Privacy Policy

1. Introduction

Welcome to Arrow to Pin ("we," "our," or "us"). This Privacy Policy explains what data the Arrow to Pin iOS application (the "App") processes, how it is processed, and the third-party services it relies on. By installing or using the App, you agree to the practices described here. If you do not agree, please do not use the App.

2. Information We Process

2.1 Location Data

The App requires access to your device's location services to provide its core functionality:

• Real-time location: your geographic coordinates (latitude and longitude) are read from Apple's Core Location framework to compute the direction and distance from your current position to a saved or shared point.
• Compass heading: your device's orientation is read from the magnetometer to display the directional arrow.

Location is processed entirely on-device. Your geographic coordinates are never transmitted to our servers, never stored remotely, and never shared with advertisers or analytics providers.

2.2 Saved Points (User-Generated Content)

You can save custom destinations ("Points"). Each point may include:

• Geographic coordinates
• A name (and optional alternative name)
• An optional category, country, photo, and pair of initials

All saved points are stored locally on your device using Apple's SwiftData framework. They are not synchronized to any server (including iCloud) and are deleted automatically when you uninstall the App.

2.3 Shared Point Links (Universal Links)

You can share a saved point with friends as a link of the form https://arrowtopin.com/share?n=...&lat=...&lng=.... The link encodes the point's name and coordinates only, no information about you, your device, or your other points is included. The link is delivered through whatever messaging app you choose (WhatsApp, iMessage, Mail, etc.); we do not see when, to whom, or how often you share.

2.4 Analytics & Crash Reports (Firebase)

The App uses Google Firebase Analytics and Firebase Crashlytics to understand product usage and diagnose crashes. These services collect:

• Anonymous event data: a small predefined set of in-app events (such as screen views, points added, compass opened, language changed) used to understand product usage. None of these events contains GPS coordinates, point names, photos, or any personal data.
• Crash reports: stack traces and device state captured automatically when the App crashes, used to fix bugs.
• Device & environment metadata: device model, iOS version, App version, and country/region (derived by Google from IP at request time).
• Pseudonymous instance ID: a Firebase-generated identifier reset when you reinstall the App.

Analytics events do not include your name, email, location coordinates, the contents of your saved points, or any contact-list data. You can disable IDFA-based identification through iOS Settings → Privacy & Security → Tracking → "Allow Apps to Request to Track" (off).

2.5 Remote Configuration (Firebase Remote Config)

The App fetches configuration parameters (e.g. ad unit IDs, kill switches, the list of "Our Apps" promoted in Settings) from Firebase Remote Config. The fetch is anonymous: it sends no user-identifying data. The response is cached locally for about 12 hours.

2.6 Push Notifications

Push notifications are optional. To enable them: Settings → Notifications → Push notifications. If you do not opt in, no push-related data leaves your device.

Once enabled, the App receives broadcast messages only (occasional landmark suggestions, app updates, astronomical events, links to relevant pages). No GPS coordinates, point names, photos, or personal data are sent back to our servers when handling a push. The push registration is anonymous and contains no personal information; it is automatically rotated after reinstall or app reset and deleted when the App is uninstalled. To stop receiving notifications, toggle the switch off in Settings → Notifications, or revoke permission via iOS Settings → Notifications → Arrow to Pin.

2.7 Advertising (Google AdMob)

Arrow to Pin is free; we cover hosting and development costs by displaying ads from Google AdMob:

• One banner ad at the bottom of the home screen.
• An occasional interstitial (full-screen ad) shown after meaningful actions (e.g. closing the compass).
• An app open ad shown briefly when you bring the App back to the foreground.

To serve ads, AdMob may receive:

• Your device's Identifier for Advertisers (IDFA), only if you grant Tracking permission via Apple's App Tracking Transparency (ATT) prompt.
• Approximate location derived from IP (country/region, not GPS).
• Device model, OS version, App identifier.

If you decline tracking, AdMob serves non-personalized ads based only on coarse, non-identifying signals.

2.8 Consent (Google User Messaging Platform / UMP)

In regions that require explicit consent for advertising data processing (EU/EEA under GDPR, California under CCPA, and others), the App displays a Google UMP consent form on first launch. Your consent choices are stored on your device and used by AdMob to determine whether to serve personalized or non-personalized ads. You can review and update your choices at any time via Settings → Legal → Ad Preferences within the App.

3. Third-Party Services

The App integrates the following third-party SDKs, each governed by its own privacy policy:

• Apple (MapKit, Core Location, StoreKit): maps, GPS heading, and review prompts. Apple Privacy Policy.
• Google Firebase (Analytics, Crashlytics, Remote Config, Cloud Messaging): usage analytics, crash diagnostics, and opt-in push notifications. Firebase Privacy & Security.
• Google Mobile Ads SDK (AdMob): banner, interstitial, and app open ads. Google Privacy Policy.
• Google User Messaging Platform (UMP): consent form for ads in regulated regions. Subject to the Google Privacy Policy linked above.

