Privacy Policy
Pingy — last updated 5 October 2026
Pingy is a group trip app: one plan, one map and one chat for the people on a trip. It is made by CKT Group LLC ("we"). This page says what Pingy keeps, what it sends to other companies to do its job, and what it never does.
What Pingy keeps
- Your account: your email address, the name you choose and your profile photo, and how you sign in (an email code, Google or Apple). Signing in with Google fills in your name from your Google account; you can change it.
- Your trips: each trip's name, dates and destination, its plan (stops, times, notes, recommendations), the places people drop on its map, an "I'm here" pin if you drop one, and who is on it.
- The trip's chat: messages, reactions, photos and GIFs, and the trip's photo album.
- Money: the expenses and receipts people add to a trip, who paid and who owes, the receipt's photo, and the payment app names you choose to show your trip (for example a Venmo username). Pingy never holds or moves money.
- Your settings: notification choices, the people you have blocked, reports you have made, and whether you have agreed to the AI features.
- Reports about a shared plan: reports someone makes about a shared plan, with the plan as it was reported. Nothing about who made the report.
- Notifications: your phone's push token, so a trip's messages can reach you.
This is stored with our database provider, Supabase, in the United States. Only the people on a trip can see that trip; the database enforces it. One exception, by design: anyone holding a trip's invite link sees its invite card — the trip's name and dates, the name of the person who invited them, and how many people are going and how many stops are planned. Nothing else. The link stops working when a curator resets it or the trip ends.
Sharing a plan. Share this plan makes a public link to a copy of the plan as it is when you share it: the stops by day, and on a curator's link their times and, if the curator chooses, their notes with any source link, and a Google map of them. Never the dates, the people, the chat, money, photos or anyone's location. Anyone with the link can see it and copy it into their own trip. Update shared version replaces the copy; Stop sharing ends the link and its pictures. A link also stops when you leave the trip, the trip is deleted or you delete your account.
Our servers (Supabase, Cloudflare for the part that talks to other companies, and Netlify for the website and the web app) keep ordinary logs, including IP addresses, for a short while to keep the service running and safe.
Location
The trip map shows where you are while the app is open. That position stays on your phone, with one exception: when you ask Pingy a question on your phone and Pingy already has permission to use your location, it sends roughly where you are (rounded to about 100 metres) with that one question, so "coffee near me" means near you. It is used for that answer and not kept. Pingy never asks for your location just to answer a question.
"I'm here" drops a single pin where you are now, with a note if you add one, for the people on that trip. It stays until the end of that day in the trip's time zone.
Live sharing only ever starts when you tap Share my location on a trip and choose how long: 1 hour, 4 hours, or until midnight. While it runs, the people on that one trip see you move on the map, even when your phone is locked. It stops when you tap Stop or the time runs out. Only your latest position is kept while you share: Stop deletes it at once, and when the time runs out it is hidden at once and deleted within minutes. Pingy never records where you have been. The web app never uses your location.
What is sent to other companies
Some features need another company's service. Each gets only what that feature needs, and only the email service below ever sees your email address.
The AI features go through our own server, which sends them on, without your email or name, to the AI service providers we use:
- A question to Pingy, or a receipt — when you ask Pingy a question (typed, or spoken instead of typed), when you speak to "Just tell us" instead of typing, and when you scan a receipt: your words or your recording, or the receipt's picture or PDF, with the trip's destination, the local time and the stops on its current plan (for a question) or its currency (for a receipt). An answer can draw on Google Maps.
- A trip plan — when Pingy writes a plan for you or changes one: the words you wrote, the answers you picked or the plan you pasted, with the trip's dates, destination, where you are staying and its current stops. Writing a plan can search the web for real places, and building or changing a plan looks its stops up in Google Places.
A current list of these providers is available on request at support@thecktgroup.com.
Maps, places and pictures are loaded by your phone or browser straight from the company that provides them, which sees your device's IP address as any website does:
- Google Maps and Google Places — the map you are looking at, and the words when you search for a place or add one.
- Google Static Maps — the shared page asks Google for a map of the stops' positions, never their names or anything about you, each time it is viewed.
- Unsplash — a trip's cover photo, picked by our server from the trip's destination.
- Klipy — GIFs: our server sends your search words; the GIFs load from Klipy.
- Stay22 — when you look for a hotel near your plan, Stay22's own page opens with the trip's area and dates. It is an affiliate link: Stay22 may pay Pingy if you book.
Notifications go through Expo's push service to Apple or Google: a chat message's text and who sent it, so it can show on your lock screen.
Sign-in emails are sent by Resend: your email address and the one-time code, so the code can reach you. A report about a shared plan reaches us by email through Resend too, with nothing about who made it.
Crash reports go to Sentry when the app crashes or hits an error: what went wrong in the app's code, the app version, and the type of phone or browser. Never your name, email, messages, photos, trips or location.
Pingy asks before the first time any AI feature is used on your account, and none of them runs until you agree. What an AI feature answers is a suggestion, not advice; check it before you rely on it.
What Pingy never does
No ads. No analytics or tracking: the only thing the app reports on its own is a crash report, as above. Nothing is sold, rented or shared for anyone's marketing.
Age
Pingy is for adults: it is not for anyone under 18, and we do not knowingly keep information about them. If you think someone under 18 has an account, write to us and we will delete it.
How long things are kept
Your account and trips are kept while you use Pingy. Live positions are deleted within minutes of a share ending. The person who created a trip can delete it, which deletes its plan, chat, photos, money and pins for everyone. Someone who leaves a trip stops seeing it.
Deleting your account
You can delete your account from the app at any time, or ask us by email. What that removes and what stays is on Delete your account.
Contact
Write to support@thecktgroup.com.