. We may look at overall, de-identified numbers (for example, how many people use a feature) to improve pin; these can't be used to identify you, and never include data from Apple Health or Health Connect.
3. Where your information is stored
| What | Where |
|---|---|
| Your tracking (meds, doses, check-ins, metrics, labs, goals, notes) | On your phone. A copy is kept in your cloud backup if you sign in and back up. |
| Progress photos and medication photos | On your phone only. They are not included in cloud backup. |
| Scheduled time off, price history, daily goal totals and pin Guide conversations | On your phone only. |
| Your account and cloud backup | Our database provider, Supabase, on servers in the European Union (Ireland). |
| Reports you share | Supabase (Ireland), until you delete them (see section 7). |
Cloud backup is optional. If you never sign in, your tracking does not leave your phone, except for the AI requests you choose to make.
4. AI features and OpenAI
Some features use AI provided by OpenAI. Each one asks for your permission before anything is sent, and you can use pin without them.
| Feature | What is sent to OpenAI |
|---|---|
| Add a med from prescription photos | The photos you take of your prescription label. |
| Scan a lab report | The photos or PDF of your lab report. |
| AI body scan | The progress photos you pick, with your weight and body fat on those dates, and your age and sex. |
| pin Guide, app questions | Your question and pin's how-to guide. |
| pin Guide, questions about your tracking (only if you choose "allow my data") | A summary of your tracking: first name, age, sex and height; meds, schedules and recent doses with injection sites; supply and costs; labs; body metrics (including readings from Apple Health or Health Connect); check-ins and side effects; goals; notes you've written; and your progress photo dates with your latest AI body scan summary. It never includes your email, prescriber, pharmacy, prescription number or the photos themselves. |
Requests go through our servers to OpenAI's API only to produce your answer. pin doesn't keep the photos. OpenAI does not use API data to train its models and keeps it for up to 30 days to monitor for abuse before deleting it. You can stop sharing your tracking with pin Guide at any time by choosing "app help only", and you can clear pin Guide conversations from your phone.
AI answers can be wrong. pin Guide is not a doctor and doesn't give medical advice; always check doses and results with your prescriber or pharmacist.
5. Apple Health and Google Health Connect
Connecting is optional and off until you turn it on in Settings. You choose which permissions to grant, and you can change them at any time in the Health app (iPhone) or Health Connect (Android).
- pin can read, with your permission: weight, body fat, blood pressure, resting heart rate, HRV, steps and sleep, which pin saves for your charts and reports; and other readings you choose to show on the Apple Health card (such as heart rate, VO2 max, blood oxygen, respiratory rate, blood glucose, active energy, exercise minutes, distance, flights climbed and water), which are shown but not saved.
- pin can write, with your permission: the weight, body fat, blood pressure, resting heart rate and HRV you log in pin, and on iPhone (iOS 18 and later) your daily mood from check-ins. pin does not write medication doses.
Information from Apple Health and Health Connect:
- is used only to provide pin's features to you;
- is never used for advertising, marketing or data mining, and is never sold;
- is never shared with anyone for their own purposes. It is sent to OpenAI only when you choose pin Guide's "allow my data", to answer your question;
- is never stored in iCloud by pin, and is never included in aggregated or de-identified data;
- is included in your cloud backup only if you use cloud backup.
pin's use of information received from Health Connect follows the Health Connect Permissions policy, including its Limited Use requirements. Disconnecting stops new reads and writes but doesn't delete readings pin has already saved; you can delete them in Settings → Delete Specific Data → Body Metrics.
6. Who we share information with
We share information only with these service providers, only as needed to run pin, and under contracts that limit how they use it:
| Provider | What for | Where |
|---|---|---|
| Supabase | Sign-in, cloud backup, shared reports, and the servers that pass AI requests to OpenAI | EU (Ireland) |
| OpenAI | The AI features in section 4, when you use them | United States |
| RevenueCat | Subscription and free-trial status (your account ID, email address and purchases; no health data) | United States |
| Sentry | Crash and error reports (technical details only) | United States |
| Apple and Google | App distribution, payments, notifications, and Apple Health / Health Connect on your phone | United States |
We may also disclose information if the law requires it, to protect someone's safety, or as part of a merger or sale of our business (in which case this policy would continue to apply). We do not sell your personal information or share it for advertising.
