Privacy Policy

1. Who we are

Pingr ("we", "us") provides a reminders, tasks and calendar service at pingr.360framed.com, an Android application and a web app (together, the "Service"). This Privacy Policy explains what personal data we collect, why, with whom it is shared, how long it is kept and the rights you have over it.

The data controller is Paulus Iskandar, an individual sole trader, of Jl Taman Ubud Asri I No. 15, Tangerang, Banten 15810, Indonesia. For any privacy question or request, contact support@pingr.360framed.com.

2. Personal data we collect

• Account data: email address, name, hashed password, two-factor settings (email code and/or authenticator app, with backup codes), and, if you sign in with Google or GitHub, that provider's identifier for you and the email address and name it reports.

• Things you create: reminders, tasks and events with their titles, notes, dates and times, time zone, repeat rules, alerts, priority, colour, location text, lists, tags, subtasks and completion state. You decide what you enter. Please do not enter another person's data without a lawful basis.

• Guests: if you add guests to an event, the guest's email address (and name, if you give one) and their reply status. If we email an invite, the guest receives an .ics file from us.

• Content submitted to AI features: the text you type into quick add or the assistant, and the context needed to answer (for example the titles and times of the items involved). Voice dictation, if you use it, is turned into text by your device or browser, and we receive only the text. A log of the changes the assistant made for you is kept so you can undo them.

• Google data, only if you connect Google (section 5): your Google account email, the list of your calendars and task lists, and the events and tasks in those you choose to sync, plus the tokens needed to keep syncing, which we store encrypted.

• Phone calendar (optional): if you allow it, the Android app reads the calendars on your phone to show them next to your own items. This stays on your device and is not uploaded to our servers.

• Onboarding answers: the choices you make when setting up (for example when you wake and sleep, what you use now, what you want help with). They are choices and times only, not free text, and are used to set up the app for you.

• Subscription data: your plan, store product, expiry date and renewal state. Payments are handled by Google Play; we never receive your card number or bank details. Our billing provider RevenueCat receives a random account ID (never your email address), the purchase details from Google Play, the platform and app version, and the technical data every request carries, such as your IP address.

• Email we send: verification and sign-in codes, password resets, security alerts, receipts of account changes, calendar invites, one welcome email when your account is confirmed and one short note from the founder after your first purchase or free trial start (we store when each was sent, so each is sent only once), a reminder the day before your free trial turns into a paid plan, and, if you switch them on, daily agenda and weekly summary emails. They are sent from our own mail server at our hosting provider.

• Device and technical data: each sign-in creates a session record with your IP address and a device description, which you can see (and sign out) under Settings > Security. We also keep failed-attempt counters used to lock an account that is being guessed at, your time zone, and, if you allow notifications, a notification token. Our server logs record IP addresses and request details for security.

• Kept on your device: an offline copy of your items so the app and your alerts work without a connection, your preferences and, on the web, cached copies of your data. Alerts are scheduled on your device. Signing out removes the account data from your browser; on Android it clears it from the app.

• Product analytics (optional, off until you agree): see section 11.

We do not collect your precise location, contacts, health data or biometrics, advertising identifiers or any government ID, and we do not ask for your date of birth. When you sign up you confirm that you are at least 13 by ticking a box, or by continuing with Google or GitHub (section 12); we keep only the record that you accepted the Terms.

3. Device permissions

• Notifications and exact alarms: so reminders fire on time, even with the app closed. You can withdraw them in your device settings; reminders then may not alert you.

• Phone calendar (read only): only if you choose to show your phone's calendars. Nothing is written to them.

• Microphone: only if a version of the app offers dictation, and only when you tap the button. Without it, you can type instead.

• Battery and background settings: we may ask you to relax battery optimisation so alerts are not delayed. This gives us no extra data.

We do not request access to your location or contacts.

4. Purposes and legal bases

We process personal data to: (a) create and run your account and sync your items across your devices; (b) schedule and deliver your alerts, digests and invites; (c) provide AI features; (d) take and verify subscriptions; (e) send security and account messages; (f) secure the Service and prevent fraud and abuse; (g) comply with legal obligations; and (h) if you opt in, understand in aggregate how the product is used so we can fix and improve it.

