← Back

Privacy Policy

Effective date: June 6, 2026  ·  Last updated: June 28, 2026

World Pins ("we", "our", or "us") is a location-based photo sharing application developed by Tomas Dudovicius. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your personal data.

By using the World Pins mobile app or website at worldpins.app, you agree to the practices described in this policy.

1. Information We Collect

We collect the following information when you use World Pins:

• Account data — email address, username, and password (stored as a one-way hash; we never store your plain-text password).
• Profile photo — an optional avatar image you choose to upload.
• Photos you post — images you take or upload through the app, along with the GPS coordinates of where the photo was taken.
• Location data — precise GPS coordinates are attached to each photo you post. This location is visible to all users of the app. The app also uses your device location to center the map and find nearby photos; this real-time location is not stored on our servers.
• Trail data — if you use the Trail Recording feature, the app records your GPS location in the background to trace your path. The recorded trail (a sequence of GPS coordinates, distance, and duration) is uploaded to our servers and is visible to all users. Background location access ("Always" permission on iOS) is requested only when you start recording a trail.
• Event participation — if you submit a photo to an event, we record which event you submitted to and verify that your photo's GPS location falls within the event's geographic area. Your submission count and the photos you submit are visible to other users.
• Content interactions — likes, comments, bookmarks, and follow relationships you create.
• Push notification token — a device token provided by your operating system, used only to deliver in-app notifications (likes, comments, follows).
• Usage and technical data — basic request logs (IP address, timestamp) retained for security purposes.
• Social sign-in identifiers — if you sign in with Google or Apple, we receive and store a unique identifier for your Google or Apple account (google_id / apple_id), an optional email address, and optionally your name (used to suggest a username). If you use Sign in with Apple and choose to hide your email, Apple provides a private relay address; we store whichever address Apple supplies and never receive your real Apple ID password.
• Photo library — when you choose to upload a photo from your device's camera roll, the operating system passes the selected image to the app. We do not retain access to your library, browse it, or sync it.
• Face ID / Touch ID — if your device supports biometric authentication and you enable it, biometric verification occurs entirely on your device via the OS secure enclave. No biometric data is ever transmitted to our servers.

We do not collect advertising identifiers, sell your data, or track you across other apps or websites.

2. How We Use Your Information

• To provide the core features of the app — posting photos, exploring the map, following other users, recording trails, and participating in events.
• To send push notifications for activity on your posts and account.
• To review uploaded photos for prohibited content using automated moderation (see Section 5).
• To enforce our Terms of Service and respond to abuse reports.
• To maintain the security and performance of our service.

3. Location Data and Public Visibility

Every photo you post includes the GPS location where it was taken, and that location is visible to all users of the app. Do not post photos taken at your home, workplace, or any location you wish to keep private. World Pins is designed for sharing interesting public places — not personal spaces.

Your real-time device location (used to center the map) is processed only on your device and is never transmitted to our servers.

3a. Trail Recording and Background Location

World Pins includes a Trail Recording feature that lets you record hiking and walking paths to share with other users. When you start a trail recording, the app requests access to your location in the background ("Always" permission on iOS, foreground service on Android) so it can continue tracking your path while the screen is locked or the app is in the background.

Background location is used exclusively for trail recording — it is never used for analytics, advertising, or any purpose other than tracing the path you are actively recording. Background location tracking starts only when you explicitly tap "Record Trail" and stops when you save or discard the recording.

Recorded trails (GPS coordinates, distance, and duration) are uploaded to our servers and are visible to all users of the app. Do not record trails in locations you wish to keep private.

4. Data Storage and Security

Your data is stored in the European Economic Area:

• Photos — stored on Amazon Web Services S3 in the eu-north-1 (Stockholm, Sweden) region.
• Account and content data — stored in a PostgreSQL database hosted by Neon in Frankfurt, Germany (eu-central-1).

We use HTTPS for all data in transit. Passwords are hashed using bcrypt and are never readable by us. Authentication tokens are invalidated on logout.

