Privacy policy
Last updated 15 November 2026
Pinloom is a place to pin storyboards, mood boards and plans, and keep them in sync across your devices. Your boards are your work, so we collect as little as we can, protect what we keep, and never sell it.
The short version
- We collect your email address, the boards you make, and basic usage counts. That’s about it.
- Your boards are private to you. They’re encrypted on our servers and other users can’t open them.
- We don’t look at your boards, sell your information, show ads, or use your boards to train AI.
- We email you for things you need, like sign-in links and important changes. News emails only go to people who ask for them.
- You can download your boards anytime and ask us to delete everything.
1. Who we are
Pinloom is an independent product run from Ontario, Canada. In this policy, “Pinloom”, “we”, “us” and “our” mean the people who run Pinloom, and “you” means anyone who visits pinloom.net or uses the Pinloom app.
We follow Canada’s federal privacy law, the Personal Information Protection and Electronic Documents Act (PIPEDA), and Canada’s Anti-Spam Legislation (CASL). Where we handle information about people in Quebec, we also follow Quebec’s Act respecting the protection of personal information in the private sector (as updated by Law 25).
Our Privacy Officer is responsible for making sure we follow this policy. You can reach them at hello@pinloom.net.
2. What this policy covers
This policy explains how we collect, use, share and protect personal information, meaning information about an identifiable person, when you:
- visit pinloom.net;
- create an account or sign in;
- use Pinloom, with or without an account;
- email us or otherwise get in touch.
It doesn’t cover other websites you reach through links on your boards. Those sites have their own privacy policies.
3. Information we collect
Information you give us
| What | Why |
|---|---|
| Your email address | To create your account, sign you in and contact you about your account. |
| Your name and profile picture, if you sign in with Google or Apple | To show who’s signed in. We only receive what you allow those services to share. |
| Your boards: notes, images, links, colours, sketches and anything else you add | To store your work and sync it to your devices. |
| Your email preference: whether you asked for news emails, when, and where you asked | To send news only to people who want it, and to keep a record of that consent as the law requires. |
| Messages you send us | To answer you and help with problems. |
Information collected automatically
- Visit counts. We use Cloudflare Web Analytics to see things like how many people visited, which pages they viewed, the type of browser and device, and the country they came from. It doesn’t use cookies and doesn’t follow you across other websites.
- Technical logs. Our hosting and database providers keep short-lived logs, such as IP addresses and the time of a request, to run the service, keep it secure and fix errors.
- Sign-in records. When you created your account and when you last signed in.
What we don’t collect
We don’t ask for your phone number, home address, date of birth or payment details. Pinloom is free right now, so there’s nothing to pay for. If that changes, we’ll update this policy before we start collecting payment information.
Using Pinloom without an account
If you choose “Use without an account”, your boards are saved only in your browser on that device. They aren’t sent to us, and we can’t see or recover them.
4. How we use it
We use your information only for the reasons below, or for a new reason you’ve agreed to:
- to provide Pinloom: storing your boards, syncing them and signing you in;
- to send messages you need about your account and the service (see Emails we send you);
- to send news and updates, only if you’ve asked for them;
- to answer your questions and help when something isn’t working;
- to keep Pinloom secure, prevent abuse and investigate problems;
- to understand how many people use Pinloom and which features matter, so we can improve it;
- to meet our legal obligations.
We don’t sell or rent your information. We don’t use it for advertising, we don’t build advertising profiles, and we don’t use the content of your boards to train artificial intelligence.
5. Your consent
By creating an account, you agree to us collecting and using your information as this policy describes. Whenever we ask for something optional, like news emails, we ask separately, and the box starts unticked.
You can withdraw your consent at any time. If you withdraw consent for something Pinloom needs to work, like storing your email address to sign you in, we may no longer be able to provide your account. In that case we’ll explain what that means and help you download your boards first.
6. Emails we send you
Service emails
If you have an account, we’ll email you when it matters for your account or for Pinloom itself. For example:
- sign-in links and codes;
- security alerts, such as an unusual sign-in or a data breach that affects you;
- important changes to Pinloom, this policy or our terms;
- notice before we change or stop a feature you use, or before we close the service;
- replies to messages you send us.
These messages aren’t marketing, so they don’t need your separate permission and you can’t unsubscribe from them while you have an account. We keep them rare and free of advertising.
News emails
Now and then we may send news about Pinloom, like new features, tips and announcements. We only send these if you’ve asked for them, either by ticking the box when signing in or by choosing Get news emails in your account menu.
Every news email includes our contact details and an unsubscribe link. You can also stop them anytime by choosing Stop news emails in your account menu (the circle with your initial), or by emailing us. We’ll act on an unsubscribe request within 10 business days, and usually straight away.
7. Who can see your boards
Only you. Your boards are encrypted on our servers and locked to your account, so no other user can open them.
We don’t look at your boards. The only exceptions are:
- if you ask us to help with a problem and give us permission to look;
- if the law requires it, for example a valid court order;
- if we have a good reason to believe it’s needed to protect someone’s safety or to stop serious abuse of Pinloom.
Access to our database is limited to the people who run Pinloom and used only for the reasons above.