7. Shared reports
When you generate a report, pin builds it on your phone and saves a copy on our servers so you can share it with a private link. Anyone who has the link can open the report, so share it only with people you trust, such as your doctor. Reports never include your prescriber, pharmacy or prescription number. You can delete a report at any time in the app (report tab → "my reports"), which removes it from our servers and stops the link working.
8. Your choices and controls
- Use pin without an account: your tracking stays on your phone.
- Cloud backup: turn daily backup on or off, back up now, or restore (Settings → Cloud Backup).
- AI features: each asks before sending anything; pin Guide can be set to app help only.
- Apple Health / Health Connect: connect, disconnect, or choose import and export separately.
- Notifications: dose reminders can be turned off in Settings or your phone's settings.
- Export: download your doses, check-ins, metrics, labs and medications as spreadsheets, or everything as one file (report tab → "export your data").
- Delete specific data (Settings → Delete Specific Data) or your whole account (Settings → Delete Account & All Data).
9. Keeping and deleting your data
We keep your cloud backup and account for as long as your account exists. Data on your phone stays until you delete it or the app.
Deleting your account (Settings → Delete Account & All Data, while signed in and online) deletes everything on your phone, your cloud backup, your shared reports and your account. Server logs and backups that may hold copies are deleted on their normal schedule, normally within 30 days. Records of purchases are kept by Apple, Google and RevenueCat as they need for billing and tax. Deleting your account does not cancel your subscription; cancel it in your App Store or Google Play subscriptions.
If you can't use the app, email support@threeoaksdigital.net from the email address on your account and we'll delete your account and cloud data.
10. Security
Information is encrypted in transit, your cloud data is protected by access rules so only your account can read it, and AI keys are kept on our servers, never in the app. Data on your phone is protected by your phone's own security, so we recommend using a passcode. No system is completely secure, but we work to protect your information and will tell you if a breach affects you, as the law requires.
11. Consumer health data (Washington, Nevada and other US states)
Some US state laws, such as Washington's My Health My Data Act, give you rights over "consumer health data". Much of what you track in pin is consumer health data.
- What we collect: the medication, dose, check-in, body metric, lab, goal and photo information described in section 1, and readings you allow from Apple Health or Health Connect.
- Where it comes from: you, your phone, and Apple Health or Health Connect if you connect them.
- Why: only to provide the pin features you use, as described in section 2.
- Who receives it: the service providers in section 6, only to run pin. OpenAI receives it only when you use an AI feature and agree.
- We do not sell consumer health data and don't share it for advertising.
- Your rights: to know what we have, to get a copy (use "export your data"), to have it deleted (Settings → Delete Account & All Data, or by email), and to withdraw consent (turn off backup, disconnect Health, or choose app help only in pin Guide).
To make a request, email support@threeoaksdigital.net. We'll respond within 45 days. If we deny a request, you can appeal by replying to our answer, and if you are not satisfied you can contact your state's Attorney General.
12. California residents
Under the CCPA/CPRA you have the right to know what personal information we collect and how we use and disclose it (this policy), to access, correct and delete it, and not to be treated differently for using these rights. We collect the categories in section 1 (identifiers, sensitive health information, device information) for the purposes in section 2, and disclose them only to the providers in section 6. We do not sell or share personal information for cross-context advertising, and we use sensitive information only to provide the services you request. To make a request, email support@threeoaksdigital.net; we'll verify it's you by confirming the email on your account.
13. EEA, UK and Switzerland
Three Oaks Digital, LLC is the controller of your personal information. We process it to provide pin under our contract with you, health information on the basis of your explicit consent (which you give when you enter it and when you allow each feature), and other information for our legitimate interests in keeping pin secure and working. Your cloud backup is stored in the EU. Information sent to OpenAI, RevenueCat and Sentry is processed in the United States under appropriate safeguards such as Standard Contractual Clauses.
You have the right to access, correct, delete, restrict or object to processing of your information, to data portability, and to withdraw consent at any time. You can use most of these rights directly in the app, or email support@threeoaksdigital.net. You can also complain to your local data protection authority.
14. Children
pin is for adults 18 and over. We don't knowingly collect information from anyone under 18. If you believe a child has given us information, contact us and we'll delete it.
15. Changes to this policy
We may update this policy as pin changes. We'll change the "last updated" date above, and for significant changes we'll tell you in the app before they take effect.
16. Contact us
Three Oaks Digital, LLC
Email: support@threeoaksdigital.net
pin is a tracking tool, not a medical device, and does not provide medical advice, diagnosis or treatment. pin is not a healthcare provider, and this policy is not a HIPAA notice.