Privacy

Pinkha is local-first by design. Your notes, books, and shelves are stored exclusively on your device — they are never sent to a Pinkha server, because no Pinkha server exists.

What data we collect

It helps to separate two things: the app and this website.

The app has no Pinkha account, no advertising tracker, and no in-app analytics SDK. Your notes never leave your device. The only thing it sends is anonymous crash diagnostics (below).

This website (pinkha.app) uses privacy-friendly, cookieless analytics from Vercel to count visits and measure page speed (below). It can never see your notes — the app and the website are entirely separate.

Crash reports (Sentry)

To detect crashes and performance regressions, Pinkha sends anonymous diagnostic data to Sentry. This includes:

• Crash stack traces and the iOS version at the time of the crash;
• Anonymous device model (e.g. iPhone 17,1);
• Tracing of app-internal operations to identify slow paths.

These reports never contain the content of your notes, your book entries, or any text you have typed. You can verify this in the source: see Observability.swift.

Website analytics (Vercel)

pinkha.app is hosted on Vercel and uses Vercel Web Analytics and Speed Insights. Both are cookieless: no persistent identifier is written to your device, and there is no cross-site tracking. Per Vercel's documentation, they collect:

• Page views — the pathname only, never the query string;
• Your browser type (user-agent) and device category;
• Approximate location at country level only;
• The referrer (the page you arrived from);
• An anonymized, short-lived identifier — no cookies, no persistent ID.

Speed Insights additionally measures real-world loading performance (Core Web Vitals) so we can keep the site fast. None of this involves the app or your notes. See Vercel's analytics privacy documentation.

Notion import (optional)

If you choose to import from Notion, Pinkha uses Notion's official OAuth flow. The exchange goes through our token proxy at notion-proxy, which only forwards the OAuth handshake — your Notion access token is never stored on our servers. It is delivered directly to the app and persisted in the iOS Keychain on your device only (kSecAttrAccessibleWhenUnlockedThisDeviceOnly, never synced to iCloud).

Note: while the OAuth flow is happening, our proxy is the intermediary between Notion and the app. Notion's own data handling applies to anything you have stored there — see Notion's privacy policy.

Other imports (Bear, Craft)

Bear and Craft imports are 100% local. You select a file from the iOS Files app, Pinkha reads it on-device, and converts it into pinkha notes. Nothing leaves your device.

Third-party services summary

• Sentry (app crash + performance) — anonymous, no note content.
• Vercel (website hosting + analytics) — cookieless, country-level location, no note content.
• Notion API (only if you import) — via our OAuth proxy, no token storage server-side.
• Apple TestFlight (beta only) — Apple's own telemetry applies, see Apple's policies.

Your rights

Because we do not store any personal data, there is nothing for us to delete or hand over. To stop all diagnostic reporting, uninstall the app.

Contact

Questions: ybikouta.pro@icloud.com