4. How Information Is Used

• Provide core functionality: compute compass direction, distance, and astronomical data from your on-device location.
• Persist saved points: store user-created points locally with SwiftData.
• Improve the App: aggregated, anonymous analytics help us prioritize features and find bugs.
• Show ads: support the free distribution of the App. Personalized ads only with your explicit consent in regulated regions.
• Display "Our Apps" and prompt for App Store reviews: driven by Firebase Remote Config and Apple's StoreKit, no user-identifying data sent.

5. Data Sharing & Disclosure

We do not sell, rent, or trade personal information. The only data leaving your device is:

• Anonymous analytics & crash reports → Google (Firebase).
• Ad requests, with optional IDFA based on your ATT/consent choice → Google (AdMob).
• Remote Config fetches (no user data) → Google (Firebase).

We may also disclose information if required by law or in response to a valid legal request, though our access to user data is limited to what the third-party services described above provide us.

6. Security

• Saved points are stored using Apple's SwiftData on your device's encrypted file system, protected by your device passcode/Face ID/Touch ID.
• The App offers an optional App Lock: a 4-digit PIN that protects access on launch and after returning from background. The PIN is never stored in clear text: only a SHA-256 hash with a random salt is kept in the iOS Keychain (device-only, not synced to iCloud).
• Network traffic from third-party SDKs uses HTTPS/TLS.

No method of digital storage or transmission is 100% secure. We encourage strong device passcodes and biometric protection.

7. Your Rights and Choices

7.1 Location Permission

Manage location access via Settings → Privacy & Security → Location Services → Arrow to Pin. The App requires location access to function; disabling it will prevent the compass from working.

7.2 Tracking (IDFA)

Manage tracking via Settings → Privacy & Security → Tracking. Toggling off "Allow Apps to Request to Track" prevents IDFA access for all apps, including Arrow to Pin / AdMob.

7.3 Ad Consent (UMP)

In regulated regions, you can review and update your ad consent at any time within the App: Settings → Legal → Ad Preferences.

7.4 Push Notifications

Enable or disable push notifications at any time via Settings → Notifications → Push notifications within the App. You can also revoke permission system-wide via iOS Settings → Notifications → Arrow to Pin.

7.5 Saved Points

You have full control: create, edit, favorite, delete, and share your points within the App. Deleting the App removes all locally stored points immediately.

7.6 Reset

The App's Settings → Reset App erases all on-device state and restores the default starter points. Specifically, it deletes:

• All user-created points and their attached photos.
• Every preference (compass thresholds, units, language, screen-on, haptic and sound toggles, Arabic month style, last selected tab).
• The App Lock PIN stored in the iOS Keychain (the App becomes unlocked again).
• The review-prompt counter and the App Open ad cooldown.
• The push notification registration; a new one is generated next time you re-enable notifications.

Reset is irreversible. It does not change your iOS permission grants (Location, Notifications, Tracking) or your ad consent choices stored by Google UMP; manage those via iOS Settings or Settings → Legal → Ad Preferences.

8. Children's Privacy

The App is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information through the App, please contact us so we can take appropriate action.

9. International Users

9.1 European Users (GDPR)

For users in the European Economic Area (EEA), United Kingdom, and Switzerland:

• The legal basis for processing analytics & ad data is your explicit consent, gathered through the UMP consent form on first launch and revisable at any time via the App's Ad Preferences screen.
• You have the right to access, rectify, erase, restrict, and port your data, and to object to processing. Most of these can be exercised directly through device settings (since saved points stay local). For analytics/ads queries, contact us at the address below.
• Data Controller: see Contact section.

9.2 California Users (CCPA / CPRA)

• We do not sell personal information.
• Limited "sharing" for advertising purposes (cross-context behavioral advertising) only happens if you grant tracking permission via ATT and consent via UMP. You can opt out at any time through those mechanisms.
• You have the right to know, delete, correct, and opt out of sharing.

10. Changes to This Privacy Policy

We may update this Privacy Policy when the App's data practices change (e.g. new SDK integrated, new feature). We will:

• Update the "Last updated" date at the top of this page.
• Post the new policy on this page.
• For material changes, mention the update in App Store release notes.

11. Contact

For privacy questions, GDPR/CCPA requests, or any concern about this policy:

• Email: contact@arrowtopin.com
• Contact form: arrowtopin.com/contact

We will respond within 30 days.