Where the GDPR, the UK GDPR, Indonesia's Personal Data Protection Law (UU No. 27 of 2022, "UU PDP") or a similar law applies, we rely on: performance of a contract for (a), (b), (d) and (e); your consent for (h), for connecting Google, for notifications and for the microphone; our legitimate interests in running a secure service for (f); and legal obligation for (g). For (c), our basis is performance of the contract, since AI features are part of the Service you chose, and you can turn them off at any time (section 6).

We do not use your personal data for advertising, we do not sell it, and we do not make decisions with legal or similarly significant effects about you by automated means.

5. Google user data

Connecting Google is optional. If you connect it, Pingr asks for permission to see and edit events on your Google calendars (Google Calendar) and to see and edit your Google Tasks, so it can show them in Pingr and write your changes back. We use this data only to provide that two-way sync and the features you see in the app. We do not use it for advertising, we do not sell it, and we do not give it to others except the processors in section 7 that are needed to run the Service.

Pingr's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Humans do not read your Google data unless you ask us to for support, it is necessary for security, or the law requires it.

Data from Google is sent to an AI provider only when you ask an AI feature to work with those items (for example "Plan my day"). You choose which calendars and task lists sync and can disconnect at any time in Settings. On disconnect you choose whether to keep or remove the imported items, and we delete the stored tokens. You can also revoke Pingr in your Google Account permissions.

6. AI features

AI features (natural-language quick add, the assistant, Plan my day, summaries) are on by default and can be switched off in Settings > AI, after which nothing more is sent to an AI provider. Where a plain-language date or repeat can be understood on your device or on our server by code, no AI provider is involved.

When you use an AI feature, the text you submit and the context needed for the answer (such as titles, times and notes of the items involved) are sent to our AI providers solely to produce the result. We do not use your content to train AI models and we ask providers not to. Each provider handles API data under its own terms, which can differ from model to model, and we cannot control what a provider does with it. Switching AI off stops further transmission but cannot recall content already processed.

AI output can be wrong. The assistant changes your items only through defined actions, shows what it did, and keeps a log so you can undo it. Please check dates and times that matter.

7. Processors and recipients

We do not sell or rent personal data and we do not share it for cross-context behavioural advertising. We disclose it only to the providers below, which process it for the stated purpose under their own terms, and to public authorities where the law requires.

• Dewaweb, our hosting provider in Indonesia: hosts the website, API, database and our outgoing email (Indonesia).

• OpenRouter, Inc. and the AI model providers it routes requests to (we choose and may change the models): AI inference, when you use AI features (United States and other countries where those providers operate).

• Google LLC: sign-in with Google if you choose it; Google Calendar and Google Tasks sync if you connect them; Google Play billing; Google Analytics 4 on the website only if you accept analytics (United States and other countries where Google operates).

• GitHub, Inc.: sign-in with GitHub if you choose it (United States).

• RevenueCat, Inc.: manages subscriptions in the Android app; receives the data described in section 2 (United States).

• PostHog, Inc. and Mixpanel, Inc.: product analytics, only if you opt in (United States; may be hosted in the region we configure).

• Your device's or browser's speech-recognition service: only if you use dictation, under its own terms. We never receive audio.

• Guests you invite and the calendars you share with: an invited person receives the event details you put in the invite.

8. International transfers

Your data may be processed outside your country of residence, including in Indonesia and the United States. Where personal data is transferred from the EEA, the UK or Indonesia to a country without an adequacy decision, we rely on the European Commission's Standard Contractual Clauses (and the UK International Data Transfer Addendum where applicable) incorporated into each processor's data processing terms, together with any further safeguards UU PDP requires for transfers out of Indonesia (Article 56). Where a provider offers only its own standard terms, those terms apply.

9. Retention

We keep your data while your account exists. If your trial or subscription ends we keep your data and you can still sign in, export it and delete your account; you just cannot use the features until you subscribe again.

