Privacy policy
PingPing is an Android app for following people, sharing photos, and chatting. It's made by 96DEV, an individual developer based in Vietnam. In this policy, "we" and "us" mean 96DEV. It explains what personal data PingPing collects, why, who it's shared with, how long we keep it, and what choices you have. We don't show ads, we don't sell your personal data, and PingPing doesn't use analytics or crash-reporting tools. For privacy questions, email support.pingping@96studio.dev.
Data we collect
When you sign in with Google, PingPing asks for your basic profile and email address, and nothing else. Here is everything we collect and store.
- Google account details: your Google account ID, your verified email address, your name, and your profile photo. We use the ID and email to identify your account, confirm purchases, and reply when you contact us. We never show your email to other users.
- Profile: your username, display name, and profile photo. They start from your Google details and you can edit them. They're public.
- Photos and captions: photos you take with the PingPing camera, any caption you add, and who can see each post (all followers, friends, or chosen people). Filters run on your device, and the photo is re-encoded on your device before it's uploaded. If you choose a profile photo from your camera or library, that photo is uploaded too.
- Saved audience lists (Pro): the lists you create and the people in them.
- Follows and blocks: who you follow, who follows you, follow requests (who asked whom, and when), who you've blocked, and your recent lookups of other users.
- Messages: the text of your one-to-one chats, who sent each message, and when. A reply to a photo is a chat message that points to that post.
- Reports: when you report a profile, a post, or a message, the reason you choose, any details you write, who and what you reported, and when. We also keep a copy of what was reported: for a profile, the username, name, and photo; for a post, the caption and photo; for a message, the text and when it was sent.
- Notification token: if you allow notifications, a token that identifies your device for notifications, plus the platform (Android).
- Widget and Discover settings: the person pinned to your widget (Pro) and your Discover photo frames (Pro). Your widget theme stays on your device only.
- Pro status: whether you have Pro, your plan, renewal and billing status, and when it ends. If you subscribe, we also share your account ID and email with RevenueCat.
- Sign-in sessions: your sign-in tokens. Our servers keep only scrambled (hashed) versions of them.
- Terms agreement: the date you agreed to our Terms of use, and which version of them you agreed to.
- Technical data: like any online service, the providers that host and deliver PingPing may process technical data, such as your IP address, when your device connects.
- Emails you send us.
What we don't collect or use:
- Your location.
- Your contacts.
- Your microphone. PingPing doesn't record audio or video.
- Your advertising ID.
- Your clipboard. PingPing only copies your profile link when you ask it to, and never reads what's on your clipboard.
- Analytics or crash reports about how you use the app.
Device permissions
PingPing asks for a permission only when a feature needs it.
- Camera: to take photos, and to scan PingPing QR codes. QR codes are read on your device and the scan isn't uploaded.
- Photos: to let you choose a profile photo, or a QR code image to scan. PingPing uses only the photo you pick. A QR code image is read on your device and isn't uploaded.
- Notifications: to alert you to new messages, new photos, follow requests, and accepted requests. You can turn them off in Settings, or in your Android settings.
How we use your data
We use your data to:
- Create your account and run PingPing.
- Show your posts to the audience you chose, and deliver your messages.
- Send notifications and keep your home-screen widget up to date.
- Confirm your Pro subscription.
- Record that you agreed to our Terms of use.
- Keep PingPing safe, review reports, enforce our terms, and protect children.
- Meet our legal obligations.
- Answer your emails. We use your data only for these purposes. By using PingPing, you agree to us processing your data as this policy describes.
Who can see your data
- Everyone: your name, profile photo, and username are public, including on your profile page at pingping.cam/yourusername, even if your account is private. Your Pro badge is visible too. Anyone can send you a follow request.
- Your audience: your posts and captions are shown in the app to the audience you chose. Your account is public by default. If you make it private, people who already follow you keep seeing your posts, and new followers need your approval first.
- Photo links: photo files are stored at long, random web addresses that are very hard to guess. Anyone who has the exact address can open the photo, even if they aren't in your audience. People who can see a photo can also save or share it.
- Reports: only we can see them. The person you report isn't told that you reported them, or who reported them.
- Messages: only the people in the chat can see them in the app. Messages are not end-to-end encrypted. They're stored on our servers in readable form, so 96DEV could technically access them. We only look at messages when we need to, for example to investigate a report, keep PingPing secure, or meet a legal requirement.
Who we share data with
We don't sell your personal data or share it for advertising. We share data only with the service providers that run PingPing, and with authorities when we have to.
- Cloudflare: hosts PingPing. It stores your account data, posts, messages, follows, and reports, stores your photo files, and delivers chat messages in real time. Its servers are in Europe and North America.
- Google: provides Google Sign-In, which gives us your account details. Google also delivers notifications to your phone through Firebase Cloud Messaging, and processes payments through Google Play.
- RevenueCat: confirms your Pro subscription. It receives your PingPing account ID and email. Google Play and RevenueCat process purchase data, such as your plan and your subscription dates and status. PingPing never receives your card or payment details.
- Authorities: we may share data when the law requires it, to respond to valid legal requests, or to protect someone's safety. This includes reporting child sexual abuse and exploitation to the National Center for Missing & Exploited Children (NCMEC) or to law enforcement, as the law requires.
