1. Data controller
The data controller is Sami El Khoury Salem, publisher of Pingr, residing at Floarea Residence – 609, Dubai, United Arab Emirates.
For any data-related question: support@ping-r.com
Data protection officer (DPO): no external DPO has been appointed at this stage of the service. Requests are handled directly by the publisher at the address above.
2. Data we collect
We only collect data necessary to operate the service:
- Identity: first name, last name, username, date of birth, gender.
- Contact: email address, phone number (optional).
- Avatar: profile photo, where applicable.
- Contacts you add: first name, last name, date of birth and phone number of the people you choose to add to your address book.
- Events: title, date, location, message, links and guests you create.
- Technical identifiers: Supabase user ID, push notification token (Expo, OneSignal), and technical activity logs (IP, user-agent) limited to what is strictly necessary for operating and securing the service.
- Sign-in via third-party providers: if you choose to sign in with Apple or Google, we only receive your email address and, where applicable, your name (depending on what you agree to share). No other Apple or Google data is collected.
- Birthday import: at your request, Pingr reads once the birthdays stored in your Google Calendar (read-only access, token not kept) or shown on your Facebook "Birthdays" page (you log in yourself, in a private session cleared when the screen closes). Only first names, last names and birth dates are saved to your list; you can delete them at any time.
3. Purposes
- Creating and managing your account.
- Organizing events and inviting your people.
- Sending reminders and notifications related to your events and birthdays.
- Connecting you with your people already on Pingr.
- Service security (abuse prevention, fraud detection).
- Improving the service.
4. Legal basis
Your data is processed on the basis of:
- Performance of the service contract you request (GDPR art. 6.1.b), for account management, event organization, and reminders.
- Your consent (GDPR art. 6.1.a) for push notifications and any optional contact import.
- Our legitimate interest (GDPR art. 6.1.f) for service security and abuse prevention.
5. Recipients and processors
Your data is never sold. It is entrusted to the following processors, strictly within the scope of the service:
- Supabase Inc. (India) — database hosting and authentication. Storage region: Mumbai (ap-south-1).
- Vercel Inc. (United States) — web app and API hosting.
- Resend, Inc. (United States) — transactional emails (confirmation, reminders, account notifications).
- Expo, Inc. (United States) — push notification relay to Apple and Google, and app updates.
- OneSignal, Inc. (United States) — iOS and Android push notifications.
- Functional Software, Inc. (Sentry) (European Union) — app crash reports, without identifiers or IP address.
- Apple App Store and Google Play — mobile app distribution.
6. Transfers outside the European Union
Some of our processors are established outside the European Union (United States, India). These transfers are governed by Standard Contractual Clauses (SCCs) adopted by the European Commission, and where applicable by the Data Privacy Framework for certified US processors.
7. EU representative
Given that the publisher is established in the United Arab Emirates, and given the occasional and small-scale nature of processing at the current stage of the service, no representative within the meaning of GDPR article 27 has been appointed. Such an appointment will be made if the service is opened to regular use by EU residents.
8. Retention period
Your data is kept for as long as your account is active. Upon account deletion (from the app: Profile > Account > Delete my account), all your data — including your avatar — is erased immediately, except for technical logs needed to meet our legal obligations (maximum 12 months).
Party guests without an account. When you answer an invitation on a public page, we store your first name, last name, e-mail, your answer and, if you gave it, your birthday. Your e-mail and last name are erased 30 days after the date of the party; your first name and your answer stay visible to the organizer on their list. No phone number is stored. If you create an account, this information joins your account and follows the rules above.
Wishes sent by link. A wish (text, voice or video) sent to someone without an account can be opened through a link for 7 days, then for 24 hours after it is first opened; it is then erased from our servers.
9. Your rights
Under GDPR, you have the right to access, rectify, erase, restrict, object to, and port your data.
You can exercise most of these rights directly from the app (Profile > Account) or by emailing support@ping-r.com. We respond within a maximum of one month.
You also have the right to lodge a complaint with the supervisory authority of your country of residence (in France: the CNIL — cnil.fr).
10. Cookies and trackers
The website only uses cookies strictly necessary for authentication and service operation. No third-party analytics cookies are placed without your consent.
Pingr does not track your activity across other apps or websites.
11. Security
Your data is stored encrypted in transit (HTTPS/TLS) and at rest. Data access is restricted to operations necessary for the service via Supabase Row-Level Security. Passwords are stored hashed and are never accessible in plain text.
11 bis. Google user data (Google Calendar)
If you choose to import birthdays from Google Calendar, Pingr uses the Google Calendar API with the "calendar.readonly" permission. This section states exactly what we do with that data.
- Data accessed. The list of your calendars and, once, the birthday-type events of the current year (title and date). No other event, attachment, attendee or e-mail address is read.
- Data use. The first name, last name and birth date of the people identified are saved to your Pingr list to remind you of their birthdays. That is the only purpose. No Google data is used for advertising, profiling, or to train artificial-intelligence models.
- Data transfer. Google data is neither sold nor shared with third parties. It is hosted by our processor Supabase (see section 5), like the rest of your list.
- Data protection. The Google access token is used for a single server request and then discarded; no refresh token is requested or stored. Transfers are encrypted (TLS) and data at rest is protected by row-level access control in our database.
- Retention and deletion.Imported people stay in your list until you delete them, one by one in the app or all at once by deleting your account (section 8). You can revoke Pingr's access at any time from your Google account (myaccount.google.com/permissions).
Pingr's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
11 ter. Messaging between your people
You can write to an accepted person from their page: text, voice note, video or photo. These exchanges are ephemeral, in the manner of time-limited messaging apps:
- a text message is erased from our servers 24 hours after its recipient read it;
- a voice note, a video or a photo is erased 24 hours after it was sent, read or not;
- a message that was never read is erased at the latest 30 days after it was sent.
The recipient may save a voice note, a video or a photo to their phone before it expires; that copy is theirs and outside our control. We keep no archive of conversations, apart from the technical backups of the database, overwritten within 7 days. Any message can be reported from the app; a report keeps the message reference while it is handled.
12. Changes
This policy may be updated to reflect changes to the service or to regulations. Any substantial modification will be notified by email or via the app.
13. Contact
For any question related to your data: support@ping-r.com