A daily job deletes: sessions, one-time links and emailed codes 7 days after they expire or are signed out; rate-limit counters after 2 days; the assistant's change log (used for undo) after 90 days; and items, lists and tags you deleted 180 days after you deleted them (they are kept that long so a device that was offline can still learn of the deletion). The log that stops a digest email being sent twice is kept for 400 days.

When you delete your account in Settings, we delete your account and everything linked to it, including items, lists, guests, sessions and Google tokens, in one step. If you ask by email, we do it as soon as we can verify the request. We also ask RevenueCat to delete your customer record; this is best effort, and RevenueCat and Google keep whatever their own policies provide. Copies in backups at our hosting provider disappear as those backups rotate out. Deleting your account does not cancel a store subscription (see the Terms).

Data kept on your device stays there until you sign out, clear it or uninstall the app.

10. Security

Data is encrypted in transit using TLS. Your items are stored in our database at our hosting provider behind access controls. They are not end-to-end encrypted, so we, as operator, are technically able to access them (we do so only to run, secure and support the Service). Passwords are stored only as salted hashes, session tokens only as hashes, and authenticator secrets and Google tokens are stored encrypted. Every request is checked against the signed-in account, repeated failed sign-ins lock an account for a while, and two-factor authentication is available. You can review and sign out your devices under Settings > Security. No system is completely secure.

If a personal data protection failure occurs, we will notify affected users and the personal data protection authority in writing within 3 x 24 hours, as Article 46 of UU PDP requires, and the competent supervisory authority under the GDPR where that applies.

11. Your rights and choices

Subject to applicable law, you have the right to: be informed about processing; access and get a copy of your data; correct inaccurate data; delete your data; receive your data in a portable form; object to or restrict processing; withdraw consent at any time (without affecting earlier processing); and complain to a regulator.

In the app you can edit your items, export your data (JSON, and .ics for your calendar), turn AI features off, turn product analytics off, disconnect Google, change email and password, review sessions, and delete your account. To use a right in a way the app does not cover, email us at support@pingr.360framed.com. We respond within the time the law requires.

Product analytics are off until you agree: on the website through the cookie banner, in the Android app through the switch in Settings. If you agree, we use PostHog and Mixpanel (app) and Google Analytics 4 (website) to see in aggregate which screens and features are used, app version, device type, language and approximate country; never the content of your items, your email address or your name. You can switch it off at any time.

Indonesia. As we are established in Indonesia, UU PDP applies. You may lodge a complaint with the personal data protection authority designated under UU PDP.

European Economic Area, United Kingdom and Switzerland. The GDPR, UK GDPR and Swiss FADP apply to our processing of your data if you are there. You may lodge a complaint with your local supervisory authority.

California and other US states. We have collected in the past 12 months the categories identifiers, internet or app activity, and the content you create, from you, your device and the providers above, for the purposes in section 4. We do not sell personal information or share it for cross-context behavioural advertising. We do not disclose personal information to third parties for their own direct marketing. No third party collects personal information about your online activities over time across other websites through the Service. You may request to know, access, correct or delete your information, and we will not discriminate against you for doing so. Users under 18 can delete any content they submitted in the app.

12. Children

The Service is not directed at children and may not be used by anyone under 13 years of age, or the higher minimum age of digital consent in their country. When you register you confirm that you meet this requirement by ticking a box (or by continuing with Google or GitHub, which tells you so on the screen). We do not knowingly collect data from anyone below the minimum age. If you believe a child has an account, email support@pingr.360framed.com and we will delete it.

13. Cookies and local storage

We use one strictly necessary cookie to keep you signed in on the web and a second short-lived one during Google or GitHub sign-in. See the Cookie Policy for the full list and how to manage analytics.

14. Changes to this Policy

We may update this Policy. We will give at least 30 days' notice of material changes by email or in-app notice, and the "Last updated" date at the top of this page always shows the current version.

15. Contact

Paulus Iskandar, trading as Pingr, Jl Taman Ubud Asri I No. 15, Tangerang, Banten 15810, Indonesia. Email: support@pingr.360framed.com.