Notifications for new messages show the sender and part of the message text, and they pass through Google's notification service. Other notifications can include the name, username, and photo of the person involved. These can appear on your lock screen depending on your Android settings.
Where your data is processed
PingPing's servers are in Europe and North America, so your data may be processed outside Vietnam and outside the country where you live. By using PingPing, you understand your data may be transferred to and processed in those places.
Data stored on your device
PingPing keeps some data on your device:
- Your sign-in token, kept in Android's secure storage, and your basic account details (name, email, and profile photo).
- A copy of your chats, in a database encrypted with a key kept in Android's secure key storage.
- Your follows, and cached posts, profiles, followers, and settings, so the app loads faster.
- Data for your home-screen widget: the latest photo, name, username, and profile photo of people you follow, and your pinned person.
- Your language and widget theme.
PingPing turns off Android app backups, so this data isn't copied to cloud backups. Clear cache in Settings removes cached data. Signing out removes your sign-in and cached data from the device. Your language and widget theme stay. Signing out doesn't delete your account or anything on our servers.
How long we keep your data
- Account data, posts, and messages: kept while your account exists. Posts and messages have no automatic expiry.
- Deleted accounts: if you delete your account in the app, we delete it and its associated data right away. If you ask us by email, we do it within 30 days of a verified request. See "Delete your data and your rights" for what is deleted and what we keep.
- Reports: kept after an account is deleted, for safety and legal reasons. We may also keep what the law requires, such as records related to child sexual abuse and exploitation. We keep and report those as the law requires.
- Cached photo copies: after a photo is deleted, copies may stay in our hosting provider's cache until the cache expires, which can take up to one year.
- Follow requests: until they're accepted, declined, or canceled.
- Sign-in sessions: they expire after 90 days without use, and expired sessions are deleted daily.
- Notification token: removed from our servers when you turn off notifications in Settings or sign out.
- Old usernames: held for 14 days after you change your username.
- Purchase records: Google Play and RevenueCat keep their own records under their own policies.
Delete your data and your rights
You can delete your account in the app, or ask us to.
- In the app, open Settings, then Delete account, and confirm. We delete your account and its associated data right away, you're signed out on every device, and it can't be undone. The steps are also at pingping.cam/account/delete.
- If you can't use the app, email support.pingping@96studio.dev from the email address on your account. We may reply to confirm it's you. We then delete your account and its associated data within 30 days.
- To remove a specific post or message, email us and tell us which one. PingPing can't delete a single post or message in the app yet.
- If you have Pro, cancel your subscription in Google Play first. Deleting your account doesn't cancel it.
Deleting your account deletes:
- Your profile, username, and profile photo.
- Every photo you've posted, and the photo files we store.
- Your chats, including the messages the other person sees. They're deleted for both people.
- Your follows, followers, follow requests, and blocks, and the lists, widget pick, and photo frames saved with your account.
- Your notification token, your Pro status record, and your sign-in on every device.
We keep:
- Reports you sent. They're kept without any link to your account.
- Reports other people sent about you, and the copy of what was reported. They're kept for safety and legal reasons.
Also, copies of photos may stay in our hosting provider's cache until the cache expires, which can take up to one year. Anyone who has a photo's exact address can open a cached copy until then. Anyone who already saved or shared a photo keeps their copy. If you sign in again with the same Google account later, you get a new, empty account.
Depending on where you live, including under Vietnam's Decree 13/2023/ND-CP, you may have the right to:
- Know what data we hold about you, and get a copy.
- Correct it. You can edit your name, profile photo, and username in the app.
- Delete it.
- Withdraw your consent, or object to or limit how we use your data.
- Complain to your local data protection authority.
To use any of these rights, email us. We'll reply as soon as we can, and within the time the law requires. You also have these controls in the app: make your account private, block and report people, turn off notifications, clear cache, sign out, and delete your account.
How we protect your data
- Every connection between PingPing and our servers uses HTTPS.
- Your sign-in token is kept in Android's secure storage, and our servers keep only hashes of your sign-in tokens.
- Your chat copy on your device is encrypted.
- Android app backups are turned off.
No system is perfectly secure, so we can't promise absolute security. Messages and photos are not end-to-end encrypted. Keep your Google account secure. If a data breach affects you, we'll tell you and the authorities as the law requires.
Children
PingPing is not for children under 13. We don't knowingly collect data from them. If you're old enough to use PingPing but the law where you live requires a parent's consent for someone your age, you need it first. If you think a child under 13 is using PingPing, or you're a parent who wants a child's account deleted, email support.pingping@96studio.dev. We'll delete the account and its data. For how we handle child safety on PingPing, see the Terms of use.
Changes to this policy
We may update this policy from time to time. The latest version is always in the app under Settings, then Legal, and at pingping.cam/legal/privacy, and the date at the top shows when it last changed. If you keep using PingPing after a change, you accept the updated policy.
Contact
96DEV, an individual developer based in Vietnam. Email support.pingping@96studio.dev for privacy questions, data requests, and child safety concerns. This policy is also governed by the laws of Vietnam, without removing any mandatory protections you have where you live.