Privacy

Last updated 27 August 2026

QuietPin works without an account and stores everything on your phone. Most of what follows is about the parts that are optional.

What stays on your device

Your trips, the countries on your globe, your badges and your preferences are stored locally. If you never sign in, none of it is sent anywhere and we cannot see it.

If you sign in

Signing in is optional and exists so a new phone can restore your trips, your saved plans and the places you have saved. We store your email address and your trip records — dates, airport codes, countries and any notes you added. We use them to sync your trips to your devices and for nothing else. We do not sell them, share them with advertisers, or use them to profile you.

You can delete your account and everything stored with it from inside the app, under You → Account → Delete account. Deletion is immediate and permanent.

Location

If you turn on automatic map filling, QuietPin asks iOS to tell it when you arrive somewhere and stay a while. It uses that to work out which country you are in, then records the country. It does not record where you were, how long you stayed, or your route, and the coordinate is reduced to a country code on your phone before anything leaves it. You can turn it off at any time and keep adding trips by hand.

Two features do send coordinates off the device, and only these two. Planning a day asks Apple for travel times between the stops in your plan, which means those stops are sent to Apple. The forecast on a plan sends a single rough centre point for the city to Open-Meteo. Neither carries your name, your account, or anything that identifies you, and neither runs unless you open a plan.

Place data

The catalogue is built from open data — Foursquare Open Source Places, Overture Maps and OpenStreetMap — under their respective licences. Looking at places sends the city you are browsing to our server. It does not send anything that identifies you.

Usage data

Usage analytics are off unless you turn them on, in You → Settings. With them on we record which features get used — that onboarding was finished, that a plan was saved, that the paywall was shown — so we can tell whether the app works. Some of those events carry the city you were browsing, and whether a place was saved or opened. Events are tagged with a random identifier created when you install the app. It is not an advertising identifier, is not derived from your device, and disappears when you delete the app.

We do not record your identity, your contacts, or anything that could be linked back to you outside QuietPin. There is no third-party analytics SDK, no advertising identifier, and no tracking across other apps or websites. The data goes to our own database and nowhere else.

Signing in

You can sign in with an email address and password, or with Google. If you use Google, Google tells us your email address and nothing else, and they will know you signed in to QuietPin. We never see your Google password. An account is optional and exists only to back up your trips, your plans and your saved places, including any notes and ratings you have written. Those are stored against your account and readable by nobody else; deleting your account deletes them with it.

Other services

Tracking a flight sends that flight number to the OpenSky Network. Place photographs and descriptions are fetched from Wikimedia and Wikipedia when you open a place. These requests carry no account details.

You can turn this off entirely under You → Share usage data.

Children

QuietPin is not directed at children under 13 and we do not knowingly collect their data.

Getting in touch

Questions, or a request for a copy of what we hold: [email protected].