Data Retention Policy

We keep personal information only as long as we need it for the purpose we collected it, or as long as the law requires.

• Account profile — for the life of the account, then deleted within 30 days of account deletion.
• Trips, places, itineraries and journal entries — for the life of the account, then deleted within 30 days.
• Uploaded photos and files — for the life of the account, then deleted within 30 days; backup copies purge within 90 days.
• Shared trip links — until you revoke them or the account is deleted.
• Notifications and activity feed — 12 months.
• Support conversations — 24 months after the ticket closes.
• Billing and tax records — 7 years, as required by law.
• Security and audit logs — 12 months.
• Cached weather, currency and place data — hours to days, depending on the source.
• Aggregated, de-identified analytics — kept indefinitely; it cannot be linked back to you.

If an account is unused for 24 months we email the address on file. If there is no sign-in within 60 days of that email, we may delete the account and its content.

Deleted content can persist in encrypted backups for up to 90 days. Backups are never used to restore individual deleted content, only to recover from a system failure.

Content you contributed to a shared trip — comments, votes and places you added — may remain visible to other members after you leave, shown without your name where possible.

To ask about retention of specific data, email privacy@pinphy.app.