5. Third-Party Services

We use the following third-party services to operate World Pins:

• Amazon Web Services (AWS) — photo storage (S3, Stockholm) and automated content moderation (Rekognition). AWS may process image data to detect prohibited content before a photo is accepted. AWS Privacy Policy: aws.amazon.com/privacy
• Neon — managed PostgreSQL database hosting in Frankfurt, Germany. Neon Privacy Policy: neon.tech/privacy-policy
• Expo / Expo Push Notification Service — used to deliver push notifications to your device. Your push token is shared with Expo solely to route notifications. Expo Privacy Policy: expo.dev/privacy
• Nominatim / OpenStreetMap — used for place-name search (geocoding) within the app. No account data is sent to this service. OpenStreetMap Privacy Policy: osmfoundation.org
• Google — Sign in with Google (OAuth 2.0) for authentication, and Google Maps SDK for map rendering in the app. When you use Google Sign-In, Google shares your Google account identifier and optionally your email and name with us. Google Privacy Policy: policies.google.com/privacy
• Apple — Sign in with Apple for authentication on iOS. Apple may provide a private relay email address instead of your real email. See Section 5a below for details. Apple Privacy Policy: apple.com/legal/privacy
• Firebase / Google Cloud Messaging (FCM) — used to deliver push notifications on Android devices. Your push token is shared with Firebase solely for notification routing. Analytics and advertising features are disabled. Firebase Privacy Policy: firebase.google.com/support/privacy
• Resend — transactional email service used to send email verification messages when you create a new account. Your email address is transmitted to Resend for this purpose only. Resend Privacy Policy: resend.com/legal/privacy-policy
• Expo Application Services (EAS) / Expo Updates — used to deliver over-the-air app updates. This service may transmit your device platform, app version, and update metadata to determine whether an update is available. Expo Privacy Policy: expo.dev/privacy

5a. Sign in with Apple

If you choose Sign in with Apple, Apple authenticates your identity and shares with us a unique Apple ID identifier and, optionally, your name and email address. You may choose to hide your real email, in which case Apple provides a private relay address (e.g. xyz@privaterelay.appleid.com) that forwards messages to your real inbox. We store whichever address Apple provides.

We do not receive your Apple ID password. You may revoke our app's access to your Apple ID at any time via Settings → [your name] → Password & Security → Apps Using Apple ID on your iPhone or iPad.

6. Content Moderation

All photos are automatically scanned for prohibited content (nudity, violence, hate symbols, etc.) using AWS Rekognition before they are published. Images that trigger our moderation filters are rejected and not stored. A log of the rejection (without the image) is retained for safety and abuse-prevention purposes.

7. Data Retention

• Your account data and posts are retained until you delete your account.
• When you delete your account, your profile, email, and password are permanently removed. Photos you posted remain on the map attributed to a deleted account (no username or email attached).
• If you wish to have your photos removed as well, contact us at the address below before deleting your account.
• Push notification tokens are removed when you log out.

8. Your Rights (GDPR)

If you are located in the European Economic Area, you have the following rights under the General Data Protection Regulation (GDPR):

• Access — request a copy of the personal data we hold about you.
• Rectification — correct inaccurate data (username and avatar can be updated directly in the app).
• Erasure — delete your account via Settings → Delete Account, or contact us to request full removal.
• Restriction / Objection — contact us to restrict or object to processing of your data.
• Portability — request a machine-readable export of your data.

To exercise any of these rights, contact us at tomasdudovicius@gmail.com. We will respond within 30 days.

The legal basis for processing your data is: contract performance (providing the service you signed up for) and legitimate interests (security and abuse prevention).

9. Children's Privacy

World Pins is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

If you are in the European Economic Area, our minimum age is 16 as required under Article 8 of the GDPR. Users between 13 and 15 in the EEA are not permitted to use the service without verified parental consent, which we are currently unable to collect.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of the app after changes constitutes acceptance of the updated policy.

11. Contact

For any privacy-related questions or requests, please contact:
Tomas Dudovicius
tomasdudovicius@gmail.com

See also: Terms of Use  ·  Child Safety Standards  ·  Support

12+ Rated 12+ on the App Store. Account creation requires age 16+ (EEA) or 13+ (elsewhere).