Privacy Policy
PinStash by LokiSec
Effective: 2026-06-19 · Publisher: LokiSec · Contact: privacy@lokisec.de
Our commitment
SpotKeeper is built on the principle that **your spots are your own**. It is local-first, works entirely offline, and collects zero personal data by default.
What we collect
Nothing. PinStash stores all data locally on your device. There is no account, no cloud backup, and no tracking by default.
We do not collect:
- Your name, email, or contact information
- Your spots, lists, photos, notes, or visit logs
- Location data or movement history beyond the coordinates you save to a spot
- Telemetry, crash reports, or usage analytics
Data storage
All PinStash data is stored in app-private local storage on your device only. This data:
- Is never sent to LokiSec servers
- Is never shared with third parties
- Remains yours to delete at any time
- Is lost only if you uninstall the app or factory-reset your device
Optional features
Google Drive Sync (Optional)
If you choose to enable Google Drive sync, backups are stored in your own Google Drive account in a private appDataFolder that only this app can access. LokiSec does not operate any sync server and has no access to your synced data. Sync is entirely optional and the app works perfectly without it. You can disable sync at any time and delete your backup from Google Drive.
GPS Location (Optional)
You can optionally capture your current GPS coordinates when adding a spot, or enter them by hand. SpotKeeper only reads your location when you ask it to, and stores only the coordinate you attach — no continuous location history.
Optional Affiliate Links
SpotKeeper may show clearly-labelled links to outdoor gear, GPS handhelds, field guides, and foraging and fishing kit. If you buy through one, LokiSec may earn a small commission at no extra cost to you. These links are always optional and never placed inside your spots.
Purchases
Some apps include in-app purchases (an optional support purchase or a one-time unlock). Payments are processed by Google Play; LokiSec receives only a confirmation that a purchase was made and collects no payment details or other personal data.
Permissions explained
| Permission | Why | Required? |
|---|---|---|
ACCESS_FINE_LOCATION / ACCESS_COARSE_LOCATION | To show your position on the map and capture the coordinates of a spot | No — you can always type coordinates by hand |
CAMERA | To photograph a spot | No — you can keep spots in text or pick existing photos |
Data export and deletion
You always retain full control:
- Export your spots as CSV, GeoJSON, or GPX via Settings → Export
- The file is written to a location you choose
- Delete a spot or list, or uninstall the app, to remove the data immediately
- If you've enabled Drive sync, delete the backup from your Google Drive separately
Map data
SpotKeeper displays maps using OpenStreetMap data, © OpenStreetMap contributors. Photos you attach to a spot are stored only on your device and are never uploaded, even when Drive sync is enabled.
Legal compliance
GDPR: We collect no personal data, so there is nothing on our servers to access or delete — your data is yours and lives on your device.
Security
All local data is stored in app-private storage with standard Android file permissions. If you enable Drive sync, encryption is handled by Google Drive. The app does not store passwords or credentials in plain text.
Changes to this policy
We may update this policy occasionally. The "Effective Date" at the top shows when it was last updated. Continued use of PinStash after changes constitutes acceptance of the updated policy.
Aufsichtsbehörde / Supervisory Authority
Die zuständige Aufsichtsbehörde für datenschutzrechtliche Beschwerden ist:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18, 91522 Ansbach, Deutschland
Telefon: +49 (0) 981 180093-0
E-Mail: poststelle@lda.bayern.de
Web: https://www.lda.bayern.de/
Beschwerden können auch bei jeder anderen Datenschutzaufsichtsbehörde in einem EU-Mitgliedstaat eingereicht werden, in dem der Betroffene seinen Wohnsitz hat.
The competent supervisory authority for data protection complaints is the Bavarian State Office for Data Protection Supervision (BayLDA). Complaints may also be filed with any other EU data protection authority where the data subject resides.
Questions or concerns?
- Privacy questions: privacy@lokisec.de
- General support: support@lokisec.de
- Publisher: LokiSec — Impressum
About LokiSec: LokiSec is an independent software publisher based in Germany. We build simple, privacy-respecting apps for Android. lokisec.de