8. Who we share information with
Service providers
We use a small number of trusted companies to run Pinloom. They process information only on our behalf, only to provide their service, and under contracts that require them to protect it.
| Provider | What they do | Information involved |
|---|---|---|
| Supabase | Database, sign-in and file storage | Email address, sign-in records, email preference, boards and images |
| Cloudflare | Website hosting, security, visit counts and forwarding emails sent to our address | Technical logs, visit counts, emails you send us |
| Our email delivery provider | Sending sign-in and service emails, and news emails if you asked for them | Email address, email content |
| Google and Apple, only if you choose to sign in with them | Confirming who you are | Information you allow them to share |
If we add or change a provider that handles your information, we’ll update this list.
Legal reasons
We may disclose information if we’re required to by law, such as a subpoena, warrant or court order, or where Canadian law allows it, for example to investigate fraud or protect someone’s safety. Where we’re allowed to, we’ll tell you before we disclose your information, so you have a chance to object.
If Pinloom changes hands
If Pinloom is sold, merged or transferred, your information may be transferred to the new owner so the service can continue. The new owner must keep protecting it under the terms of this policy, and we’ll tell you before your information falls under a different privacy policy.
Never for sale
We don’t sell, rent or trade your personal information, and we don’t share it with advertisers.
9. Where your information is stored
Our providers run data centres in several countries, so your information may be stored or processed outside Canada, including in the United States. When it is, it’s subject to the laws of that country, and authorities there may be able to access it under their law.
We stay responsible for your information wherever it’s stored. We choose providers with strong security, and our contracts with them require protection comparable to what you’d have in Canada.
10. Cookies and browser storage
Pinloom doesn’t use advertising or tracking cookies. To work, the app saves a few things in your browser’s own storage:
- your sign-in session, so you stay signed in;
- a copy of your boards, so they open quickly and work offline;
- your settings, like your background colour.
When you sign out, we remove your boards and session from that browser. You can also clear this storage anytime in your browser settings, though you’ll need to sign in again.
11. How we protect it
We use safeguards that match how sensitive your information is, including:
- encryption for everything sent between your device and Pinloom (HTTPS);
- encryption for stored data, including boards, images and backups;
- database rules that let each account read only its own boards;
- passwordless sign-in links, so there’s no Pinloom password to steal;
- limited, protected access for the people who run Pinloom;
- security protections from our hosting provider against attacks and abuse.
No system is perfectly secure, but we work hard to protect your information and to improve as we grow. If you think your account has been accessed by someone else, please email us straight away.
12. If something goes wrong
If a breach of security affects your personal information and creates a real risk of significant harm to you, we will:
- tell you as soon as we can, including what happened, what information was involved, and what you can do to protect yourself;
- report it to the Office of the Privacy Commissioner of Canada and, where people in Quebec are affected, to the Commission d’accès à l’information du Québec;
- notify any other organisation that can help reduce the harm;
- keep a record of the breach and the steps we took to fix it and prevent it happening again.
13. How long we keep it
We keep your information only as long as we need it for the reasons in this policy:
- Account and boards: for as long as you have an account.
- After you delete your account: we delete your account and boards from our live systems within 30 days. Backup copies are erased on our providers’ normal schedule and aren’t used for anything else in the meantime.
- Email consent records: while you’re subscribed and for up to three years after, so we can show we had permission if we’re ever asked.
- Technical logs: usually a few days to a few weeks, depending on the provider.
- Emails you send us: for as long as needed to help you, and no more than two years after the conversation ends.
We may keep some information longer if the law requires it, or if we need it to resolve a dispute.
14. Your rights and choices
You have the right to:
- Access the personal information we hold about you and learn how we’ve used and shared it.
- Correct information that’s wrong or incomplete.
- Take your boards with you. Choose Export backup in the menu to download a copy anytime, or ask us for your information in a common, structured format.
- Delete your account and everything in it.
- Withdraw consent, for example by stopping news emails.
- Complain to us or to a privacy regulator (see Questions and complaints).
To make a request, email hello@pinloom.net from the address on your account. We may ask you to confirm it’s really you before we act. We’ll respond within 30 days and won’t charge you. If we need more time, or can’t do what you ask, for example because the law requires us to keep something, we’ll tell you why and explain your options.
15. Children
Pinloom isn’t meant for children under 13, and we don’t knowingly collect information from them. Teens aged 13 to 17 should use Pinloom only with a parent’s or guardian’s permission. If you believe a child under 13 has given us personal information, please email us and we’ll delete it.
16. Changes to this policy
We may update this policy as Pinloom grows or the law changes. Canada’s federal privacy law is also being reviewed. When we update it, we’ll change the date at the top of this page.
If a change matters for how we use your information, we’ll tell you by email or in Pinloom before it takes effect. If a change means using your information for a new purpose, we’ll ask for your consent first.
17. Questions and complaints
If you have a question or concern about your privacy, please contact our Privacy Officer first at hello@pinloom.net. We take every concern seriously and will reply within 30 days.
If you’re not satisfied with our answer, you can complain to:
- the Office of the Privacy Commissioner of Canada;
- if you live in Quebec, the Commission d’accès à l’information du Québec;
- if you live outside Canada, the privacy regulator where you live.
Pinloom · Ontario, Canada · hello@pinloom.net